{"report_id":"1564c848-5f60-4305-a555-88a29d5eaf20","version":6,"status":"done","tags":[],"date":"2025-10-08T08:01:04Z","url":{"schema":"http","addr":"viet69vn.li/","fqdn":"viet69vn.li","domain":"viet69vn.li","tld":"li"},"ip":{"addr":"172.67.131.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"title":"VIET69 - Tổng hợp Phim sex Clip sex Việt Nam"},"submit":{"url":{"schema":"http","addr":"viet69vn.li/","fqdn":"viet69vn.li","domain":"viet69vn.li","tld":"li"},"ip":{"addr":"172.67.131.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T08:01:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"viet69vn.at","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-08T08:01:07.484416Z","last_seen":"2025-10-08T08:01:07.484416Z","alert_count":0,"request_count":4,"received_data":168785,"sent_data":2470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:21.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-10-06T14:42:12.054187Z","alert_count":0,"request_count":2,"received_data":987989,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":367223,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.viet69vn.at","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-08T08:01:07.486999Z","last_seen":"2025-10-08T08:01:07.486999Z","alert_count":0,"request_count":5,"received_data":128651,"sent_data":2324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-10-06T03:15:20.384485Z","alert_count":2,"request_count":2,"received_data":1788424,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"viet69vn.li","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-05-22T23:49:08.56776Z","last_seen":"2025-08-22T04:24:08.457666Z","alert_count":0,"request_count":1,"received_data":149853,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"citadelexampleruckus.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":355998,"first_seen":"2025-06-17T02:37:30.923275Z","last_seen":"2025-10-01T16:27:30.747002Z","alert_count":0,"request_count":4,"received_data":193277,"sent_data":2904,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.wwaotbfk.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-10-08T08:01:07.478119Z","last_seen":"2025-10-08T08:01:07.478119Z","alert_count":0,"request_count":2,"received_data":1787964,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.viet69vn.at","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-08T08:01:07.46395Z","last_seen":"2025-10-08T08:01:07.46395Z","alert_count":0,"request_count":28,"received_data":886129,"sent_data":14080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wwaotbfk.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-10-08T06:55:34.162802Z","last_seen":"2025-10-08T06:55:34.162802Z","alert_count":0,"request_count":1,"received_data":1502,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"anytimebananarecoil.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":582730,"first_seen":"2025-05-19T16:28:57.384755Z","last_seen":"2025-08-25T22:53:38.003472Z","alert_count":0,"request_count":8,"received_data":186456,"sent_data":6198,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"androidduvetscribble.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":72185,"first_seen":"2025-05-19T23:31:49.928325Z","last_seen":"2025-10-01T10:31:08.67552Z","alert_count":0,"request_count":5,"received_data":162199,"sent_data":3783,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11c8825d314c8d45462368c5ebe465c4","sha1":"0147131fcd154e343f3f088d1671b515304054f1","sha256":"3d6f3ca1c967a52b6866f7ec4d09d1a7ef9c62a82901d90da30eae21dfaf4638","sha512":"74d1c149926af22863dab941990735813b3ecd3cf6a5f263934f47b808c624833cffb593699a3a5a85e2b9f39e8d2c356532e702179a3d7006eab62031fece28","ssdeep":"","tlshash":"f36199993779388b317b14e3aa6f0e0beb76543716c4d034c9baa7142cb14a3c379d49","size":3283,"data":"","first_seen":"2025-10-08T08:01:19.98002Z","last_seen":"2025-12-01T08:51:26.288533Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b777a9491afc29dcf9295c57a9605262","sha1":"3b76906e4d43406170e1c74774a4bc4811ca7119","sha256":"0d297cb8472b45852973383f0f2b0c9ca59d61c87753d7020431f0eb2bd4dbd8","sha512":"c94cd10b2017594b79e0baa746125493cfff8c8ca7517881b2e8b3d10b81082c53b2b5f61e4961ea9a48ce15eea8e13e376af388552dd777d27323ae61837275","ssdeep":"","tlshash":"c9c04cc8211a5c7155e62b408b7fb604b4563224a5956a32895963485d20e17d758d54","size":153,"data":"","first_seen":"2025-06-20T16:35:50.833387Z","last_seen":"2025-12-01T08:51:26.296544Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/js/app.min.js?ver=3.0.2","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c7755ccfe93d745c09f81f2c0aa8f9c","sha1":"7076e400970b82df3b0e2da7fcfb54d14b9bc10a","sha256":"15788a480440de967f1da075c969c846e23eadde5b81338f5eab1509cba9ebac","sha512":"4eba7641e3c826ecbfc3cba0cc5bd3cfe98e9327d7a73e74ed1e90a107b21445301f849fe99cef6360368461407211b197d616d97d7c8a6d7d37f19392174b5b","ssdeep":"","tlshash":"73b09219b250e2e213aa365a4a3b5825726228a2b9dea108340a2db61c7b15c2255e1a","size":115,"data":"","first_seen":"2025-06-20T16:35:50.786522Z","last_seen":"2025-12-01T08:51:26.254116Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"187614d66268d6b036cc380b8decaa37","sha1":"8031c404ff553c3e415409de19fc8fc7e25f33f9","sha256":"44505c5894a9649131b539b4d0e34f042e0735447ca7054390312811a46267ac","sha512":"b21dc257e8994da76aeb5e8bab96af0b37c3bbfd274f8d47b952c3865f8fd9cdf8b5fd2ab3bf5610c947ce17e70b8c8d78e10952046b121158dddea7dc8f24ce","ssdeep":"","tlshash":"ccf097910968d48222a1941d82e0bc572a8316593a7760d90738ce196c646ee0917e05","size":489,"data":"","first_seen":"2025-10-08T08:01:19.923054Z","last_seen":"2025-10-08T08:01:19.923054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/js/jquery.min.js?ver=3.3.1","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86926,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-04T08:32:51.837049Z","times_seen":19373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4d69960a4e657e592cb86783ab77934","sha1":"fd33b52c143a1a64f561fc12346945484e9c63fc","sha256":"5afa36574869a2cd29b174afd351c860c6f214b5cabb0e6de12f48390aaf0978","sha512":"2c366d465c92a158ce1a82aeabd88a80d625277406716ebdde50116d6eab83a3932e9818d5f8c045302454bde290f8ad26f66430287addb53c50d4c300d058e5","ssdeep":"192:64lb8sKv/o0FhXn/Umw8WXcLX2xlyAYeD5c2AYmf42ffZB9J+ORUksr6aBvWDGY:6WWXvFBn/iPXy2WjeD5c2qfRxBGORUkJ","tlshash":"360218b9f253ec6683e88cc9617e6920f42a6905340ad054f55cec933866686a3b3f7d","size":8529,"data":"","first_seen":"2025-10-08T08:01:19.983254Z","last_seen":"2025-12-01T08:51:26.298211Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b91b9fae681d561aa4e29206317f5fd8","sha1":"4aa09dbeeb6405df5fd06e221f8cbca399b5f4c4","sha256":"488fbf8cd2dea3b91a7803e4dec16e1ac771c3a65b78f18ad78fdf75997b8f6a","sha512":"3e71bf57f362b9ed0aa1d4278c225feeb6c77936f9c58d8b1da5386a7e434ae040509f1cfb46edae024ef39b2cff924d4f788a050b9e953f4b09ecfd66fa9b0d","ssdeep":"192:64lb8sKv/o0FhXn/Umw8WXcLX2xlyAYeD5c2AYmf42ffZB9J+ORUksr6aBvWDGd:6WWXvFBn/iPXy2WjeD5c2qfRxBGORUk+","tlshash":"010218b9f253ec6683e88cc9617e6920f42a6905340ad054f55cec933866686e3b3f7d","size":8530,"data":"","first_seen":"2025-10-08T08:01:19.986152Z","last_seen":"2025-12-01T08:51:26.29905Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-545416Q91Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57773155e8d630c9f2a03d52a807f744","sha1":"3c9ca5d498a1fb91d1951804376bda453cf3abbd","sha256":"201206e1d4bb8c6d8be918badead9af74978950b872a5834997d5b30e4729e94","sha512":"679816b42dff009d965c6185f293f98e7e732f7297e13175a8b36ad2d06953a9676f0d22485258e8a6bd7a5289d989fa61783e9c564973723ac37f78ba0709f9","ssdeep":"6144:GPC6r2RYOL+lbD0KkY+aXmJTJEngeek9anY:qKRYOcDr9Z","tlshash":"c17419cd73d670229392a478503f018ba57b68e2f44cc899f186dde52e74a9a4237f7c","size":366619,"data":"","first_seen":"2025-10-08T08:01:19.875977Z","last_seen":"2025-10-08T08:01:19.875977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=iWC8zBDaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=1522712374301184\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b5a5a2719a1b2297aac06781a29ec60","sha1":"eb0f242f270967ea522326ec9bc7a5b8487059a4","sha256":"947e5e2dba47edf7a57693e8964576b26fee10d546295f2f215710dc8fe85a0b","sha512":"d1a0d94c7c75fd840244779b7d44623ecfac9c69e539151bf694fe39ffa3cce2330936b58bb343a3ea50b8a3f4600620fef860858b2a5996add139a396c1a4bf","ssdeep":"192:6S/y/Upr8gjL/Upr8gjj/Upr8gjN/Upr8gjGzo:f/y/U1z/U1r/U1l/U1yo","tlshash":"8ed10b5b50961179fc8a8ba817d4c4ee3ac4df533a724a3c372a8118f526eb35851e78","size":6771,"data":"","first_seen":"2025-10-08T08:01:19.977485Z","last_seen":"2025-10-08T08:01:19.977485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=LBXw7XkaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6870736931791360\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e401e09466e01a3880e65ace261c3b4","sha1":"3a2a61422bda866830ed07626cc33dbc03d3a038","sha256":"b84180bef4ed9b6fb7a675c911874e525882b4870bcba85391b749b906297581","sha512":"0742f82d955e8a856850733a8a2a5c0233efc94f1bc65a4f9ea0654c280c6f860b791666c01b366c0496b9ac29b8a96036b81de7843a31fdf342b5daefe4bc88","ssdeep":"192:937U9sJ6ciDKqgzqyp3XCgZ4iGG/aCDKtCZs0VJwYYx2gKK:5g9jcisqypdGiGHCJs0VJW2gKK","tlshash":"05027ebd7308cae45cda0deec7362c732f6a7c47882720d48466ce5cd0046b951b9637","size":8582,"data":"","first_seen":"2025-10-08T08:01:19.960071Z","last_seen":"2025-10-08T08:01:19.960071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"76225d318c68515cc3d207691cf8f7cd","sha1":"ad71cc82c398f4d2d4020b82dea156cbdf5576cd","sha256":"dddef12df5c68bdb3bbca9871a9137879147b0c67402e78201f4cfaabe32ac36","sha512":"887eb27393aca13c57d51f95df904a6eddd1462a56cecf5af8fbb419818c17d1d137025707fcd9f11bbb07e9dab3bfde81dcc258acafaa6b2b22e2ff776c4f63","ssdeep":"1536:4WvdY2BsOjBTOdBpIiT4bWHNgxRGnwUdDjch7jcu9VI4VkAt4V4qp1DQnXhGZ/f1:4mLoVkyHerGnCzaVV4qQ6Npl","tlshash":"d0e3c9ccabca38358aa7a47e2c2f65355f774cd3b85c8050d067d1c41c7aa09d6a2fb9","size":151537,"data":"","first_seen":"2025-10-07T10:27:22.563356Z","last_seen":"2025-10-09T11:55:30.914474Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"a01afff900fbb1061868ec881fe3d2a9","sha1":"0e67545eb95e1e6203a0ac6cef88e8ff707a184e","sha256":"95887d6b89251a289fc138e81dd72efbca98460282a7c8822e20ae29be0a7992","sha512":"71d257ccb2f2ae79f4ae6100489471605dded13f957318a8ea6f91c2556949f3cce535e846f1b37cb41b73d10cd1cc0c8aea2fa485b98b2bca09f11fc4cddf96","ssdeep":"","tlshash":"2c60000c03f0c0000c0c0000cc03000300033c000000030c00c300000c00000c003c00","size":12,"data":"","first_seen":"2025-10-08T08:01:19.988629Z","last_seen":"2025-12-01T08:51:26.287913Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/in.js","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff59ef871521b28357c5a6fd475bb10","sha1":"a064fc74704ca2c671e516953bddc11beec961f9","sha256":"f9e009e62d24be235279846ea5df6a1568ab7fbfc6dfe03509c358420da25887","sha512":"ef5d3c766b3b4ae374da4d2d3fe9bbffcffbdfee21e003bb84d490f39d068e898e5b5605bb7096edf22a29464a1f4f9ec90eaa16f6c05fbebb2b619883e7635c","ssdeep":"3072:yelEfWiV9y2hMVT//x5i74TYR0R7CRxLFO:MML5A4Tc0SxLM","tlshash":"8604b85c2b4730b341329019992fdd29dd2994d995cdb602ceb3f8e826a5f0fb123b79","size":179790,"data":"","first_seen":"2025-10-07T13:30:31.709581Z","last_seen":"2025-10-09T13:09:37.503074Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d29f3dcd52946ce5978f209064dba06","sha1":"7df3aaf37df5363aa7278165a9a7c573e0e1c5a0","sha256":"bcb76b0bad723efc79ff15831e8a1816da53f38956e175097e9398c288f221be","sha512":"a1c9c940c39d7693e0e23d897519e9bd12ce651defe2b6be0e4efda0c4c3e758e39a5ca196d85f5b25619442e5040e99f6069e934f783d5699b0c429b676e330","ssdeep":"","tlshash":"a8f0dc2a80a18fc1a4e0451bfab4ed0e4dd25ac64d03084b58c72825848c6711fcb35d","size":489,"data":"","first_seen":"2025-10-08T08:01:19.974506Z","last_seen":"2025-10-08T08:01:19.974506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/check.html","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"953a0f34ac176669233a11c67dccdd3d","sha1":"4a09b3983945bfe177e3c3cb49