{"report_id":"4847fde4-3944-4bd0-82ab-5b3eb40ffc5e","version":6,"status":"done","tags":[],"date":"2025-12-13T01:07:13Z","url":{"schema":"http","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"172.67.206.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"title":"ACGCBK - ACGBUSTER无法访问请挂梯子","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"e329161eeb014d6d0a9c73896dad032b","sha1":"97506b4192fc53bb747d90664cc2080f8062a0eb","sha256":"2f31ab8cb157f5b4ae1e4cb784ae547bdecb34d983cec3e551ff98c28ee3975b","sha512":"0ae462ddf2f4801a728731b5a4530bd893990f70bfa9be2777beb27d8478ad8737e6348b92948b08b9ad30a3f9eb14fd6d8532109bbaaf207975696243927097","ssdeep":"","tlshash":"1ee026ea6c75c93565e4028620f6e29c1a2065a0bb11d64482d8d87adf10fd74c9294c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"172.67.206.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-17T01:07:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"acgcbk45.vip","ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-22","domain_rank":0,"first_seen":"2025-06-03T02:47:31.218475Z","last_seen":"2025-06-03T02:47:31.218475Z","alert_count":184,"request_count":46,"received_data":2581541,"sent_data":25565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"img.acgcbk.link","ip":{"addr":"172.67.138.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-11","domain_rank":0,"first_seen":"2025-04-06T01:48:52.858359Z","last_seen":"2025-12-03T02:27:50.371066Z","alert_count":0,"request_count":1,"received_data":1583,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img11.360buyimg.com","ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2009-09-10","domain_rank":396245,"first_seen":"2012-06-27T05:40:53Z","last_seen":"2025-12-09T19:25:03.572538Z","alert_count":0,"request_count":1,"received_data":515699,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5da1bfd8eeaa2005d55af90d790f7cfb","sha1":"5d6e6571c9c64def78095e45aa76ea531deb039f","sha256":"e00b1f4721b519be8997fa032c7f15a6a9de35f456d9eb51deaf114b75d0abf9","sha512":"54f902da42826ee9872b61a4a7651ae04c22ffd8e69a37acdedeeb7d79e9f79c868fa50fbd0677e702418531b8a6aa896e676706b7bee79e1831278dfba57039","ssdeep":"","tlshash":"ebd0a73d43c04e15db9553c0ac5234bdd589ba234c157788978c38ac06dcd2c54ea312","size":244,"data":"","first_seen":"2025-12-13T01:07:19.820784Z","last_seen":"2025-12-13T01:07:19.820784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a6e8d4d5eddc95c86a0307a7c00653","sha1":"74e1dcdae5a752ddf21947da63077a1fc85309d5","sha256":"3b0e9efad5de10564e1457146caee9a23b225490e5bdd33a3d23aa7d29d10ba6","sha512":"0867fcdec130c845d997a9802174f435073651f66cf7f938e7d25e559ea1d6b7ce8f05a6cbabc4327bd4187fc0959f46902f1bf219af6b62d1b4ecf493fc4b6f","ssdeep":"","tlshash":"2b41e25b23da001f0b74d2d25dcd5a49a125a21fca428eacfa6c81eda4d073dd35ddf0","size":2383,"data":"","first_seen":"2025-12-03T02:27:55.178695Z","last_seen":"2025-12-13T01:07:19.823608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/live2d.