f78235a7b0d49e","sha256":"5d0f2b246f5355df4c429f07e1239ac43e99df54cf1038ca8459b993489e538b","sha512":"4f33c0d1c46665e2d500b95878b2a8b88ddf7ab9377fdbbbb635900de1b78c2258788fd568e8ddda49f1b845cf09d9bc04d462c9dd6b38c3811c999c6fe637aa","ssdeep":"","tlshash":"9f6000303f00000300000c000000000c00c0030c00000c0c00f3000c0c000030000033","size":12,"data":"","first_seen":"2025-10-08T08:01:19.991829Z","last_seen":"2025-12-01T08:51:26.305317Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"06ef2a24159e864c59a9160b15b9418d","sha1":"b9ce3b59b62182906f6dd0483a91f12ce7534f07","sha256":"2619ca0c47debbc6af80620a4a659c1bec7bc5b7a4c0437cb4da3ba3e15e1837","sha512":"17711cabad2eefd6d45f5df5c74c764b24e671ef6651269b56e40fe10529adbb69e1c2326e1a2ee454d67bf36189480f4f1bcda3b703b2c3dc7780cc708526a3","ssdeep":"","tlshash":"d1500000000000cc000c0c000000300ff00c33003030003000c00c3000c300000c0003","size":11,"data":"","first_seen":"2025-10-08T08:01:19.99434Z","last_seen":"2025-12-01T08:51:26.28912Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"634ea491b614cdce7be655169e569135","sha1":"bf3efa74f6d4beb170d1158fcbcfa1c70a4b1534","sha256":"a383de0250ea9e90b1d232b66eeb94e875b820168792bb1c23fe72420d00b802","sha512":"2a082edb257e45c2aeb4d5025057293c22d03f0161a5b29c557cfe0b011f008474c60169c57ddd28091dd190b8b98c75c9bf6d8c91b9c75f40a03f554e1aa514","ssdeep":"192:64lb8sKv/o0FhXn/Umw8WXcLX2xlyAYeD5c2AYmf42ffZB9J+ORUksr6aBvWDGRy:6WWXvFBn/iPXy2WjeD5c2qfRxBGORUkl","tlshash":"2a0208b9f253ec6683e88cc9617e6520f42a6905340ad054f55cec933867686a3b3f7d","size":8529,"data":"","first_seen":"2025-10-08T08:01:19.996953Z","last_seen":"2025-12-01T08:51:26.29971Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"baf10d92c3ff84a7a5c647c40c8c566a","sha1":"9f8381c1637d400f131c60befafd2f5bc2621e1e","sha256":"2b76ed2c65c527a4560ad3f374d2bb65c4ff0db371e0e00b1c69c78a37660e82","sha512":"ecf843220b5fe9e23aaa0344067b1eb97f6065ff0c576ae3b6f97c3ba002839e4835cf8b74afa775922f38ed4015d0de1b14fa133546cf00cb17f499b4ed55ee","ssdeep":"","tlshash":"7f41bd4ebb9f14702db321e41b6f484166b43e07c40ae8693d5e1355cf90a9c3ab2e9c","size":2368,"data":"","first_seen":"2025-10-08T08:01:19.998833Z","last_seen":"2025-10-08T08:01:19.998833Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=K22WGXoaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6307786978391040\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d9ad42a70466263fca0b4320bec6a05","sha1":"59d0f9a382a737987c3e55e089758ae0d5108d02","sha256":"7d71a438a75200c96be37aef7349c2d04af291f8075c87e0355c4479526e6cae","sha512":"617678f45d586a15e0eac2a7b12192881ce2473908da770b2fd5da01cf705fafe951ea1840c8af2138ab9fae9fe2225a3fef3360aba530d39b257c418b7f59ac","ssdeep":"","tlshash":"3141a9943595d5fea7475f4863a75d8e0e886bdd0a2bfd4a148ae0e9c1083ff03c385a","size":2086,"data":"","first_seen":"2025-10-08T08:01:19.95783Z","last_seen":"2025-10-08T08:01:19.95783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwaotbfk.com/onlqip?UBbjaF=gx\u0026ea=_sishhvvbkpearscyeyskij\u0026xskffeu=119626\u0026vkuh=ztppti\u0026hvzjtm=etujhj\u0026zl=3618960\u0026yx=1\u0026doqo=508616\u0026sbwnip=uphoud\u0026rlbe=gupg\u0026pd=snvv\u0026khe=0\u0026bkw=814371","fqdn":"wwaotbfk.com","domain":"wwaotbfk.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79e6a7b52a03af1d38002228435e6dc","sha1":"8e2c5d929384d28943f67fa2a769cdec49812a01","sha256":"d1d61781c452b44869ae994f5e18563e9283628d6df087be7df8d56b4c8d190b","sha512":"adf987b450857c01384c08aa2c1379fd216b9852f0c5e93f2094cd20ccf9a99653789f6267ff95f1091289e09d6f002ce4cfaddb66dda56930dc140c67ec5434","ssdeep":"","tlshash":"05f0d4755051f98c8d80446dd6bd0c4e278621cbde13f95f81df255b9019263d457d01","size":465,"data":"","first_seen":"2025-10-08T08:01:19.897604Z","last_seen":"2025-10-08T08:01:19.897604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=SrZIYiAaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=4337462141404160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72da26e6312b28f66235062d4b049335","sha1":"01601f2e714a7dbda4c808ae4c71730557da0064","sha256":"854b962570917e9e8e6f4d25c556907cb02eaa73096a43a7373a7967cc53c6d2","sha512":"60bc9a9f50716d55c77823252e0f5fb8f427c5411ca5a3057454441b044187349aca3aeeb4c26f59a2816b6f60c8cf2a88a7766fc8e11dadded50b5c2e813aae","ssdeep":"","tlshash":"3f61884550c39cb0bacd1d4df67fbefda4243e6298aaa0695283d412001ff7af353945","size":3243,"data":"","first_seen":"2025-10-08T08:01:19.899986Z","last_seen":"2025-10-08T08:01:19.899986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1ed2f336a1349b69a6ab4ba4be5ca5d","sha1":"27c4cc2858e2a777930bf75fe809a3f3a7395b92","sha256":"b2936e6f8b146a84331b8b2e9f48ea528c43b311ff35dba649f37b0fe33ce0b5","sha512":"af56e947a54a2a8a4cedb022c3df19bf72a8e81a64ebd823178c9ac10fd1e3196b3b70f5f7a1f78a663c09df8c63407905b947371be86d90ffb2496c8f2cd08e","ssdeep":"","tlshash":"50d0a7a775bd5169195720c464bf45472da0f90b6e446c403e9c12d04f0c53cf931b98","size":249,"data":"","first_seen":"2025-10-08T08:01:20.001332Z","last_seen":"2025-10-08T08:01:20.001332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/check.html","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=f7O5WhFaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6026312001669120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82b004dfe0d3d971c4f24a18dfead4a6","sha1":"a4751e99e5203dadcd326cf002258c0283f19bf1","sha256":"ac47a67a64c53ac07df3052d4c65ba6530bdedc7b76cffad13a02a4824d35e6f","sha512":"e50b8ca9ba00461edeecb44198eaa83286ee03660f07c89c6ab83fd776454ad781dc804e3ebb98c9aec79e899b9e5d5e6128153eb12d5b897acb908cff8b7c51","ssdeep":"","tlshash":"32f0c0cf6806fcd8bc5c3c1d662f5d020c02a2de8f937929591cd0f4c02802e479b942","size":548,"data":"","first_seen":"2025-10-08T08:01:19.856494Z","last_seen":"2025-10-08T08:01:19.856494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zx79EuIaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=3211562234590208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"127ca739756038dd42e5d426a7ac0313","sha1":"6d8cb08d438b246bcf739d4d66895ffc06c8bd20","sha256":"05d3e2a77c184065fbbf1d54e11f2a91d4eff068129ac815406a2bdcffdeab8c","sha512":"e72744d98f9083352f6d7012b681e2f5c3f93d5f28377c206f62c88560a88b06d3a0fa54f026b7fc21130883e8b56e6cf89addbb57e06764ba9e79d9fee22ced","ssdeep":"192:6TDdAG3wvCRuDdAG3wvCeuDdAG3wvCNuDdAG3wvClpo:WpARpASpAbpAMpo","tlshash":"3dd10b358f9f2dba3f90062db2344ca1faf5795e1c1f394cd92149c26dcb258b427989","size":6761,"data":"","first_seen":"2025-10-08T08:01:19.918221Z","last_seen":"2025-10-08T08:01:19.918221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/bn.js","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3aaa94b8eac1dbc10e8b93e47acb7cf","sha1":"a301638deaea646594f25badf6bfa96612ce3a8c","sha256":"9b451f425b356fff0dfa7ca51c573a6d3f8491b001c0832f1f7680c63bef743c","sha512":"76bf7cd2cae37535b1389a1fd4bf54cfaaa451b9a7d2def1270f21e9d87064c23628b0b3d1fb5ad7be74ebedb478f6a9aefc21378b2e931acb1fc710b1c3f65f","ssdeep":"1536:leN4nSQoMQtLuVZfCaBV77po7OohlvPf6ErYy3WddJAnefWrAwABSX2fbNqJ240b:l6sUujRothlvXmHddaABw2fbrZcWpd","tlshash":"0df3a58c6ba13833d16a942a1d2b5f2567e994c294bcf468fc63d0c42d7cbc7e111af6","size":165462,"data":"","first_seen":"2025-10-07T09:24:45.165442Z","last_seen":"2025-10-09T12:51:31.114313Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"playhubconnect.com/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\ncf-ray: 98b41b2c78ce0883-OSL\r\nx-amz-id-2: 0svUZMc2Lq98EidBfw11PA0pOn1dXWaJC9u2gDLhYO6s/F9aa4y+qroXCZh/f1zqATK9vuZj0752fl3VU8Z2WPvEPHq9tjC5mZULWoMqGP4=\r\nx-amz-request-id: 7CMMWS4G41P7PJXS\r\nlast-modified: Thu, 15 May 2025 12:07:44 GMT\r\netag: \"df7722471047d1868385d3c71b777260\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nage: 1060630\r\nexpires: Sat, 08 Nov 2025 08:00:42 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-range: bytes 0-893502/893503\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-04-04T12:49:15.186701Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":115,"dns":31,"connect":1,"send":0,"wait":10,"receive":52,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.606\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fviet69vn.at%2F","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:43.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.606\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fviet69vn.at%2F HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251008030006828f4b8ad24434aa3b24cc57\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.li/","fqdn":"viet69vn.li","domain":"viet69vn.li","tld":"li"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T08:00:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.li","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sat, 04 Oct 2025 10:20:39 GMT","end":"Fri, 02 Jan 2026 09:56:02 GMT"},"fingerprint":{"sha1":"40:89:B7:54:5F:C8:36:8E:32:C1:35:2B:3B:31:0B:F8:98:C8:62:E2","sha256":"AB:5C:8B:DE:99:4B:58:77:9B:02:DE:FB:62:29:4D:CC:01:96:A8:33:DD:9E:3C:88:CF:96:D4:E0:6F:3A:9C:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: viet69vn.li\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 08 Oct 2025 08:00:40 GMT\r\nlocation: https://viet69vn.at/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dWoaHTVsthVwzznuStxBBqXhHi93qJy5uG9yvsFck%2FmWPqR8RGA1GL%2FfzaTjQTLJKYIvvvdGCFRBzAAak9qoTq0cOzFGBoZNmCY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98b41b1e8d4d21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":48,"dns":28,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=f7O5WhFaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6026312001669120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citadelexampleruckus.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:33:18 GMT","end":"Fri, 07 Nov 2025 14:33:17 GMT"},"fingerprint":{"sha1":"9E:93:59:5B:B7:DD:23:CC:81:4C:BE:E0:6E:4A:C6:11:2D:51:60:E7","sha256":"FE:8D:E8:AB:5E:4C:CA:83:BA:AE:65:7D:D3:E8:E6:85:42:C0:59:2A:1B:5E:24:3D:4B:46:41:C9:3F:38:3C:6E"}}},"request":{"raw":"GET /get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=f7O5WhFaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6026312001669120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: citadelexampleruckus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=25100803001269339dc92049f186c0edfb90; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"82b004dfe0d3d971c4f24a18dfead4a6","sha1":"a4751e99e5203dadcd326cf002258c0283f19bf1","sha256":"ac47a67a64c53ac07df3052d4c65ba6530bdedc7b76cffad13a02a4824d35e6f","sha512":"e50b8ca9ba00461edeecb44198eaa83286ee03660f07c89c6ab83fd776454ad781dc804e3ebb98c9aec79e899b9e5d5e6128153eb12d5b897acb908cff8b7c51","ssdeep":"","tlshash":"32f0c0cf6806fcd8bc5c3c1d662f5d020c02a2de8f937929591cd0f4c02802e479b942","first_seen":"2025-10-08T08:01:19.856494Z","last_seen":"2025-10-08T08:01:19.856494Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/favicon.ico","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADPmFgAAAAAAAAABADNFdQAAAAAAAAAB%22%2C%22CAIFRT%22%3A%22ADPmFgAAAABo5igQADNFdQAAAABo5igQ%22%7D; PHPSESSID=ihv1gidq81o5glf3b2usnbte13; __last_favorite_65771=1759910441; _ga_545416Q91Q=GS2.1.s1759910442$o1$g0$t1759910442$j60$l0$h0; _ga=GA1.1.527984996.1759910443; pnState_1997785={\"impressions\":0,\"delayStarted\":1759910442779}; bnState_2025697={\"impressions\":1,\"delayStarted\":0}; bnState_2025698={\"impressions\":1,\"delayStarted\":0}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 11 May 2023 02:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2Flz0V87qeRj5NX4TOyTHj%2B3vi6cnAcXavsXwAkWRo7czbJ8XTeHptZ6tkVxHwjXAcrLHTXSfp5z8UN4Ghnhvo86IJcE6UThD9UU\"}]}\r\netag: W/\"645c50f4-386e\"\r\ncontent-encoding: br\r\ncf-ray: 98b41b2c9be23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14446,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 60x58, 32 bits/pixel","md5":"da3767675db67453154dcc1b5349b694","sha1":"0cd3530890b70601ed326cf7612ba61cce1b0da4","sha256":"9e00a0bbc4b150a4efde27296babc67bc90d74dac6795b171de4811b35fb8d9f","sha512":"c2b31d129d74a89266616fdd4378406907ab9c6c4a5abf48fa2b9894999620ad9888a67200c0d01b24327e0a0d811ac25c23639f89aaa8e0e036861b94d62b54","ssdeep":"192:wpDmTMed128OcJut7aeIbYOkbfvGU7rum:YCv2bc27JAYLHDP","tlshash":"3452c847a5cd9aacf503aa7bda3589f2b529dd0fd612949fb3443f83f6310c8842b581","first_seen":"2025-06-20T15:47:58.40185Z","last_seen":"2026-04-02T10:34:16.787533Z","times_seen":47,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wwaotbfk.com/static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"www.wwaotbfk.com","domain":"wwaotbfk.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:43.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 12:03:42 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"27:78:2C:CC:6D:B8:56:CF:B5:D4:7A:C1:F7:5D:E6:92:8A:41:BD:F0","sha256":"B1:E6:AC:1D:92:45:15:70:BB:AB:6C:A1:F1:B2:05:90:1D:EE:3A:08:86:C6:A6:5F:F5:37:E7:E0:A2:86:77:94"}}},"request":{"raw":"GET /static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: www.wwaotbfk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:43 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\nlast-modified: Mon, 15 Sep 2025 18:50:09 GMT\r\netag: \"68c85fe1-da23f\"\r\nexpires: Sun, 07 Dec 2025 08:00:43 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-893502/893503\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-04-04T12:49:15.186701Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":25,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/wp-admin/admin-ajax.php","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 30\r\nOrigin: https://viet69vn.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\npragma: no-cache\r\naccess-control-allow-origin: https://viet69vn.at\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkS1CixzYU9N4ZvHTSaTW2iQMb8boqHzazlSO8SnwxhyF1X92Hk9udw4o6BjpyB6DJYXSn%2BvkiCNxg3O0TXSH9hxkzw4Z%2F6%2BOCgG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=ihv1gidq81o5glf3b2usnbte13; Path=/\n__last_favorite_65771=1759910441; Path=/; Max-Age=2592000; Expires=Fri, 07 Nov 2025 08:00:41 GMT\r\ncf-ray: 98b41b254c083181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"f370a96f6f8294d0f80958f585922422","sha1":"a10674510d2a8ed4dec61f402002c560e29f3f38","sha256":"fc9a5b96d05ded437c8ce20ab233e08ba202d8efc0c24c947d053accfc753461","sha512":"32c77ecba3b616d7a06ddfa727ab1ae45b7b1e62606882587720694c7bfccfd81fc4a211c67e747a6ad200be2c80a745a4db72ee385d956500a70f5b33f2b7bc","ssdeep":"","tlshash":"726000c000033fc0000cc0000c0c30c300c03000000030000303000c3cc3c00000000f","first_seen":"2025-10-08T08:01:19.860752Z","last_seen":"2025-10-08T08:01:19.860752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/210/8dc/3df/2108dc3df6d7c13bfaf0ea5100b69ff22090dd07.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/210/8dc/3df/2108dc3df6d7c13bfaf0ea5100b69ff22090dd07.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 488259\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 211af2a4f5e3180c90ab28d7e813fe77\r\nexpires: Fri, 10 Oct 2025 04:08:33 GMT\r\nlast-modified: Thu, 19 Jun 2025 08:36:51 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx1e0b3861af704ba6b956d-0068558b2f\r\nx-proxy-cache: HIT\r\nx-timestamp: 1750322210.99135\r\nx-trans-id: tx1e0b3861af704ba6b956d-0068558b2f\r\ncf-cache-status: HIT\r\nage: 13929\r\ncf-ray: 98b41b2c4ef856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488259,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"211af2a4f5e3180c90ab28d7e813fe77","sha1":"2108dc3df6d7c13bfaf0ea5100b69ff22090dd07","sha256":"ef7aaf04f4dbcb545b17c333b7e8d03185ebc37c2009d4f13f4ec472b6bb5c83","sha512":"bc2a45c719b507e5e44bfadd461a126ff3a281bf60ba0b646e8eaa0753e465be1faadcdf535c375958f37029a40379caacaebb8e53f80ce6456fd690602eb65c","ssdeep":"12288:DW9lWdqU417ThMNGUpPfuzdwTecfGeFpzJO1O5hge+aV4l:DWLBU4xWkUp3jTecfXFYeBV4l","tlshash":"d0a4237b906e3dbdb4f4ec382e21e50a6c0f55b8036d4a5f2559c502be2c4bec62cac5","first_seen":"2025-08-09T05:02:31.630507Z","last_seen":"2026-04-04T07:28:47.881123Z","times_seen":261,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":130,"dns":30,"connect":4,"send":0,"wait":8,"receive":15,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Ruoc-den-cung-em-vu-to-buom-non-hong-hao-cuc-pham-dem-Trung-thu.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Ruoc-den-cung-em-vu-to-buom-non-hong-hao-cuc-pham-dem-Trung-thu.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24782\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-286\r\nx-downloadsize: 90709\r\nx-bo-origindownloadtime: 176\r\nx-bo-compressionratio: 72.68%\r\nx-bo-processingtime: 24\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dc6ed5ef99c4cd5a5a50d67138f5cacb\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyK2UbmQjGkAc76E9aRS9GwDgWnzMGX9SIJIQjVE3Pfc%2FMEMemQOBIkxjdntEa3I5F6iDR3WKaJRuhVO0YhGqABONXawCvtP70R76xQ%3D\"}]}\r\ncf-ray: 98b41b2398a056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15984580536c201898a459b1bfd4f6cd","sha1":"23abf43cd3d5bd80b97275414db42f1c7f57cc3f","sha256":"da9d5dc5e993d8071d552ae5c1aa7f103140f96e09e646230286724f6f5c9d7b","sha512":"d7e7bffe335eb167de4b58a4bd03c7a510a058fc3200ef8fe8e84dd339ab392adb82f07133365de752b47b1eedc32abf9cee11877f5153a59040f6fdc5300505","ssdeep":"768:WirNVm7BaVYcglVeYsAzfrto+FJhKFs8EtzZ6I0Xi:jNI/cglnsqp9KFCi","tlshash":"4ab2e1929042ad0d7a1d8ab2e9e616f987405cd28593f731858f3bbc3e3b5a450473cd","first_seen":"2025-10-08T08:01:19.864438Z","last_seen":"2025-10-08T08:01:19.864438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-sinh-vien-voi-so-thich-la-lung-xem-review-phim-luc-chich.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-sinh-vien-voi-so-thich-la-lung-xem-review-phim-luc-chich.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-95\r\nx-downloadsize: 116125\r\nx-bo-origindownloadtime: 227\r\nx-bo-compressionratio: 65.21%\r\nx-bo-processingtime: 82\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 229608419b7c01ca21deb0840258f8e1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KneZPH4sdVduliUMs%2BCn4Z0hOMVTWOpDkVndS2RSf7MzrlQtYyk7kohCiwfZxH7sooXXayB0acqdrf0LNMRxyW534Hs4YLYGsBYR8Bg%3D\"}]}\r\ncf-ray: 98b41b2398b056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a47d3cde04d00bc8c89fe4e016e4523","sha1":"e7239f3a635266cd11c10be74f7815cf1c08cdc0","sha256":"45a8f7ad60f693403027514eaeb740534725ab998049abdc0a5b6ae716235b99","sha512":"f664f9d7963f50254940c12c27c4c97e9e07a182feb0469c8b197f13094c2d8b16d4f50eb102b509906beb192bfb7609468b05884f32e0971ffd30fee0a46a72","ssdeep":"768:IQGhAHCA6l6xa9e2Kq3EjeKtKLKgIuh60J4IyhyZQRx7d8j:Nf8eA3K7tyRh60JNZQz7d8j","tlshash":"bd03f2f36d313708ba7b9e7facd5554ca8c44af1d3629f4a6e7749432a2322202395f0","first_seen":"2025-10-08T08:01:19.866629Z","last_seen":"2025-10-08T08:01:19.866629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/solid.gif?z=2041242\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=K22WGXoaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6307786978391040\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"POST /solid.gif?z=2041242\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=K22WGXoaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6307786978391040\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://viet69vn.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nUID=2510080300ba0b794a12e44b0b8de803af6c; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-04T12:49:15.185542Z","times_seen":20444,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.606\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fviet69vn.at%2F","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:43.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.606\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fviet69vn.at%2F HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251008030006828f4b8ad24434aa3b24cc57\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T12:49:17.462299Z","times_seen":13332134,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-rau-vu-hong-hao-quay-phim-khong-muon-lo-mat-ma-anh-cu-keo-chan-cua-em.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-rau-vu-hong-hao-quay-phim-khong-muon-lo-mat-ma-anh-cu-keo-chan-cua-em.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21156\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-261\r\nx-downloadsize: 88636\r\nx-bo-origindownloadtime: 173\r\nx-bo-compressionratio: 76.13%\r\nx-bo-processingtime: 35\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2d351965462dfa535cd8f64043ba3079\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FlfyCdNUA6%2BoWG7fVVAuo6lATSUwmfAEf2F3ws5OqxMIZS0%2Bjln%2B6Uu8vZTbjgyRX29bfc%2FotIpSkWUDWGyOksI%2BxEd5yR7%2FqZrtoA%3D\"}]}\r\ncf-ray: 98b41b23989e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23c98be45c4d14eca8f0d87314027757","sha1":"fa49207e02fefcb7ef42634660ea3cbfcc5a75d1","sha256":"2aec083ae490cfa6ceb0cfc809d16e90ace19fae8672b767effe9633858debae","sha512":"434117d2454b7077b0fd30b37b093e1804da5db844ee2746ff8d327df53afbc396b814f4c09659e292ea5c513b758d974c9128693a73a24244bac6cc2592403d","ssdeep":"384:Wxc8RqQEMYObrte3Q/C/6/omjiZlKzqA7PWmLtLyhfBNBH:WYQY6IWCqom+Zoz1bWgL6bB","tlshash":"f192e19611222c40d7cdf527478a4193a697fdcd709e99b6c66394bf38dbce0a039237","first_seen":"2025-10-08T08:01:19.869603Z","last_seen":"2025-10-08T08:01:19.869603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Be-Sam-mong-to-em-tiktoker-voi-100k-follow.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Be-Sam-mong-to-em-tiktoker-voi-100k-follow.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35334\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-285\r\nx-downloadsize: 95788\r\nx-bo-origindownloadtime: 179\r\nx-bo-compressionratio: 63.11%\r\nx-bo-processingtime: 25\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 815f5e710ddce5c5ab438e85f7d8c9ff\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IC7uOhQaBMTTJi%2F8uASA2w9dAAe3rr4x527CEoYxWtQs%2BuG3mGertUyv%2FVb%2Fy%2B4%2FAM%2FpqZtyzeLlccNfoMzlVQgUYYRsaw0j0uS%2B7t0%3D\"}]}\r\ncf-ray: 98b41b2398a256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efa7bd99a360a05ab621f87d8240c58d","sha1":"20577af561beeaeaffce94b345387a998933cbf3","sha256":"98db0631d94a2cb13382a5b7e4fc2864304ce4442aecf39d124b007e609f8009","sha512":"a43d3ae8c6a3b35b0a35f9b35ca4ab68d42bbf04907252fbe479ff421f5bb0ad8338578ddba2373efc1809922bd77faea5bbdaf65f278efb8010b87cbd30215d","ssdeep":"768:8jILPxlnsRjWqdOASBC6rrZFxS0kU4YWN+Dre4ZhEcDGYnjg:o8nslOzBtPZFR9njZhTDGY0","tlshash":"ecf2f1ab1acfba02352ae5f040acbbe8de0a7998b529148f14b324d57c4460d474d4ff","first_seen":"2025-10-08T08:01:19.872684Z","last_seen":"2025-10-08T08:01:19.872684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/0e2/e26/6f4/0e2e266f42dc9db06702654b475deccf94a64a2d.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/0e2/e26/6f4/0e2e266f42dc9db06702654b475deccf94a64a2d.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 497588\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 788712d8989fd197997cb2cccc55c1ea\r\nexpires: Thu, 09 Oct 2025 01:34:02 GMT\r\nlast-modified: Wed, 10 Jul 2024 15:38:43 GMT\r\nx-cdn-host-id: ds7288,ds7445,ds5951,ds7445,ds5833\r\nx-openstack-request-id: tx1c70999b3e2c4dc691ee7-0066cf3403\r\nx-proxy-cache: HIT\r\nx-timestamp: 1720625922.00109\r\nx-trans-id: tx1c70999b3e2c4dc691ee7-0066cf3403\r\ncf-cache-status: HIT\r\nage: 109600\r\ncf-ray: 98b41b2bfe9556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497588,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"788712d8989fd197997cb2cccc55c1ea","sha1":"0e2e266f42dc9db06702654b475deccf94a64a2d","sha256":"6d927f021791a078c49c7d5c92677c3f9d47aa7801e4532fd95a186c58825b19","sha512":"5dc0232771740d53781a62e985ab3cc85dfc06734df071d544de5ab21911c955e2cf2c411cf4b56c241fcbecfa3648bd8aec5ff337ed6e6cb587a8dfbae6ff76","ssdeep":"12288:V8SKUjz4XYAe/u/atap7IH5vMn7oR29v4Q39aHAo:/B4XYVsRi27oRZQ3YAo","tlshash":"86b423a8243a0137dc39d3a6dd94a41e0bb0ab901719d2a5dbd80ac37f7f18ebddc165","first_seen":"2023-05-06T05:34:09Z","last_seen":"2026-04-03T15:41:56.86696Z","times_seen":453,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":87,"dns":38,"connect":1,"send":0,"wait":11,"receive":21,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wwaotbfk.com/static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"www.wwaotbfk.com","domain":"wwaotbfk.