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f221708b2c79547f8457e595b93205","sha1":"b4c0f5b53c22d7884cc8554a84b529baf016f8be","sha256":"af693e395fcdf211b9cdda45fd780c258e4daf7e7b7653a1b89b2b64ed59fd73","sha512":"35c396b5a03dedaf797b55064e451f7686a31e6941dc0853e02c5f8c770f6c99e3fee4b63b332a32373006c2d727cc10ddb0d6f5c8b62d97827a15265a2e548d","ssdeep":"3072:1zFijetP9IVhiThCShnCA2qYD1pbEGK6qoA7ZRc7k1K2mholcBs3ExXMY:1J0e9yiKA0EGKq1XMY","tlshash":"06e3b684f9f0a064521390e41d7f010f933aa96e7905857cbaa8d4efacfc84e6667f74","size":151996,"data":"","first_seen":"2025-06-03T02:47:41.865728Z","last_seen":"2025-12-13T01:07:19.786117Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/autoload.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b7547cc6579fa2ac49194e81cb908c","sha1":"4778e0a42989ee3ab13417e8636d3be72d5e43b1","sha256":"7d23a0b50529ca26e30dab2dd8884b8830f79f322431a33c4913c1f3c66e118a","sha512":"3383b11f74085c53ae8d89681b5bedcf858e10e78fd2adedb5c935a410677390b83e6dc3c82b3e3d8f4c9087fff54ddf93d7e9f3ee680ab2ff571df0bc656c67","ssdeep":"","tlshash":"1431653ba72c4b336077b4793b1de6cb6420444a25517467688d7b9082ea6ac0160f5e","size":1470,"data":"","first_seen":"2025-06-03T02:47:41.841657Z","last_seen":"2025-12-13T01:07:19.803713Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/vender/js/jquery/1.12.4/jquery.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T01:28:45.073552Z","times_seen":67159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7fcf68f981346848cafc816ce7aff65","sha1":"7ece24e54b98acfa81de07490a8cc5af6edb05c7","sha256":"b292ff4b5bc0b7e69e262759c4a34a1449738c4764542375334f0d04aadffd50","sha512":"559c6fb89071d863e84699031259d4c2da810019369399d86a0132d136547b35086ea9496f66a196d1cb256a533835d7d0222f1366f5b9c4665209e7b74ca565","ssdeep":"","tlshash":"47012018fe0223b1a0de5fbe5d6f38a7f31226322866c201663b4b409924b1e0682d8d","size":751,"data":"","first_seen":"2025-06-03T02:47:41.911425Z","last_seen":"2025-12-13T01:07:19.825697Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","size":7890,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-04T00:02:57.889746Z","times_seen":6548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-04-04T01:26:15.636633Z","times_seen":40325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc7acc1672e3325d494781e5395a0849","sha1":"7957672bcc6f5deb84347206163cb751e1513131","sha256":"f35aaf822d2ba1210b7e9a569366598258b1874ec0f76c1e1ba999dfb2e0135e","sha512":"dafae679cb24e8aa187ff76754a5d4394b899aa88cda01c299c45c57a5d19ed52af40a39e7c6f7ea4da0d5b77b4dccf150e526b93d8c034164893af5e3611aaa","ssdeep":"","tlshash":"7be02704b11ff034fd8fb55fdc7f45593b5b6071524b9075025c5fd446a244d110d898","size":292,"data":"","first_seen":"2025-06-03T02:47:41.916685Z","last_seen":"2025-12-13T01:07:19.826552Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0ecbaee5586beaf9614f9ca04add89d","sha1":"c5eacb55179c86496a748110c3e597378bf23d17","sha256":"11acd60031652d6e2c464c0564a7e2487223e0949fb01137467014c59ddc3a06","sha512":"66f3618ceb0caa5b971b5b1272be03174890ea62d15e3a7761871da3d894eabc24f4829431cfd2d919a864448d3f36e0e89c2c63f3ff3fc0ef752784f1304b52","ssdeep":"","tlshash":"e8017051a7c0ad2967f5af17cfbf53c59610ef9528883004a08c0df85950f36b94dd89","size":691,"data":"","first_seen":"2025-06-03T02:47:41.921308Z","last_seen":"2025-12-13T01:07:19.828258Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