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:43.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 12:03:42 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"27:78:2C:CC:6D:B8:56:CF:B5:D4:7A:C1:F7:5D:E6:92:8A:41:BD:F0","sha256":"B1:E6:AC:1D:92:45:15:70:BB:AB:6C:A1:F1:B2:05:90:1D:EE:3A:08:86:C6:A6:5F:F5:37:E7:E0:A2:86:77:94"}}},"request":{"raw":"GET /static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: www.wwaotbfk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:43 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\nlast-modified: Mon, 15 Sep 2025 18:50:09 GMT\r\netag: \"68c85fe1-da23f\"\r\nexpires: Sun, 07 Dec 2025 08:00:43 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-893502/893503\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-04-04T12:49:15.186701Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":71,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-545416Q91Q","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-545416Q91Q HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\nexpires: Wed, 08 Oct 2025 08:00:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127610\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366619,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"57773155e8d630c9f2a03d52a807f744","sha1":"3c9ca5d498a1fb91d1951804376bda453cf3abbd","sha256":"201206e1d4bb8c6d8be918badead9af74978950b872a5834997d5b30e4729e94","sha512":"679816b42dff009d965c6185f293f98e7e732f7297e13175a8b36ad2d06953a9676f0d22485258e8a6bd7a5289d989fa61783e9c564973723ac37f78ba0709f9","ssdeep":"6144:GPC6r2RYOL+lbD0KkY+aXmJTJEngeek9anY:qKRYOcDr9Z","tlshash":"c17419cd73d670229392a478503f018ba57b68e2f44cc899f186dde52e74a9a4237f7c","first_seen":"2025-10-08T08:01:19.875977Z","last_seen":"2025-10-08T08:01:19.875977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":105,"dns":1,"connect":8,"send":0,"wait":31,"receive":24,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-gai-xinh-cuc-pham-me-man-bu-cu-tu-sang-nha-len-giuong.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-gai-xinh-cuc-pham-me-man-bu-cu-tu-sang-nha-len-giuong.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20514\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-226\r\nx-downloadsize: 95210\r\nx-bo-origindownloadtime: 200\r\nx-bo-compressionratio: 78.45%\r\nx-bo-processingtime: 48\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 915e0ea362c0c98b5b1afd488ebf3889\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120799\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNCUvi6XU%2FdneAEdcfzRA%2FXPvDFL0DfkNBkx1yVFfS3vfffntjWMXOeLqJwMP3yHlJx%2BZm29DdhlG6ehdhg%2FWE33LnMiw1DwiKYa%2BEI%3D\"}]}\r\ncf-ray: 98b41b2398ac56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45019eb26aaf184ca341aac4b69c0990","sha1":"cba1eb7996f5d2e7640949a88e600092b611ecdf","sha256":"54c82ca7ee362c0048cf3df02a1e5caef35663539c2d32f637808d2d8d151663","sha512":"d445d3012d285177af8b0e8cf566a28ca0e9657d29f59e25a76aab979a3811290b0b43807167e3af00175e35a237c3c4c9249e0481cd7b0fc9bb51dcbeabeb3d","ssdeep":"384:0POfUtyMqL346mHfmTOzFc/6kt5vvAr5jm13icYYX7++MRLSIn:0POfoyv6HRhcS2MjYicYM76RL","tlshash":"7792e16816e4c6579abc3c3ddaa037681897d4238efa88522b023f4d525f52fb2d537c","first_seen":"2025-10-08T08:01:19.878367Z","last_seen":"2025-10-08T08:01:19.878367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/js/jquery.min.js?ver=3.3.1","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/js/jquery.min.js?ver=3.3.1 HTTP/1.1\r\nHost: cdn.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-267\r\nx-downloadsize: 86926\r\nx-bo-origindownloadtime: 208\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: cadb30eda139caf6b49dc7aede14930d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rHxlPYeBF4uMHUlO%2BymCM3ExNRd2amg2ZJ%2Bnli9a%2B%2BSy5%2FxuR5f3vbbAqa%2FbNb9lAdqO6Ep7iIDaDLOfpJ8wkDQCEYB%2B1leXBI079o%3D\"}]}\r\ncf-ray: 98b41b23c8e956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-04T08:32:51.837049Z","times_seen":19373,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Moi-sang-day-con-dang-mo-ngu-ma-anh-da-coi-quan-em-ra-chich.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Moi-sang-day-con-dang-mo-ngu-ma-anh-da-coi-quan-em-ra-chich.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42698\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-133\r\nx-downloadsize: 122494\r\nx-bo-origindownloadtime: 218\r\nx-bo-compressionratio: 65.14%\r\nx-bo-processingtime: 68\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dc3cfa0a97b0f3f63ba279dd8aba5b12\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roMR%2FLFNp8udpBgYv5ZGqdhCs67olRST2ZSNDvB9%2BjU2Lc6VyMhIZJmOyguuLsKuycSzVZqzuSvxqEL0saqSQEiHun4QVQ3p1nTeWLs%3D\"}]}\r\ncf-ray: 98b41b23989f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"370c6c620d55587c877959ccf5a40aae","sha1":"aa493b2cea38bcfd4ecbdad86533dcc23eb4d787","sha256":"59336ab296e506cce301aa37cfeb5723cb2651b839079e2f836d948a1abfcd43","sha512":"670d475129bb2d3ec7ceb255490efa908d2da7dddec1928c9c124797d524489a16956dd266ed6e912d659e237b611749a0fc7bb231639551157d435e662f5d3e","ssdeep":"768:OvNIX2VRT53Bo3/RrPNPJm5rAYV+Cf7AqEE5mIaR+nP6anW0BZfTXYKN/+KF6T4K:OiaRTRBo5r5J8N+Cpn5ER+CanW8Z7oYq","tlshash":"a113011532e9af76a3ff2998518a8ac88be10035cc46d352e3d2cd54479b205e9fcf5b","first_seen":"2025-10-08T08:01:19.895153Z","last_seen":"2025-10-08T08:01:19.895153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwaotbfk.com/onlqip?UBbjaF=gx\u0026ea=_sishhvvbkpearscyeyskij\u0026xskffeu=119626\u0026vkuh=ztppti\u0026hvzjtm=etujhj\u0026zl=3618960\u0026yx=1\u0026doqo=508616\u0026sbwnip=uphoud\u0026rlbe=gupg\u0026pd=snvv\u0026khe=0\u0026bkw=814371","fqdn":"wwaotbfk.com","domain":"wwaotbfk.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 12:03:42 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"27:78:2C:CC:6D:B8:56:CF:B5:D4:7A:C1:F7:5D:E6:92:8A:41:BD:F0","sha256":"B1:E6:AC:1D:92:45:15:70:BB:AB:6C:A1:F1:B2:05:90:1D:EE:3A:08:86:C6:A6:5F:F5:37:E7:E0:A2:86:77:94"}}},"request":{"raw":"GET /onlqip?UBbjaF=gx\u0026ea=_sishhvvbkpearscyeyskij\u0026xskffeu=119626\u0026vkuh=ztppti\u0026hvzjtm=etujhj\u0026zl=3618960\u0026yx=1\u0026doqo=508616\u0026sbwnip=uphoud\u0026rlbe=gupg\u0026pd=snvv\u0026khe=0\u0026bkw=814371 HTTP/1.1\r\nHost: wwaotbfk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nUID=2510080300d0dabce10037486396c3150569; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"e79e6a7b52a03af1d38002228435e6dc","sha1":"8e2c5d929384d28943f67fa2a769cdec49812a01","sha256":"d1d61781c452b44869ae994f5e18563e9283628d6df087be7df8d56b4c8d190b","sha512":"adf987b450857c01384c08aa2c1379fd216b9852f0c5e93f2094cd20ccf9a99653789f6267ff95f1091289e09d6f002ce4cfaddb66dda56930dc140c67ec5434","ssdeep":"","tlshash":"05f0d4755051f98c8d80446dd6bd0c4e278621cbde13f95f81df255b9019263d457d01","first_seen":"2025-10-08T08:01:19.897604Z","last_seen":"2025-10-08T08:01:19.897604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":113,"dns":1,"connect":17,"send":0,"wait":19,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=SrZIYiAaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=4337462141404160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=SrZIYiAaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=4337462141404160\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2510080300c6fb8be2359f46b6933be812a3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3243,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3243), with no line terminators","md5":"72da26e6312b28f66235062d4b049335","sha1":"01601f2e714a7dbda4c808ae4c71730557da0064","sha256":"854b962570917e9e8e6f4d25c556907cb02eaa73096a43a7373a7967cc53c6d2","sha512":"60bc9a9f50716d55c77823252e0f5fb8f427c5411ca5a3057454441b044187349aca3aeeb4c26f59a2816b6f60c8cf2a88a7766fc8e11dadded50b5c2e813aae","ssdeep":"","tlshash":"3f61884550c39cb0bacd1d4df67fbefda4243e6298aaa0695283d412001ff7af353945","first_seen":"2025-10-08T08:01:19.899986Z","last_seen":"2025-10-08T08:01:19.899986Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Lam-thu-nhun-15-phut-cho-em-sinh-vien-kinh-can-nho-nhan-de-thuong.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Lam-thu-nhun-15-phut-cho-em-sinh-vien-kinh-can-nho-nhan-de-thuong.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39108\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-286\r\nx-downloadsize: 124174\r\nx-bo-origindownloadtime: 169\r\nx-bo-compressionratio: 68.51%\r\nx-bo-processingtime: 25\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 97a4612e11cbef47b8c370d7f75b7e1b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5S6sK0gHzO69IkrTbIHZ7s3yhrtlFqcu9YcNfYhe3WcDbYXXfkdIt3hzQE2%2BT%2BxNL101bHAOWLQtx2HyIBZMG9mo6Dyy4s1Hl47WAI%3D\"}]}\r\ncf-ray: 98b41b23989956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3374f47f3b9aed02d0fbab296b9f6424","sha1":"40102b279a10cf8c2a4a4b01d4ac4eade65e6ddd","sha256":"687962f5fa8b15e5aa58bcbc0f6b97b93b801aa2b3e28a87bb2785734d237cec","sha512":"ab232ddf9a360dcabf01849e606b3093f82fe0f650f05801c545d9542e9273260e40bee6e153afcd09d3b8013fb19418e88790f0c68ac57aa08d5813e91c234c","ssdeep":"768:daHk+DRpu8EI8K0AbwxWjygn+CwXOWZDzCc/rusk4yvqNin671FEQ4z:dalDToDy+lXpj/rQN/6718z","tlshash":"8203f16a41c298c3504177c823955b53f7aff37c8f6ede88da50f94ad11c16398aab32","first_seen":"2025-10-08T08:01:19.901574Z","last_seen":"2025-10-08T08:01:19.901574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Ru-di-choi-ma-em-chuan-bi-ca-mat-na-de-mua-lan-voi-chim-do-bi-cua-anh-ca-dem.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Ru-di-choi-ma-em-chuan-bi-ca-mat-na-de-mua-lan-voi-chim-do-bi-cua-anh-ca-dem.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38168\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-223\r\nx-downloadsize: 114723\r\nx-bo-origindownloadtime: 181\r\nx-bo-compressionratio: 66.73%\r\nx-bo-processingtime: 49\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 35fd0a9ca4ab49dff2e3b676872a4cf6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvzVBPq0MnIMIRkGPGb0lxrjYwn5GOIN%2B48Pd%2Bju%2FpGS6mDxAO%2FIZ3vuRPMZ1qjwQ%2FVge6bB7eMeCnCx3tNnUMtecx6rraRdRlK%2BPpY%3D\"}]}\r\ncf-ray: 98b41b2398a156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38168,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0a89389e17bce874be50db4999127a4","sha1":"7ba5ef4cdead4e82ef17fdba6251ace8b1dbc61c","sha256":"e3596e69628441dcd3cd07e636c72c29c982254fb1069aefa42c9c936265ed9d","sha512":"dfc15fbdf7a2f772530dd5098d2f19c74520afa43d82d84fba9746c51f8eeaf80bd1ceef238f0cefe626b7d79fe87be2374a64901a8353ec8a225893ece55f86","ssdeep":"768:vHAVHnOeATm/z8ccRutoSFmFdl+1sQ05k:PA5OeACzrcYtoSUlQ+k","tlshash":"2603f1adcc7bd695c28c9fbe54f6f5209ccef3a314a8dc8c522637411514ea99732a05","first_seen":"2025-10-08T08:01:19.902854Z","last_seen":"2025-10-08T08:01:19.902854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-ru-qua-phong-an-com-roi-an-em-luon.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-ru-qua-phong-an-com-roi-an-em-luon.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30514\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-233\r\nx-downloadsize: 99085\r\nx-bo-origindownloadtime: 268\r\nx-bo-compressionratio: 69.2%\r\nx-bo-processingtime: 72\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1e2c47712821137c2745461652551e54\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSihnO7NO3hqbf6c%2FUeM7pkXpVBOP5EnUet6aQQNp13XjjnAuWFGWl9nh3Wnhyx4yqKol76%2Fd2jRZ7bJq6oAgrgqhbBma6koEVOAd6s%3D\"}]}\r\ncf-ray: 98b41b23a8bb56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56b2c38605d2d103795182387d3852d8","sha1":"6509e23996fad595278c94374032ccdac15dd575","sha256":"17eacfe8fdf75fe64bb1ae564252a654fba8900bc69c577aea7d3cc9768774d6","sha512":"28858ebc1e3ce4157b8b59393458fc4d9bf8e50c7f97c3c3022f80324c792a5b26d4b2fd88e4f3054c99f4335c2e861bb13270447f76560b5ce6209bcf28bce6","ssdeep":"768:aMbgTghGm8CkOzRQTgKtZvP4kqnnjHfPmgJB9p+42d3Cz1gj4rCQB:Bb4gTETLHdmnj/BJvp+42CR","tlshash":"f0d2e170bf62bdf6715d2e4ea6d6fc8aae410d931bc7211a2c82e133537424da571905","first_seen":"2025-10-08T08:01:19.904579Z","last_seen":"2025-10-08T08:01:19.904579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Moi-chich-duoc-may-cai-em-chua-kip-suong-anh-da-tho-nhu-trau.