"170687433986a4a559fa4f16b1d7c70e","sha1":"84349b5fb0fcb057ae1768667f480fd607a1da49","sha256":"722a90d42ef2bd0ea38f0fdac6b4c0523aa4a027e9ffe889972100746e165582","sha512":"56a266d6abc2690a87954af3bc88b15c0fa08c3a8e9047741e8b18fd4179fbc107573bf19c242341bd5a7f7955db1c6394a2e9240332bfcca1785b47adb6cee2","ssdeep":"192:nuKZ7HKiSON64sKenMsCUV2E4eTwEFgImI9lJy6yrEZBd:nuYHKiSOmK9+TwEFgImIRy6yrEl","tlshash":"98d1a6df729ef04aa547507256af3906647b1b87192adaa0c031cd997cbcd05c43fde8","size":6464,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-04-04T00:18:30.255011Z","times_seen":4406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/modan-components.js?ver=YgVWS","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e33ef55e24124dbbaed663b3102ba7","sha1":"dcd06c05f7d6e239c3b04fa173140c49f27cc836","sha256":"22762d530216c636f83c2f4df032b3cbe60128009faee29d7fbb8c3093c7528c","sha512":"3e242f44a4e60d4ee4f9c66a00aeb47904665e6aa18c2182c6d3c88f0e6698619df63d092d56566a6ddb931fae20a02d36b4592e0174c2a1abfba5db5ccc4096","ssdeep":"192:aqQYQvYI5NBDtrae7gQFwVHxSRpwJ4Fouu556UHQtiOb74rau:atYEl5NB1hFgHxcFouuPx4iOb7Wau","tlshash":"bd02c8c1b27e652b0dcb81b762df2f0dbe73401298b5a254683b5fed2670e51b817a34","size":8721,"data":"","first_seen":"2025-12-03T02:27:55.16242Z","last_seen":"2025-12-13T01:07:19.773569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49bb582170c4c422da2418ae957b25c4","sha1":"c2c497958adcaf55c2c189e11f22cd2d2281277c","sha256":"132e27fbde6a596764d1109dfda2e65b600dd820089d7c33ae7f9700fa5a8a79","sha512":"73ad1521ad5edce92ac6dd704d9c9e46129c0e002e2091bd01a490a4775d295b3e8391242257f74e3f8d997d8e0fd938bcc44a891d4ec5b940b8410a750066d7","ssdeep":"384:lZmT4hFy3pyXVfOyZSwjnt7qZunhX4Rg+fGAlyfDu9tvutlss7yMv5k17KhR1yRg:lZmTckgXjZSYFqEnhXL+fGh7u9tvutlZ","tlshash":"e272a46175142d371afb06fe14daa3c5a9f0510abd011285782dd8c8be7acc6837afbd","size":16816,"data":"","first_seen":"2025-12-03T02:27:55.182776Z","last_seen":"2025-12-13T01:07:19.82976Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c791283733174e623324b55ef42f1172","sha1":"073cd9d0c25bb1db52222303ccec16ad124c2066","sha256":"66e6ddf958a918c605248ffe268fba2d75dc59e6ea413b3268e210637e49fb56","sha512":"6f803440eaf066eac3320e34bb39bf4302b3266e40dbb8d41d9adf791329632c6b35c05b1477728ffa0a4df766bf9efb9995e0d5e900443db0409e949226bda8","ssdeep":"","tlshash":"09e0cd72b01c4c190b90d6a5b2d019957401d0073543c6617a7dd71c7073e534629abf","size":306,"data":"","first_seen":"2025-12-03T02:27:55.184014Z","last_seen":"2025-12-13T01:07:19.831123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d180232a4aff09116f5950f1a4c178a2","sha1":"fcaaaf43436acceff62f09168e107309bcbb86ac","sha256":"d94d566c8ce6671025e1718efb9c73a81294613bc1de3c470c12a42892de269a","sha512":"0fa1b88db1a9b026eb0d8c4634aa382cff873ce407895c24ae2c8dd2a0b29d14313923ee41ad37a69de80937f106d2a72e4974c415e2b27d0a99c50418093cde","ssdeep":"","tlshash":"ddb0123af55eaaff5060c1ae1d9d91504a370103e1d3751cb71cf60048c252e4170c5e","size":101,"data":"","first_seen":"2025-06-03T02:47:41.922642Z","last_seen":"2025-12-13T01:07:19.83282Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e43fe91a3818541c457211ae7ec4ea85","