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Moi-chich-duoc-may-cai-em-chua-kip-suong-anh-da-tho-nhu-trau.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42154\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-225\r\nx-downloadsize: 124240\r\nx-bo-origindownloadtime: 194\r\nx-bo-compressionratio: 66.07%\r\nx-bo-processingtime: 46\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 883bd7998a951214fe2478b34b49e2ee\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzYoIOcq9oBSDwQZ2UpNfv1EBETNlWNOZHQWPeYVY8Wa9dBxp0Al4B1%2BbOmOeDLjU6DbvxXelR3LHIJQuoCb5EZf5az5s9nie7VWIiI%3D\"}]}\r\ncf-ray: 98b41b23a8b756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d64f1d18abaa55db22dde833274705e","sha1":"5043c4123d0baa270580212aa88f9647844c5c3f","sha256":"5a44322b1ee7a67bcc0dc1e0b8e1c420c788bb20cc3644ab69faca85e5719250","sha512":"8701584c814151a36979eba91c4d0ad419544fb3f4e7fd899a46f39c56c88ad2de51e463fb3ae3ec25dac012c681800c2fb93c3f6d412db232446a7d24d5213a","ssdeep":"768:v05PpcWeuHLBglPuPZfuBBymGligVCMRP1dBfqf2jGMrufivYRkPS17oBlEoAx7:v0xPtH9glPuP5SUwaCMp13yf2k+Showv","tlshash":"1313f1b0d2bb42f15a4bf07fd4b65200a63e164b055f6c0142e410f57ed6ba9be6ccad","first_seen":"2025-10-08T08:01:19.906427Z","last_seen":"2025-10-08T08:01:19.906427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\ncf-ray: 98b41b2c88f10883-OSL\r\nx-amz-id-2: 0svUZMc2Lq98EidBfw11PA0pOn1dXWaJC9u2gDLhYO6s/F9aa4y+qroXCZh/f1zqATK9vuZj0752fl3VU8Z2WPvEPHq9tjC5mZULWoMqGP4=\r\nx-amz-request-id: 7CMMWS4G41P7PJXS\r\nlast-modified: Thu, 15 May 2025 12:07:44 GMT\r\netag: \"df7722471047d1868385d3c71b777260\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nage: 1060630\r\nexpires: Sat, 08 Nov 2025 08:00:42 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-range: bytes 0-893502/893503\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-04-04T12:49:15.186701Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":123,"dns":32,"connect":5,"send":0,"wait":11,"receive":94,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/images/logo.png","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/images/logo.png HTTP/1.1\r\nHost: cdn.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9560\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-266\r\nx-downloadsize: 24920\r\nx-bo-origindownloadtime: 177\r\nx-bo-compressionratio: 61.64%\r\nx-bo-processingtime: 12\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 115418d7539b2c04204aba62516d92d5\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoycVJpAdZR7K6KQRQW1fBtRHmpSPetp6Y70%2Fk9xX2idjWgrLcUIHCjt%2FpQGjLMfGYyKg6ttQOOEgTT7Oui2XwLjdnTcQGio%2F11mF7g%3D\"}]}\r\ncf-ray: 98b41b23c90956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63c84dcb386953c13c3ade30292eb2e","sha1":"5e0448fc78048f096c676123ec5ba5d4225199f3","sha256":"d04c60d0064e08d022a860b3348711e0b1b04f0fd5f6474d93837be61833e057","sha512":"4266d6448fc6f34b209e192b0c1925358b95799b0600651fa197a3d54801037fecdab7671a7b888b9bbb84b4d10b02b3291ea9ea8db35776bd8b33e6f6d76bf0","ssdeep":"192:l2YNMtKwfprNQcQxoweduD8ubEZBT0/SnY8+86L0YiL:oYNg7fQJCdl5ZJfY8dL","tlshash":"62128e75ff6ce281d946d67418a3bbc663e3ab29d741b90800dc764580865897ecc0ae","first_seen":"2025-06-20T16:35:50.826951Z","last_seen":"2025-11-15T04:19:15.308908Z","times_seen":10,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Kham-pha-co-the-cuc-ngon-cua-em-trong-vai-nang-hau.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Kham-pha-co-the-cuc-ngon-cua-em-trong-vai-nang-hau.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42188\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-318\r\nx-downloadsize: 122884\r\nx-bo-origindownloadtime: 233\r\nx-bo-compressionratio: 65.67%\r\nx-bo-processingtime: 23\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4d7c0d6a6aabd0c43d392406e7377c8a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEjm62SNKXYZK%2BsqvNbihsl19oDP%2BpzUFvmVbsB78tsQMng%2FXrGqPRNqb49aA6Lzhyx8CiQUOPR%2FOM%2B3lhSvCH2%2B6xd%2BjNu23eZDhAQ%3D\"}]}\r\ncf-ray: 98b41b23a8b156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"318d2ae24e532870d5656e4f2067f3e8","sha1":"c9f1b4b7b9bf01683510eb73108cca81fdb8ddf6","sha256":"6af899b0f434007d28c943c598fdb8d8a0b1f2fc9e06fb7135463e7c4ea5b1ab","sha512":"0b2f85d49b29af044887b674d7b25af56920811d97fe456d60e950a317707acaffda3f0d5264ca4dd7c0bf3fa5d94b17abe849847e364fde0683fe1a91228126","ssdeep":"768:4aMq0uS2QogZDs2ITLJ9zCQUd+dJ3UiFkdcXHOk0z6JBenOtxZ76i2:P/052QoWs2kXCQUd+T3UT6Hr0zVOZU","tlshash":"9413f1641f834b9c306fa465e7e0a267e5e56989cb2bf5da17f254dec4c0b3623c2818","first_seen":"2025-10-08T08:01:19.908607Z","last_seen":"2025-10-08T08:01:19.908607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/js/app.min.js?ver=3.0.2","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/js/app.min.js?ver=3.0.2 HTTP/1.1\r\nHost: cdn.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-322\r\nx-downloadsize: 115\r\nx-bo-origindownloadtime: 176\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ed7a660cf6dbf5b19b06d9ed72433a70\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQwgiD6p8zVOiyqeEFmxsounZid6nFqv3StoW76YJ37LQxz9H%2Bsm3G2jwBirl5UovGxGRlnlenjSMr8TAcFQcsU0lRFSqrHVU92fVzo%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 98b41b23c90456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5c7755ccfe93d745c09f81f2c0aa8f9c","sha1":"7076e400970b82df3b0e2da7fcfb54d14b9bc10a","sha256":"15788a480440de967f1da075c969c846e23eadde5b81338f5eab1509cba9ebac","sha512":"4eba7641e3c826ecbfc3cba0cc5bd3cfe98e9327d7a73e74ed1e90a107b21445301f849fe99cef6360368461407211b197d616d97d7c8a6d7d37f19392174b5b","ssdeep":"","tlshash":"73b09219b250e2e213aa365a4a3b5825726228a2b9dea108340a2db61c7b15c2255e1a","first_seen":"2025-06-20T16:35:50.786522Z","last_seen":"2025-12-01T08:51:26.254116Z","times_seen":12,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/images/search.svg","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/images/search.svg HTTP/1.1\r\nHost: cdn.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.viet69vn.at/wp-content/themes/video/css/app.css?ver=3.0.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: max-age=25600000\r\ncontent-encoding: br\r\netag: \"6559bdd3-43c\"\r\nlast-modified: Sun, 19 Nov 2023 07:48:35 GMT\r\ncdn-storageserver: SG-711\r\ncdn-fileserver: 515\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bc119a7264fd1598d19f5e27ce4a52d1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120799\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlFmehXhZHu12JoZuEeorCXCEdOIw6N346Vk3U7fYJ7zh2PeIsdyZHwS6D0e%2FVKbAOIgo0ny0n7s3UJE%2BX%2Fi4qEHmykdy54CzDUckg8ouA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b41b254c033181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12bdf74b2312a0b35c01453bc9d6c30f","sha1":"9054288b70926d509d57a6ce91deb25fca5d313a","sha256":"43b07517279f14a0ef249816cb69a47d679e7473a1732ec7890e7bf8bdbad52f","sha512":"d4e9977fc9497eb9db2d05369af9d78317b9bfb4f02cfc91701751ff7eeeb82eb4e69755e32adfae7ccf5795b968192cdde981b3b52a520a4a919ed57b596205","ssdeep":"","tlshash":"2c1121b8d3f913316480d32a72bae063aa7630cfd65690acb9ec0341df2649709cf16d","first_seen":"2023-06-17T08:51:19Z","last_seen":"2026-03-29T18:29:05.556566Z","times_seen":126,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/check.html","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Tinh-cu-khong-ru-nhung-em-van-toi.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Tinh-cu-khong-ru-nhung-em-van-toi.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24214\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-226\r\nx-downloadsize: 88962\r\nx-bo-origindownloadtime: 175\r\nx-bo-compressionratio: 72.78%\r\nx-bo-processingtime: 34\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 264b15bf97d225c5bdeda3d53451aa16\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eURX6MlBZeGKlEa0aGT2mTcge%2BzbEdueZjd0o%2Fz%2BSyyia5rCLtbBJB8z392OultDwpZXbJA8cP4zkuMmDlzP7pHn9DYtKSe22ncmV6w%3D\"}]}\r\ncf-ray: 98b41b2398a656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f996188d6c4a04954dba103c57435ed5","sha1":"be0ffc1ebac30f2509dda0406ab0af7e67ad12ef","sha256":"58d35d09d3c9b34f1a0d8193e6b13a0389a641c11872e3e605fb112c7f3c1401","sha512":"bb3aaa0d2e41ce6283ba9f39574b021ca94a3d9e86c32793ff4d2605787d8b01cc933ee1299ca065a640bd87e33d1859503ee49d58b8388ba66521e98cedafc9","ssdeep":"384:XM6pRhxAz+jZun2qRpuK3BvxoWLT6/hPJdTvtMa+rrmvq2tVBgd1E8nKFNZ72Agy:86pRh+z+9un220K3Bvxoc6n4a+rqi2t9","tlshash":"c5b2e1603fd1a39b76637e6bb2cbc6ef0707c8c5756aa18da82c210124d61c7425e9df","first_seen":"2025-10-08T08:01:19.912416Z","last_seen":"2025-10-08T08:01:19.912416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Du-dua-tren-vong-chim-anh-do-may-vien-bi-cam-thoi-em-da-chay-nuoc-chich-nho-ca-doi.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Du-dua-tren-vong-chim-anh-do-may-vien-bi-cam-thoi-em-da-chay-nuoc-chich-nho-ca-doi.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25424\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-285\r\nx-downloadsize: 107575\r\nx-bo-origindownloadtime: 235\r\nx-bo-compressionratio: 76.37%\r\nx-bo-processingtime: 24\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 73ec2d4f607e0406b95331ef7ca504be\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFbLSY27Q98Sfkmn1RQZ0gEWUXc8vYdG947n4yCfk01qlkewWKLSfVeEUjRxrC4tPuemjW%2FUiQUnR0S1EwYsjanuj8JwHu%2BpIoN1g20%3D\"}]}\r\ncf-ray: 98b41b2398ab56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebd50681ce11d30a77b3f9273bcad179","sha1":"d91ff82866d73f9ae9ee2f217727210b28d2f54c","sha256":"1c1b92e661bcc9718058c28986b6eb1ac109f6e0c29bfaa58e0c3aedd0e72171","sha512":"0cac8f2f148c026a8096fcf420de006870860cc3783d7355751d41ffc8bc574b6122937730bd3ce6a361ce798158626cd8353cb494d3e995538f6e197be8bc0c","ssdeep":"384:LJG6xMKtauyVse7HUtwgntVGV+hOnGYtWa8uUBXcPTp0jPGWoqauEF0lhGjqkc:Lc4Cubxt1n+1RUBXQd0jPGWoqaRoQjq","tlshash":"5bb2e1151ee82d7bc7bb1f7e7005282deb168f481c13fa265eda98e81cd5b08455c903","first_seen":"2025-10-08T08:01:19.914137Z","last_seen":"2025-10-08T08:01:19.914137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-sinh-vien-voi-so-thich-la-lung-xem-review-phim-luc-chich-Phan2.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-sinh-vien-voi-so-thich-la-lung-xem-review-phim-luc-chich-Phan2.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27524\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-269\r\nx-downloadsize: 111544\r\nx-bo-origindownloadtime: 164\r\nx-bo-compressionratio: 75.32%\r\nx-bo-processingtime: 42\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6c638108bb000c67fbc4429f53568e53\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120799\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFkAnvwnHENS8K8L3qryv5yDAbk2gM%2FdfN0JliJ9P88T%2FSOtnwXD2t1necF3uNJTzFxv%2FLiUzUsahdVKI6NWnJQef5E8mUEuj%2Fm9G8M%3D\"}]}\r\ncf-ray: 98b41b2398af56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8841e51a3249b83bd51692b0d42ec32","sha1":"18c5d3e6624f0ba2afd7fbef0168abfe9a5a73d7","sha256":"853f416f99a9257a96d86badca60eceac6003e929b87ea0b505aed2231bdebc6","sha512":"9786041105d7ccd52fdf23029f25c873d23152eb9eed63e2b38d10a2c51f59d5f2d1fd0f40a3b3cf4063025d3b495cd38d1e77413d1ce98e0a7adc68722b1efb","ssdeep":"768:B0pavfiM34JTj0k6H248s5ikblAyhnDjf:BHfinh6Bn5fnvf","tlshash":"f0c2f11a5a2689ecd25372cd5267b63de2c603f440ece6a11bf1170d1d5c9ee2095b71","first_seen":"2025-10-08T08:01:19.916593Z","last_seen":"2025-10-08T08:01:19.916593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zx79EuIaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=3211562234590208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=zx79EuIaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=3211562234590208\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251008030006828f4b8ad24434aa3b24cc57\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6761,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6761), with no line terminators","md5":"127ca739756038dd42e5d426a7ac0313","sha1":"6d8cb08d438b246bcf739d4d66895ffc06c8bd20","sha256":"05d3e2a77c184065fbbf1d54e11f2a91d4eff068129ac815406a2bdcffdeab8c","sha512":"e72744d98f9083352f6d7012b681e2f5c3f93d5f28377c206f62c88560a88b06d3a0fa54f026b7fc21130883e8b56e6cf89addbb57e06764ba9e79d9fee22ced","ssdeep":"192:6TDdAG3wvCRuDdAG3wvCeuDdAG3wvCNuDdAG3wvClpo:WpARpASpAbpAMpo","tlshash":"3dd10b358f9f2dba3f90062db2344ca1faf5795e1c1f394cd92149c26dcb258b427989","first_seen":"2025-10-08T08:01:19.918221Z","last_seen":"2025-10-08T08:01:19.918221Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T08:00:40.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCPxkkGxoF%2FLVVkR%2F5Eg0QE968FjYLAVqmB8NwP38jd%2FgKX3IEzhmO3xh4izuRqdM1HqAVkMgSQ2cDjv3YOdEWHVImvzauRRQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98b41b201d4756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:21.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":149342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13908)","md5":"d15c73f65c0a5b83dbc8a5c4aa9143a4","sha1":"c19ca90495fa9dc2d771e57a29d3e1150d79e290","sha256":"cde5e527f38f5d6264d59bfef1edc0d52d2017e7ba1a01dd240ea8dcc75f0869","sha512":"5582b252a36ff50152f8f3843240ce5ec8f6622b1f2243fec5fd8a7ff2b23230d40e2a68b5c297e1ceb3f180815bf095759560d733ebee01dd2a061d8f3ace70","ssdeep":"1536:/I48apUiBvxBovE4yURQhNR4PjLZVKk9nPdetCo/+yjkkoErfScO0Dud/yysM7Zw:/I47GidxKL8rd","tlshash":"0de3f77483f80579219fc1f89e3c6a277fa6e503d587448ab9ec27615f42c93cc632a9","first_seen":"2025-10-08T08:01:19.920898Z","last_seen":"2025-10-08T08:01:19.920898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":238,"dns":62,"connect":4,"send":0,"wait":198,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /get/2025698?id=2025698\u0026pid=__clb-spot_2025698_bpw_2\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nUID=251008030006828f4b8ad24434aa3b24cc57; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"187614d66268d6b036cc380b8decaa37","sha1":"8031c404ff553c3e415409de19fc8fc7e25f33f9","sha256":"44505c5894a9649131b539b4d0e34f042e0735447ca7054390312811a46267ac","sha512":"b21dc257e8994da76aeb5e8bab96af0b37c3bbfd274f8d47b952c3865f8fd9cdf8b5fd2ab3bf5610c947ce17e70b8c8d78e10952046b121158dddea7dc8f24ce","ssdeep":"","tlshash":"ccf097910968d48222a1941d82e0bc572a8316593a7760d90738ce196c646ee0917e05","first_seen":"2025-10-08T08:01:19.923054Z","last_seen":"2025-10-08T08:01:19.923054Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-no-vua-bu-cu-da-xuat-tinh-thanh-nien-ngai-con-lay-ly-do-lau-chua-lam-tinh-moi-the.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-no-vua-bu-cu-da-xuat-tinh-thanh-nien-ngai-con-lay-ly-do-lau-chua-lam-tinh-moi-the.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24608\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-42\r\nx-downloadsize: 89370\r\nx-bo-origindownloadtime: 207\r\nx-bo-compressionratio: 72.47%\r\nx-bo-processingtime: 31\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 488b754caa6c331f3f7726e39bb6f744\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFmR2CG7%2BG8gxK1gk%2F16ylzY6MZHtms0s7iyeX%2F7Ou%2Fd8wxSIaXBcevp%2F6vUgOqtH5um3V%2F%2BJRsbGUSBXXaZoRIK0TIH7YkvF1II3b0%3D\"}]}\r\ncf-ray: 98b41b2398a956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ed45c2e0a0351973c0c0eaae42be456","sha1":"20267e0529fe8d22a7bab8d12f02c12964b5865c","sha256":"8d5614fca4e47463693e2420d703cd540d5ea93e23f21c19a1beaf7adf714d41","sha512":"bedcd9e51e6555ac28f6eeadd1a14aa078530dfe227acca7462f9020fbc0f485d7c9f8d2a7ee4699bea24361916b5758b657d85261073de571a6ecdcfc1b5818","ssdeep":"384:lAg57g2NzTQ3XkcdCjfH3FQ2olaHrpPQ/eJ9BQFlp3ZVVwvpRvRDVc2Q5b1+NH7w:lAASXkccjF0upPQ/gQHVZvwv9B+MNHs","tlshash":"eeb2e1bc32b08eba15fa2c952fcdc10920b5477bc4e9af94cd2c95f0f464091b55eb4a","first_seen":"2025-10-08T08:01:19.92513Z","last_seen":"2025-10-08T08:01:19.92513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Buom-em-vua-chay-nuoc-chua-kip-suong-thi-anh-da-xuat-tinh.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Buom-em-vua-chay-nuoc-chua-kip-suong-thi-anh-da-xuat-tinh.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35110\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-321\r\nx-downloadsize: 111634\r\nx-bo-origindownloadtime: 174\r\nx-bo-compressionratio: 68.55%\r\nx-bo-processingtime: 24\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 01ab8cff8b0cd6e321d5a7402e637545\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baE8wmu9T2ssdnKDgdT0G0W0PlUuapJv3ulSHFv%2BpMR4o5GpU6Hnm5R0do2Pu7%2FfYbuYxgeYf8ifqSC6a9nNMYsCCMzmnE4ubcdNq4w%3D\"}]}\r\ncf-ray: 98b41b2398aa56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f1c9787dcd4ae45cf4ba5ccf1348547","sha1":"582b33d1ac0820db10b5efb78ba97ea39f9aea57","sha256":"1d45a4358409387a1cad9e26964218cc995fc434a79d9ce24c9f65f4a49b9756","sha512":"d448983a809df93788135672b21fbedeb7f3db979be91193c103364fd2f0de18a66244c5e5d1ffc93dd40a6be2a7303bb91698c5d7bccb283dfdd5e383de6c56","ssdeep":"768:BOQNsDg0bniGnyl/rtkq+300/Q1UFGWcsV+W:BO7xiGylyVkWMUYCVB","tlshash":"1df2f1d91a18643f6373983d784b5106e783ea95c4bc014d99b71399e3377a4cafa930","first_seen":"2025-10-08T08:01:19.927071Z","last_seen":"2025-10-08T08:01:19.927071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Cuoc-tinh-chop-nhoang-voi-em-2k1-gai-mot-con-eo-thon-mong-to.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Cuoc-tinh-chop-nhoang-voi-em-2k1-gai-mot-con-eo-thon-mong-to.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31544\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-320\r\nx-downloadsize: 113141\r\nx-bo-origindownloadtime: 192\r\nx-bo-compressionratio: 72.12%\r\nx-bo-processingtime: 21\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bf8fb4bf01c2659cf350cb0ed8ebcaf5\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPE2d1toZS%2BuEBpa3Lhn3kdSRXgDKLFZ7AuqBVRgX2t2tUr3riCeowRGf1WhpdgLd2CJSBjMVlwZaZMCO4PrfrqJdVNyXuhtzARTvEk%3D\"}]}\r\ncf-ray: 98b41b23989856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c6166f5cd8ea70171e9f63ce3df620c","sha1":"f933d4fad53cb9740742f6935b13dc08fc64d046","sha256":"5241886b1865ea0d98dbc167ac444d0a6e7997a3f8744eb1a7569c3a994f02e3","sha512":"1fa6f85ac9b3da28f9d522a3d0ff2caca5e37a05e1df77cfc4085f1c0803a0bce6f23569771fc1026020330b1097295ea79c2d4021747af67da337d5a7d572be","ssdeep":"768:MWF+dRaYst26Xra5uhxFVoVcPHtTNJF+4scYOnmpTdhs7:MWF6st2Kra5kxvHFTNJ9jmZd67","tlshash":"a0e2e1116e45f08a7bf445abe8fe8d43229e6c446e32f219c595f8c04e8cfb51a9fb14","first_seen":"2025-10-08T08:01:19.929372Z","last_seen":"2025-10-08T08:01:19.929372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Chim-do-bi-nua-dem-em-day-di-uong-nuoc-anh-cung-ga-lam-them-nhay-nua.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Chim-do-bi-nua-dem-em-day-di-uong-nuoc-anh-cung-ga-lam-them-nhay-nua.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26478\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-243\r\nx-downloadsize: 92833\r\nx-bo-origindownloadtime: 932\r\nx-bo-compressionratio: 71.48%\r\nx-bo-processingtime: 33\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: badc4958a6c309f14165a56ffcce1551\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10OWGN0mqho7IIb9Ctfs2F%2FOzaRFax5%2B61bFfNmN52yCKgns7pNSKzriXZQS8hf0BLURl5MJ7lv08QsSXwst4Kc2ghxcZAvboY6DyRY%3D\"}]}\r\ncf-ray: 98b41b2398a456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba1d0d96baf3c15ef178cef83b50983a","sha1":"c33b89488b890db7ab4f7f6c01583f1f2801c8e0","sha256":"f5fedbb16f1680c7e66f830c1dc7d2b55f3a8a945a172ee16d97d2a86c4d2c17","sha512":"952c9696c5ff56dcd17fa2eeb67e0b3dc32743626abc4134f7b9269b3db361f863847c999cb77ad7ef422fef784036f5a25b7c66ff2bfc29513b41273b668089","ssdeep":"384:J3cr7grdMacva6A/mZqufVdkFQnGxhYH4IzjAt2oQokh+Q/1znSTypP5goGWK:JMrd2/+qufVOa4aAtxkDiyx","tlshash":"05c2e16c737dd4a35e952d68797bc2f7899cbaa62250c1f3303c98f15096dc0056fca6","first_seen":"2025-10-08T08:01:19.932099Z","last_seen":"2025-10-08T08:01:19.932099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1390,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Chich-suong-qua-em-gai-xinh-cong-het-ca-nguoi-len-tan-huong.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Chich-suong-qua-em-gai-xinh-cong-het-ca-nguoi-len-tan-huong.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28942\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-320\r\nx-downloadsize: 99455\r\nx-bo-origindownloadtime: 220\r\nx-bo-compressionratio: 70.9%\r\nx-bo-processingtime: 23\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b1e883aaccc1f46371ebeb12e2086b8b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rrRIGBuSPPWZxYUaC%2BR1SDJqRGsCeoLn%2Fiz5X1rsq1QGVwTM%2BnePg9PoomEbxD2G47K567uDP5JLtAB6QOsdBrOVc77uOJan1R2WKY%3D\"}]}\r\ncf-ray: 98b41b23a8b556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28942,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b342b46e58d2ac8392567e1049a97f6","sha1":"3774e08ac4018bef1d3e6f4a978b9891c0e2c2b5","sha256":"07cd147245a1903d470227be8a49c5b7a1708600f822b5f22cae514f0f46f3bc","sha512":"519982bbb262fcda56efb7bee039f1299a8e05fd6738671d711c18ffe113b55573897aff15c001245f1e117e0b92c85605ac708e4c68bca9c3b43da70fe78f61","ssdeep":"768:pGOzpBGSjEONRUjn9rIQdR2s12plTRacceOXNWM1:R2jONRUTRR2AUTRdceOX4Y","tlshash":"b8d2f16753cef0d71a019314436bd63a2cae463831755a87a80cb4cc633fa79a927b9d","first_seen":"2025-10-08T08:01:19.934392Z","last_seen":"2025-10-08T08:01:19.934392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 07 Oct 2025 08:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e4d2dc-24ff1\"\r\nexpires: Wed, 15 Oct 2025 08:00:41 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"76225d318c68515cc3d207691cf8f7cd","sha1":"ad71cc82c398f4d2d4020b82dea156cbdf5576cd","sha256":"dddef12df5c68bdb3bbca9871a9137879147b0c67402e78201f4cfaabe32ac36","sha512":"887eb27393aca13c57d51f95df904a6eddd1462a56cecf5af8fbb419818c17d1d137025707fcd9f11bbb07e9dab3bfde81dcc258acafaa6b2b22e2ff776c4f63","ssdeep":"1536:4WvdY2BsOjBTOdBpIiT4bWHNgxRGnwUdDjch7jcu9VI4VkAt4V4qp1DQnXhGZ/f1:4mLoVkyHerGnCzaVV4qQ6Npl","tlshash":"d0e3c9ccabca38358aa7a47e2c2f65355f774cd3b85c8050d067d1c41c7aa09d6a2fb9","first_seen":"2025-10-07T10:27:22.563356Z","last_seen":"2025-10-09T11:55:30.914474Z","times_seen":36,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":79,"dns":32,"connect":21,"send":0,"wait":39,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viet69vn.at/wp-content/themes/video/images/menu-icon/icon-hashtag.svg","fqdn":"viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/images/menu-icon/icon-hashtag.svg HTTP/1.1\r\nHost: viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Nov 2023 08:15:24 GMT\r\nvary: accept-encoding\r\nexpires: Fri, 24 Oct 2025 15:40:11 GMT\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate\r\npragma: public\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pX%2BPXKrkmCDTAOKbbGNblh%2BqrxfytoSfogJaxcvXY%2Fcu7EWhpkcif2UtH8dZmhV36GJiYi08sJE%2BZKQ4OivrM3yvtPXdOpTFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 120800\r\ncf-cache-status: HIT\r\netag: W/\"654f381c-654\"\r\ncontent-encoding: br\r\ncf-ray: 98b41b23685556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1620,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a288424d92f7dc00fedb217e72432da","sha1":"8e0d82006c66ebfa6db0b0d474f04d410db23b9a","sha256":"4a76c4fa7a19224174bcc10a2ce34767cfb28dcb5e54d4c998170e9693cdbedf","sha512":"de5545aa7dfb6d09ce1887df4cb84e97131bd5521101d878932aba145f5c696dcb478dd8aa9028929a5085c32ea16ac4205c088ec753574d9da68cf4d008ec54","ssdeep":"","tlshash":"4731cffdb34c64c0ab16d7f2f5e2a44a7d5738fa1b80c55ae1d66de0882105d4b6e881","first_seen":"2023-05-09T06:21:38Z","last_seen":"2026-03-30T01:18:37.92185Z","times_seen":109,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Chim-anh-do-ca-3-4-vien-bi-the-nay-thi-dang-mo-ngu-em-cung-day-lam-tinh.