sha1":"2393722a5851a75fb93dd263f247f52db54c3525","sha256":"0aea5d25aa717d913dcd8786923c51d507fc4f94d88bcd70e336268b9b9d7d73","sha512":"8a7aca1f5f3b30f4e3054066b5cb07597784bcdc97a9b1ac44306c1f6a42fb2a9b5228061dbaa0d27d1cd8d3b35e22104db050257a8817f2a804845c6309096a","ssdeep":"192:fHMIYSlvVHtPyVH3c2ESdk/3++E307N2jmpXmDNdsE2dg:vvNPovQ7A","tlshash":"1cf1130971fa7836c9cbb1b3b42b5a1db0b6a743b1510d1861bd10ec0fb0e6855b3dba","size":7933,"data":"","first_seen":"2025-06-03T02:47:41.927734Z","last_seen":"2025-12-13T01:07:19.83355Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25551ee1527116034e2773a64c88f6d6","sha1":"8b72719f13ad10248beb95aa4a8e5bae030ae832","sha256":"9e5045d50b9fddb5a347f4951f2169b69d4d770fe9f717722dbe0b3a4a3092b8","sha512":"16fd51084fbd731d693cb3cac06990de86d1ef892c24aa66df3c360306f57637e8b8f03cb0a0be430eb1d96d25ced8b53a155be3450630874c4cbc9f336b7181","ssdeep":"192:C2vyp7QTGfcaVpfQhjoCqJpSFbE+TaANKmNm6wS/NsFkBPykwfbyrd:Ciyp2GfcaVpfQhj5qJpSFbE+TaANKCmi","tlshash":"4222731531440e3c86dbfbb555fb46803235a4806452906cfabeeded1e5bc4a032affa","size":10054,"data":"","first_seen":"2025-12-03T02:27:55.186399Z","last_seen":"2025-12-13T01:07:19.834136Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f098a2ed3d340e3409b9c65c6cf4cce","sha1":"41899ce39b920e2607efb59e3c23a6f4d830e794","sha256":"d8a2760202fb6353a9d361a33a8b293ac0eaa61159e8c2a3229b8ae1bdaba87e","sha512":"fedf9fe62a1bb237e67cd6dac35485bf295402c5eac301b1b99ea040f8c6280d4d318dcef5d88b84e017159296aa63c63c846dbe2709e8bf9c2e2b00119d5427","ssdeep":"","tlshash":"6b311092b908c5fa50a15c3550bebf1c216ab2020840ca992b7859fed73bf553167c6f","size":1744,"data":"","first_seen":"2025-12-03T02:27:55.187555Z","last_seen":"2025-12-13T01:07:19.835252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4d6fb9f2f97a5230b7be158fa2d93d8","sha1":"d0568e43d0e0e0e9c963b2534ac5e8b2b45db101","sha256":"3fae72a4592c8b33b877e131846d6fc61356dc3855e124bec65c6464b6f461c2","sha512":"570b45d2ea5ec592814f997b50cab3c7327593bd0f706c1fc7a63bac18a3e8d7468a251843b705653341b1bf99a1431da6f0cf40c5c0147f5023843fc9e453ca","ssdeep":"","tlshash":"9541a7687831709895f2a026553f7303717a26619048c090c6b1dbd57cba7c2d3d7e0c","size":2171,"data":"","first_seen":"2023-11-18T05:42:19Z","last_seen":"2025-12-13T01:07:19.836191Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b9b8c29a5343764192e876291e785e","sha1":"64040814529b1622686d802ff36ab8db9e6a7c54","sha256":"65251399ffaabd70ec4dd94b08f8608566be5183e7ebb3adeab2c1eb3262c796","sha512":"0b23324220e197d68dea263d5422af3412cf601a11b5d8c305ad8913635315c0583b41046e3130d2b4e92186f72a2b3d0a800191d043b7b074f2ed9b06497625","ssdeep":"192:+s9td3XzIwn0aPyISjy7AagYaxaZeaL7xQFaB6seR4I9kmui66ktr63YB9ZBqo:+8pRn1Pypjy7/xQFilfI6mui6dtr6A9Z","tlshash":"6a220a8f7f08f464d3521070a62b60c214b4fe8b8c186ec3da789d74be38b99b51be55","size":10403,"data":"","first_seen":"2025-12-13T01:07:19.805492Z","last_seen":"2025-12-13T01:07:19.805492Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/waifu-tips.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aa928524091586792850659846d0ecb","sha1":"36370ccc46f2e3b35723ba953a451ea8dfb2700b","sha256":"bdae5855254e5813d2978afd348d6eba3df3e0dcb24376c0bc714af6c536cc6c","sha512":"cc914682fbaaf08b4de85c1022d2f614e7d22e084f3630953df0127fc94dbf29cee73c1d501e61cbf3b1dc0ac33163023c06bd78de621b9c067b50e27e17e891","ssdeep":"192:8oeFaRt+QY6ybwWiWh+CbwxCbwuloDZbw5NtYjwpbwgbbwIAH5mbwVy449/5PaKy:8oeFaRt+QY6ybxpQCbRbnloDZbsSwpbc","tlshash":"10323b5a536d8a780f8d07d5be7a7270742570cd7a898224bc1c845072b69ceb2f8fc9","size":11715,"data":"","first_seen":"2025-06-03T02:47:41.883407Z","last_seen":"2025-12-13T01:07:19.758823Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"773c3e5ef2e97bc1548ec3d73bda822c","sha1":"4e0b8086cd3d85e986fc62f590d837e56f78d6c6","sha256":"d0602f9e6ff92713b1cbaf02d9b0f2e59e07109dee610b878437748c8293543a","sha512":"3f9cf7041a2d4fe8f4391a332d55dcf759a432de9ebb92476d3ddc7e21b50fb65fb5efefea312049d2aa0fbabf6b4fae95bc756889c59cd8eca4a9e0961bb20f","ssdeep":"","tlshash":"c531ff28b355763109cbe37b622f720961a730d988c5c468b836dcc38ee9d8d6253c2c","size":1572,"data":"","first_seen":"2025-12-03T02:27:55.189461Z","last_seen":"2025-12-13T01:07:19.837188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/emoji.list.js?ver=3Sjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a873dc81a5269e8b249c693e68e95bab","sha1":"da86310ac9f06d575d883349792eb9c723d8a0f4","sha256":"6c5b2cc9161690b71979af587cc42da0b21502ad66c877a05e995d6e4f2ab7e3","sha512":"110fadf847157575c7b13a6f92dff84290414439ffd34fd68d7b79d8cdd1f5e0cf37781a5103e4a4fbcb478a2db5a65be67321c9196522d72d406e7a82a0cc2b","ssdeep":"96:PjkFdd/DY0kqOeZRyS78AD5f8oLMcvV5N3C5j3gFY4Lh56SIAxxljOrmYEc+TLdw:PYqte3NLRIKlFl6ZSxBcw6oMtTAzm","tlshash":"ef3284a1d218ed975d2e12482b1eb62401849917ef4df0ad3b6f2b2d1f2d84fa5741cf","size":11908,"data":"","first_seen":"2025-06-03T02:47:41.965679Z","last_seen":"2025-12-13T01:07:19.838128Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.2","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T01:31:11.442553Z","times_seen":40616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dec3c4ad02984c44cfd282b7b8278c27","sha1":"51ba24707525326948fa2fbb0d506450d6f35ce2","sha256":"396416abd0abac3a4de7d4e5e288db6f4a89255f23c174e84804cfb096fb3bf7","sha512":"e8c580e291a1ab4585c39bcb46c6aacdd643bd1ebda4f7720bed7415866d313e3503bad750e064cfcd9635b6f85a481c74b59ca28dfb2ebc93567651d09e36cb","ssdeep":"","tlshash":"1ef08b2d52818f2c8f53a7d499c864899bcf66338458569cc6dc9ca80accd699089317","size":563,"data":"","first_seen":"2025-12-13T01:07:19.838617Z","last_seen":"2025-12-13T01:07:19.838617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17a8b45a905e6a87b6b2e653fd505986","sha1":"2977d4183450e9927213d931b3cc8425d8bd2aa1","sha256":"c8519c640a61268427443ee5197a75710985558f9cc05144fe7d7c161053ac0a","sha512":"a9adf79efbdeab010761b4ace4488605f87367a4ea4b240050a986fbbd28363106644e6ebc670dac53cb8d2af614708fe580d3f86061655423788fb9cc53c84f","ssdeep":"","tlshash":"1171259ed699357d2bf903998c4c1baa44ddcb33f8d9805284fb4e453f43e28c523910","size":3584,"data":"","first_seen":"2025-12-03T02:27:55.192987Z","last_seen":"2025-12-13T01:07:19.839548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1e200a8d59f1a957b348bea3a2923ab","sha1":"ace77f55fea26cc1f5e5c325939501d74036360b","sha256":"467ca6