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Chim-anh-do-ca-3-4-vien-bi-the-nay-thi-dang-mo-ngu-em-cung-day-lam-tinh.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50724\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-320\r\nx-downloadsize: 135241\r\nx-bo-origindownloadtime: 211\r\nx-bo-compressionratio: 62.49%\r\nx-bo-processingtime: 25\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5249a30fe96bcfeebbbfef970c3cda49\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5OIrBeqkfVIDaY9fxTsYqJYddFoboWV6R8rYea2ShNO0NJ0Snl7iVKSOi83gV5uGWLRj9hlfHy8UjwrghaVChycpYVxh9cu78Th51w%3D\"}]}\r\ncf-ray: 98b41b23989b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"763fd75b33b8ae2b7fa4276ae9c66259","sha1":"a5e0cc96da4fae3cba8a8658cd2f12a82823e2d1","sha256":"6e17bbc6b4784deb2bc09596a3da48ce7d9626e8ae318b71ea75edeec116123a","sha512":"b949a5c64d8eb3cd20990425c2cf2986181b6e2f24beeac9e1127386fd565faac6d25ffc2d48c2b92fe1a9b6a3b8ce7d333acd624bf0cb8b5cb2efc735a685e3","ssdeep":"1536:sfUlaNT2PtIK+r6lMVhaQsyvIcceqD3XD4:sfUwT2PtDS6lMfds45ceqDnD4","tlshash":"9333f165c69bc5b8c3b21b3c2d801f5e6760f65912fe07062e4eb2de642875a1e70bb4","first_seen":"2025-10-08T08:01:19.93844Z","last_seen":"2025-10-08T08:01:19.93844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Kinh-nghiem-em-thieu-chu-cham-chi-bu-cu-thi-em-thua.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Kinh-nghiem-em-thieu-chu-cham-chi-bu-cu-thi-em-thua.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30570\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-187\r\nx-downloadsize: 106279\r\nx-bo-origindownloadtime: 188\r\nx-bo-compressionratio: 71.24%\r\nx-bo-processingtime: 35\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f9929c126cac5b03f2cb98ad69763dec\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cF42y1BbZJFh8KarKL9jHl8bHd1fefpXnjjkTHlGcs76qDdtjlx7wpX0XiV1qIrEOLv%2F18Gjm0fhEC45xG%2BxjNNQx%2BWntPkqe5n54Dc%3D\"}]}\r\ncf-ray: 98b41b23989d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a706a4fd7cb86b613a4833b145d1eb93","sha1":"40c29462ed185f076b89ecef82f7814f3b499fee","sha256":"93381e91ce4c2cc5cb3cb999ee0c99826c3b9f5be0bd407efd8ee1c243bea91c","sha512":"53227e43f560daa8e939b6c3c009417cb162febafbc62899d6573b2c0c67753f9556d7034d6a1da2d3e7175da4b67163d2fe6ebd9e1fe871d8c3f197f01458af","ssdeep":"768:DF6t9Vn0fpQGmisEfFaWJEv28LVfrgYcPHZ6bmGU2b:DYRnunhPqvRLtrgYcPHgm","tlshash":"f0d2f2ac386e493555c6372e459f85da40eedb61b43c0e5acabd4cf3991093be4871c8","first_seen":"2025-10-08T08:01:19.941306Z","last_seen":"2025-10-08T08:01:19.941306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-mac-ao-dai-ma-anh-khong-cho-coi-bat-xe-dung-quan-ra-chich.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-mac-ao-dai-ma-anh-khong-cho-coi-bat-xe-dung-quan-ra-chich.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21734\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-224\r\nx-downloadsize: 96778\r\nx-bo-origindownloadtime: 174\r\nx-bo-compressionratio: 77.54%\r\nx-bo-processingtime: 39\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68ef4ab72d13b94e856d0d70ec6ab660\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNJnL3zEQAmbUY3vGTfCKWnUEOKY1cSeidfUDBzkCjDb8seskPciHphQIiyGfcC6zNL8%2FaWuo5aB47PNcx6zSm84RINEyxRONS7psGs%3D\"}]}\r\ncf-ray: 98b41b2398a556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1761ee0925d8785e3903f0661514d97","sha1":"0f5ccf69ebbb75167c8b041fb979bf30d13f633d","sha256":"5f15f9cbc736121b66cc07edb52b546fa2666c8297e8b12359c59af5bb977be6","sha512":"363bfccf991eb14333a021c3e70a7efe1554a7cb2109ef751fba4022b6d1e290abf3cd2060649e3eb334e0db885ce20acca098a8a17109591239fac382a24010","ssdeep":"384:50wtKexYlmwt5a3Ne6MLytt2et+gVgT22ItNDj8yP3QukbJQU62wCth7i8:5ht1wb0NCGnLdVWUYyPAJbJQh2Jj","tlshash":"fea2f1d88377a6839d416f70db373d12d8e59c17dab0fd209536300032a769ed8b4e18","first_seen":"2025-10-08T08:01:19.943205Z","last_seen":"2025-10-08T08:01:19.943205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Tay-deo-nhan-cuoi-roi-ma-moi-lan-gap-anh-em-van-tinh-cam-qua.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Tay-deo-nhan-cuoi-roi-ma-moi-lan-gap-anh-em-van-tinh-cam-qua.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20616\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-133\r\nx-downloadsize: 93640\r\nx-bo-origindownloadtime: 168\r\nx-bo-compressionratio: 77.98%\r\nx-bo-processingtime: 34\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: cf688b579382fb4a73d77dc2fafccb41\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120799\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEM5WJm9tSEo2h8IV7SRqu8Oe77UVoRgKx9L3Ze776SkzWL3LyOoPMMEwE07VCtEWXx6HToIN1ON2vPPtNEHA1IRLTa2kYXoaX%2BihgE%3D\"}]}\r\ncf-ray: 98b41b2398ae56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78572101abc36a792cd5a44483d378de","sha1":"2c8a70eef3fdcb04188a437c89af99a154c764c4","sha256":"6a5d939f478a86f0159e775992be61cd0471e5be68977c78fcd1973195e1733e","sha512":"c9d18bc2da74fc06c376697a656c117de1e336a66b15e8a2c6b604d74af188f99913874d097c438b3dd6c5f47720643261f9a8311bbdc3ffeb1d7c2adb57e2dd","ssdeep":"384:2Sneq7xkXil/vXJ0U8v2hR5seMXU6ZHcTEf1U/0kNbdA:2waXqvXGUAQ5sewdac6","tlshash":"4792e111372576e1f0340d4cb6262df4496c639daeba28e052212cd4edced5ebf8a098","first_seen":"2025-10-08T08:01:19.945882Z","last_seen":"2025-10-08T08:01:19.945882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/in.js","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citadelexampleruckus.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:33:18 GMT","end":"Fri, 07 Nov 2025 14:33:17 GMT"},"fingerprint":{"sha1":"9E:93:59:5B:B7:DD:23:CC:81:4C:BE:E0:6E:4A:C6:11:2D:51:60:E7","sha256":"FE:8D:E8:AB:5E:4C:CA:83:BA:AE:65:7D:D3:E8:E6:85:42:C0:59:2A:1B:5E:24:3D:4B:46:41:C9:3F:38:3C:6E"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: citadelexampleruckus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 07 Oct 2025 08:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e4d2dc-2be4e\"\r\nexpires: Wed, 15 Oct 2025 08:00:41 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":179790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6ff59ef871521b28357c5a6fd475bb10","sha1":"a064fc74704ca2c671e516953bddc11beec961f9","sha256":"f9e009e62d24be235279846ea5df6a1568ab7fbfc6dfe03509c358420da25887","sha512":"ef5d3c766b3b4ae374da4d2d3fe9bbffcffbdfee21e003bb84d490f39d068e898e5b5605bb7096edf22a29464a1f4f9ec90eaa16f6c05fbebb2b619883e7635c","ssdeep":"3072:yelEfWiV9y2hMVT//x5i74TYR0R7CRxLFO:MML5A4Tc0SxLM","tlshash":"8604b85c2b4730b341329019992fdd29dd2994d995cdb602ceb3f8e826a5f0fb123b79","first_seen":"2025-10-07T13:30:31.709581Z","last_seen":"2025-10-09T13:09:37.503074Z","times_seen":15,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":79,"dns":32,"connect":19,"send":0,"wait":37,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Em-gai-vu-to-buom-mup-lam-tinh-hon-hit-tinh-cam-em-suong-ren-khong-biet-met.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Em-gai-vu-to-buom-mup-lam-tinh-hon-hit-tinh-cam-em-suong-ren-khong-biet-met.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19946\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-227\r\nx-downloadsize: 78078\r\nx-bo-origindownloadtime: 362\r\nx-bo-compressionratio: 74.45%\r\nx-bo-processingtime: 38\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 53ac79b5d5778f40c3686df776cb65a7\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TeoARWMem0pnTKjIAmdI68ltgYl7GQkg75Q%2FH4%2FXy9dtpjIEM5kzYEnpXf0Kjy0ze9zvR6VLkraG6FNel4ecLo%2BpmrrjbVF%2B2g%2Fiyo%3D\"}]}\r\ncf-ray: 98b41b2398a856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01d30aff60ed600a59c9c46596d28986","sha1":"5d9451631496df91655516cec319f3930e04efd2","sha256":"e4fe7aa8589cd183a91e5791d53356c3bfcc659ba9f969cc94a2909ff1504151","sha512":"4ff0290d928a62c2e7d8ee6b5610b50196847e0435ded16f7f2934a11fe0b4682e0d4a4fd54fc5ca058477a4cd0473d6490908e1ff83900371811e4e610d59c2","ssdeep":"384:IwpGSXF+B0s1Ge9x3JrRFe5CKcMGSGBkCFzzbBtI/i9J:IwpNV81t3FeDPSttxL","tlshash":"fd92d0bbd2665f07416b87e9ae2f99c0684048920b0d5cede7b16429bea51280ff5c4e","first_seen":"2025-10-08T08:01:19.950644Z","last_seen":"2025-10-08T08:01:19.950644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Be-sinh-vien-moi-vao-con-duong-some-ma-cac-anh-da-ga-choi-khong-bao.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Be-sinh-vien-moi-vao-con-duong-some-ma-cac-anh-da-ga-choi-khong-bao.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26418\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-286\r\nx-downloadsize: 105382\r\nx-bo-origindownloadtime: 179\r\nx-bo-compressionratio: 74.93%\r\nx-bo-processingtime: 25\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 250c7165286143ee928670ce4af390a7\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mgp7xOIQTAiKk9j64SaSdCe6qKuj0Ni%2B9uAAcuuievNMBEZ%2F1Jg%2BdtmRHqrYPxMFfwN9IqEFc3QvI7W4E8Z%2FmH%2Bu5w37mrv8pNGwucQ%3D\"}]}\r\ncf-ray: 98b41b23989c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42bb10a7eca4adb1da8828f2d762ddee","sha1":"8d95dade88491d29e0063fa656adf1d8d4a1d06d","sha256":"2affd9c892ac5043222b5f942e926bb84588e3e1c4d23c17d34d22a4e929a4b1","sha512":"da667076c625b300b460c57969b8ff5d8335338a0d9169652a01c28c80e4f4b38d60785a19cd594cb390d7afc8cc56b4fa600ca0588a59689c2783d6a0a2ad8e","ssdeep":"768:vkUyl84pxM3rvWwvuRO3oH9KJWe9iBJeVc0/:vkUl4wz2d0JbU/XY","tlshash":"6bc2e1e16d18e3adfe76a0f9f9552bf1105ba90d07a74115c852f0ba3d5ac353f00b19","first_seen":"2025-10-08T08:01:19.953313Z","last_seen":"2025-10-08T08:01:19.953313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Nhung-ky-niem-cung-em-sinh-vien-vua-ngon-vua-dam-gap-em-la-anh-mang-day-du-do-choi.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Nhung-ky-niem-cung-em-sinh-vien-vua-ngon-vua-dam-gap-em-la-anh-mang-day-du-do-choi.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27758\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-229\r\nx-downloadsize: 96692\r\nx-bo-origindownloadtime: 172\r\nx-bo-compressionratio: 71.29%\r\nx-bo-processingtime: 50\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6b1a46b5c7e457b00d89e2c2f4bf755e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyKj7p1uhawyvyuwcNLoxTNHBosahgprgFlmxOJpxJ%2BADQeTHqfHdxhSGQhKUr3gUZ8eKs9eiuwp2gaa4DM5rvTFoOdgN5i4EsxDIAQ%3D\"}]}\r\ncf-ray: 98b41b23a8b956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"202eb4bfb7b518ab4205ec3474f0593c","sha1":"4a009af20b60a2e75399babf9e06a5230991d475","sha256":"1ded6e044bbacf9f84cf5870d18f5b92a5b2eb6711fef0bff6514159f1804826","sha512":"fdaf9a7046e8c8b1ab6f9e9becf4609a7053cc560527e2e8ebebb22ab60adbb2b6dd9c97e062079e9e1a361a8caf981ae192a63f286b48202e22e976a8852db2","ssdeep":"384:GaxEVfkQHp2wNk837QIbV8MWBgzrzrIdfu/nGPVEOfe1nG6ysCbawbIAS+tJCbbq:Gam8QHkWk83MIbVzWBgzrgenGECVyaC","tlshash":"2ec2e013bbe176a540c97f578f7fb886e01059146faebdad00e47c806f72106ac994ce","first_seen":"2025-10-08T08:01:19.955514Z","last_seen":"2025-10-08T08:01:19.955514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=K22WGXoaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6307786978391040\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:30:07 GMT","end":"Fri, 07 Nov 2025 14:30:06 GMT"},"fingerprint":{"sha1":"70:EE:3B:A1:38:1F:8F:B3:CA:62:37:23:0A:21:2A:86:6D:5A:3B:26","sha256":"C5:EE:9F:8B:F5:EB:BF:CF:EB:23:84:5C:53:29:1F:8F:EC:18:76:5A:CC:D3:15:96:EA:59:74:20:D6:3B:CE:47"}}},"request":{"raw":"GET /get/2041242?id=2041242\u0026jp=_clgickcfzkvupsexreedoo\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=K22WGXoaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6307786978391040\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nUID=2510080300c6fb8be2359f46b6933be812a3; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2086), with no line terminators","md5":"0d9ad42a70466263fca0b4320bec6a05","sha1":"59d0f9a382a737987c3e55e089758ae0d5108d02","sha256":"7d71a438a75200c96be37aef7349c2d04af291f8075c87e0355c4479526e6cae","sha512":"617678f45d586a15e0eac2a7b12192881ce2473908da770b2fd5da01cf705fafe951ea1840c8af2138ab9fae9fe2225a3fef3360aba530d39b257c418b7f59ac","ssdeep":"","tlshash":"3141a9943595d5fea7475f4863a75d8e0e886bdd0a2bfd4a148ae0e9c1083ff03c385a","first_seen":"2025-10-08T08:01:19.95783Z","last_seen":"2025-10-08T08:01:19.95783Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=LBXw7XkaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6870736931791360\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citadelexampleruckus.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:33:18 GMT","end":"Fri, 07 Nov 2025 14:33:17 GMT"},"fingerprint":{"sha1":"9E:93:59:5B:B7:DD:23:CC:81:4C:BE:E0:6E:4A:C6:11:2D:51:60:E7","sha256":"FE:8D:E8:AB:5E:4C:CA:83:BA:AE:65:7D:D3:E8:E6:85:42:C0:59:2A:1B:5E:24:3D:4B:46:41:C9:3F:38:3C:6E"}}},"request":{"raw":"GET /get/1997785?id=1997785\u0026jp=_clieoojxkxqimdajswhlms\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=LBXw7XkaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=6870736931791360\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: citadelexampleruckus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; UID=25100803001269339dc92049f186c0edfb90; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8582,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8573), with no line terminators","md5":"0e401e09466e01a3880e65ace261c3b4","sha1":"3a2a61422bda866830ed07626cc33dbc03d3a038","sha256":"b84180bef4ed9b6fb7a675c911874e525882b4870bcba85391b749b906297581","sha512":"0742f82d955e8a856850733a8a2a5c0233efc94f1bc65a4f9ea0654c280c6f860b791666c01b366c0496b9ac29b8a96036b81de7843a31fdf342b5daefe4bc88","ssdeep":"192:937U9sJ6ciDKqgzqyp3XCgZ4iGG/aCDKtCZs0VJwYYx2gKK:5g9jcisqypdGiGHCJs0VJW2gKK","tlshash":"05027ebd7308cae45cda0deec7362c732f6a7c47882720d48466ce5cd0046b951b9637","first_seen":"2025-10-08T08:01:19.960071Z","last_seen":"2025-10-08T08:01:19.960071Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Lay-vo-ve-de-ban-than-chich-em-con-goi-video-cho-chong-luc-lam-tinh-voi-ban.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Lay-vo-ve-de-ban-than-chich-em-con-goi-video-cho-chong-luc-lam-tinh-voi-ban.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28176\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-265\r\nx-downloadsize: 98055\r\nx-bo-origindownloadtime: 186\r\nx-bo-compressionratio: 71.27%\r\nx-bo-processingtime: 36\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 30ce1f9a83e47b701c3449283bd44e6d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUzK5r9e6lB7rPTWQELw6m8ifqpRNNc6cRg3dKLzODo9bYSLANyLY9BGMP1lVnkIfqJ0LkMNrltssFbHKu%2FXI%2BGUedT%2FJNSn5nCTL0U%3D\"}]}\r\ncf-ray: 98b41b23a8b356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a812496a8d95c9499ffae34add667ed5","sha1":"0ea88cf0e4c8074629e4887e0fa2a4e57cf3dcee","sha256":"bc54e91358a52eb9fb4e379ba08031154fe0b7938319902f8031a2aa4819b514","sha512":"a39caa15663d619ef73a39793fe99446184e5f10b6e62cfc17aa219746ace1b1911197d83d8e1eb5e3209785fdf9b01abe32d0b600813a37967f6039532048ca","ssdeep":"768:Z0cjNyfS7z/iOkgjAVCO+I6Am1JAHOThq3rFTUCNzJ:dNb7z/iB5Pu9qbFQCZ","tlshash":"08c2e182a5e0c407900db77228a697f7c33052796dd75f85d869c39b8befe7105a470e","first_seen":"2025-10-08T08:01:19.962324Z","last_seen":"2025-10-08T08:01:19.962324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viet69vn.at/uploads/2025/10/Lan-dau-duoc-choi-public-trong-xe-o-to-ma-em-cuoi-phe-qua-khong-biet-met.jpg","fqdn":"img.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /uploads/2025/10/Lan-dau-duoc-choi-public-trong-xe-o-to-ma-em-cuoi-phe-qua-khong-biet-met.jpg HTTP/1.1\r\nHost: img.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27946\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 08 Oct 2025 08:00:41 GMT\r\nx-bo-server: DE-227\r\nx-downloadsize: 97476\r\nx-bo-origindownloadtime: 189\r\nx-bo-compressionratio: 71.33%\r\nx-bo-processingtime: 55\r\nx-bo-version: 1.0.26\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2025 08:00:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5a69bf0fc79d1c12b1d7169433a337f3\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYX2YTtWWGbhgaStIKAvF6AvhFuc5zs4qnzAZXuTqvcvWK9bLu7GkITVrm3JDtlRoAoXX9U1P9K6LNgOwc9W0TNUt07UmExNNfDx%2FKI%3D\"}]}\r\ncf-ray: 98b41b23a8ba56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"870dd456329ef08ad8878b5c1ba4ce58","sha1":"4dfd3d5abf35d32d46a5b94c4f94ebce07507213","sha256":"89d3fa610d699a68fb28e08896d514acca14e0099e5b5ea74649bd63b0e03b3f","sha512":"d29cbcd952ea357fcdb415c7d56c6fa23a9df540c136ddb9382d19f314a4870de60dbd79d06d0dbe4bb5007e540f6e3db17d76a44ccae3338ca18b646b33b166","ssdeep":"384:wskCsxORrRDXZc2JKdSrlneY5+QaknO5VCtAWGJgt5kj2G0s6jSw88ZRRSqjD:/qgR1bZx5leY5+XN5WGOU0qwv9SqjD","tlshash":"99c2f137197a5ae1f5ce5e2b7303454b9404990fc237f89318f8229c1db26d6b432e97","first_seen":"2025-10-08T08:01:19.965182Z","last_seen":"2025-10-08T08:01:19.965182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citadelexampleruckus.com/check.html","fqdn":"citadelexampleruckus.com","domain":"citadelexampleruckus.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citadelexampleruckus.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:33:18 GMT","end":"Fri, 07 Nov 2025 14:33:17 GMT"},"fingerprint":{"sha1":"9E:93:59:5B:B7:DD:23:CC:81:4C:BE:E0:6E:4A:C6:11:2D:51:60:E7","sha256":"FE:8D:E8:AB:5E:4C:CA:83:BA:AE:65:7D:D3:E8:E6:85:42:C0:59:2A:1B:5E:24:3D:4B:46:41:C9:3F:38:3C:6E"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: citadelexampleruckus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.viet69vn.at/wp-content/themes/video/css/app.css?ver=3.0.2","fqdn":"cdn.viet69vn.at","domain":"viet69vn.at","tld":"at"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viet69vn.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 09:06:00 GMT","end":"Tue, 23 Dec 2025 10:04:38 GMT"},"fingerprint":{"sha1":"50:68:55:3E:0A:18:5B:65:B8:5B:BD:7E:0C:0B:5E:8A:AD:B6:90:15","sha256":"DD:6E:EA:54:12:3A:93:18:19:68:FA:1E:AD:34:30:56:E9:E0:CE:C7:35:81:6C:90:0C:CC:39:24:02:12:4D:74"}}},"request":{"raw":"GET /wp-content/themes/video/css/app.css?ver=3.0.2 HTTP/1.1\r\nHost: cdn.viet69vn.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncdn-pullzone: 1306502\r\ncdn-uid: 16ba0769-1400-4290-9eea-5c1db38fbb0b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nlast-modified: Mon, 06 Oct 2025 22:27:21 GMT\r\nx-bo-server: DE-233\r\nx-downloadsize: 25283\r\nx-bo-origindownloadtime: 212\r\nx-bo-processingtime: 4\r\nx-bo-compressionratio: 0%\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 22:27:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3a228b7936a9c60ef91937fc3917c294\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 120800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azr5qeb2Z6DJmVxi2gnkkI%2FBV%2BjgzS20%2BtOxNObCG7VCkHbZ3fBV5SAeV4UtWtjkyAISD6ednbzCS3f8qo9LfGqQ1q6sVOnKTh0w2wo%3D\"}]}\r\ncf-ray: 98b41b23c8e456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25232,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25232), with no line terminators","md5":"7f0f064d15c182edbf0f90cc7fe56ce0","sha1":"6ff0885daf88c1913162f5df036792da1fd8f3e4","sha256":"746687d396d61c191b474bd004ea318157063db52bf856843c26369974299b79","sha512":"559c95e38ca9ae396e181c6a6eed3deeddf0e94a10cd2b0fc2c1d2f1aa611b2d5444ed6a5329d38556af813f68875f97f98ff02ecc35ccc23db41bd9f5fe1d93","ssdeep":"384:DNBqzQLHKnUL4MwhwQUnzP+whw1HWZVMQnOA6Enswhwp2ac0:hBqzQGMwhwQw6whw1cVMQOA6hwhwU0","tlshash":"47b2c71eab62153a3877c2fbe4a4e9ccd13191c5ee2266dafd436600cbc97a31d53718","first_seen":"2025-06-20T16:35:50.76575Z","last_seen":"2025-12-01T08:51:26.270854Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/bn.js","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:41.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 07 Oct 2025 08:44:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e4d2dc-28656\"\r\nexpires: Wed, 15 Oct 2025 08:00:41 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d3aaa94b8eac1dbc10e8b93e47acb7cf","sha1":"a301638deaea646594f25badf6bfa96612ce3a8c","sha256":"9b451f425b356fff0dfa7ca51c573a6d3f8491b001c0832f1f7680c63bef743c","sha512":"76bf7cd2cae37535b1389a1fd4bf54cfaaa451b9a7d2def1270f21e9d87064c23628b0b3d1fb5ad7be74ebedb478f6a9aefc21378b2e931acb1fc710b1c3f65f","ssdeep":"1536:leN4nSQoMQtLuVZfCaBV77po7OohlvPf6ErYy3WddJAnefWrAwABSX2fbNqJ240b:l6sUujRothlvXmHddaABw2fbrZcWpd","tlshash":"0df3a58c6ba13833d16a942a1d2b5f2567e994c294bcf468fc63d0c42d7cbc7e111af6","first_seen":"2025-10-07T09:24:45.165442Z","last_seen":"2025-10-09T12:51:31.114313Z","times_seen":30,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":45,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=nTqhbWlaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=8841061768806400\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nUID=25100803001d61d18efb624bceaf8c1f0202; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"4d29f3dcd52946ce5978f209064dba06","sha1":"7df3aaf37df5363aa7278165a9a7c573e0e1c5a0","sha256":"bcb76b0bad723efc79ff15831e8a1816da53f38956e175097e9398c288f221be","sha512":"a1c9c940c39d7693e0e23d897519e9bd12ce651defe2b6be0e4efda0c4c3e758e39a5ca196d85f5b25619442e5040e99f6069e934f783d5699b0c429b676e330","ssdeep":"","tlshash":"a8f0dc2a80a18fc1a4e0451bfab4ed0e4dd25ac64d03084b58c72825848c6711fcb35d","first_seen":"2025-10-08T08:01:19.974506Z","last_seen":"2025-10-08T08:01:19.974506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anytimebananarecoil.com/get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=iWC8zBDaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=1522712374301184\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"anytimebananarecoil.com","domain":"anytimebananarecoil.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viet69vn.at/","date":"2025-10-08T08:00:42.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anytimebananarecoil.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:56 GMT","end":"Fri, 07 Nov 2025 14:32:55 GMT"},"fingerprint":{"sha1":"EF:F5:0B:B9:17:C4:1E:4A:B8:DD:8C:EA:91:C0:50:18:04:53:AE:AB","sha256":"61:74:3D:A9:85:D2:3A:07:FF:03:AF:7A:44:61:F7:E5:09:75:56:6B:FE:FB:53:A4:84:D3:88:8C:23:5C:7B:81"}}},"request":{"raw":"GET /get/2025697?id=2025697\u0026pid=__clb-spot_2025697_cks_1\u0026jp=_clbtqdqehwusdillejkhdb\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.606-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=PmxQzLxnnY77xIn\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=iWC8zBDaHR0cHM6Ly92aWV0Njl2bi5hdC8\u0026afid=1522712374301184\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: anytimebananarecoil.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viet69vn.at/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=251008030006828f4b8ad24434aa3b24cc57\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Oct 2025 08:00:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Wed, 11 Nov 2026 08:00:42 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6771,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6771), with no line terminators","md5":"5b5a5a2719a1b2297aac06781a29ec60","sha1":"eb0f242f270967ea522326ec9bc7a5b8487059a4","sha256":"947e5e2dba47edf7a57693e8964576b26fee10d546295f2f215710dc8fe85a0b","sha512":"d1a0d94c7c75fd840244779b7d44623ecfac9c69e539151bf694fe39ffa3cce2330936b58bb343a3ea50b8a3f4600620fef860858b2a5996add139a396c1a4bf","ssdeep":"192:6S/y/Upr8gjL/Upr8gjj/Upr8gjN/Upr8gjGzo:f/y/U1z/U1r/U1l/U1yo","tlshash":"8ed10b5b50961179fc8a8ba817d4c4ee3ac4df533a724a3c372a8118f526eb35851e78","first_seen":"2025-10-08T08:01:19.977485Z","last_seen":"2025-10-08T08:01:19.977485Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}