f6876201034d0cf43c689dd223c399a0be72c297102a8a194ab9b4763e","sha512":"80968c8c8fc6dd25e67638e12e07b1f2c7ba8e5169be30342da6eb4c35dcac906eb206b17297e7b82ec804b94775f03e2c1caf75608f19d89dbcb58f3b0b103e","ssdeep":"","tlshash":"f9d0a75c2a19165403db011c5309520d8acb0fa701069dbb9eb8b96a0eabd819082e65","size":223,"data":"","first_seen":"2024-12-30T12:01:34.490808Z","last_seen":"2026-01-01T20:36:24.938622Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb7ab36fe834fb018cc8fc8a6d32c96f","sha1":"ee32a9f6f58b25389a9953de73781b4d09bf2ba9","sha256":"4299f6a69a91d23f2d8e9ef6393fc06615243f6abca654b4b7f62999bd06156f","sha512":"ef0a955e9ecfbad0f76dad4a194a01ec56fd1a1b50bb68b78c2ebb626a68bfb136d05bee825c0ce66bb4b3a52d89709cb1a3f48afb2a9bc817afb398eff8e090","ssdeep":"","tlshash":"a331acd33267d02bbcbb141323bf521e352079267f40b562aee588674578e43266b68d","size":1603,"data":"","first_seen":"2023-03-12T06:13:55Z","last_seen":"2025-12-13T01:07:19.84162Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/home.js?ver=3jpGr","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec632d3077b36fbca18f7b845147aa97","sha1":"fcd5cc8fd0fbbf1bf6a28799d4f6fa3775d8b72f","sha256":"ce1443a0161afc3a18caec569a65961e5402c3b1e09196974fe025e02f7ba039","sha512":"d3bea9e3d890b313429b87083361757dffb8856834d78b4b29d90a5543c4815c3f27bad0a1bf8a930a72a31e6d33f4120c13b48116bdd75876c5638de4ede1fc","ssdeep":"1536:FgEHQSx6WRI2JWAzqn9xhUTfEkvHnwHRg0AfzaJbgQzFVy+G9Ofr+ACSBSvGndJz:uAI2JWAzqn9xh+fEkvQHRxv+QzFVfG94","tlshash":"c383941ef49f346321bf63a58a2f548ee93204a0b24c146474acb4f75ff582c5367a7a","size":81237,"data":"","first_seen":"2025-06-03T02:47:41.894168Z","last_seen":"2025-12-13T01:07:19.775299Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/app.js?ver=vSD19","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9852c52490f55ef11ad2bff438184e53","sha1":"13de3809d4ac016c68b76f9ebd652b5c7e450456","sha256":"b0f2b235d9551aa5c8c85afac35071699da76dec04d95740886db3f62933081c","sha512":"a33658151763b0215f3557ca37037018e720bcfc2f3c15b7e290195b45570c8e8b18470f134e562d0169ea834266107c5a8b1b42ce075109f1ae3b76b9312c21","ssdeep":"3072:gIVOXGWvNFunbe+j6eAql3d7sm3Kla4aZ:mGEFunbeE6al3dRxZ","tlshash":"3cd31b8d7750707582fb21baa11f520aa1326826e506c460b46dc8e42ef4fdd62b7ffd","size":130743,"data":"","first_seen":"2025-12-03T02:27:55.130969Z","last_seen":"2025-12-13T01:07:19.794161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.2","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-04-04T01:26:15.647685Z","times_seen":38217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a76b842e902799638f5c6efb847a62ef","sha1":"bd4559e789452c8a79fd9587d2925a5e42bd15ac","sha256":"b149376f69e53a92a2224d161ce5b84f655fcdc59ea768685eb16e47fffd8f96","sha512":"e582dd93c801574594a95e13e49f1af5f7728e129d51267d1e3038d35d07c51fcdfa3a8b55efd160eae69ec815b246747074a748704c9f42e1b4539dd7aa0bf8","ssdeep":"","tlshash":"b8e07d03920ab136ef9f1102c9406342dfc51018f1f2358d925417884a45c0b8121e3f","size":302,"data":"","first_seen":"2025-06-03T02:47:41.971959Z","last_seen":"2025-12-13T01:07:19.842256Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25730bfca56de143ca1be108c285b1bf","sha1":"6b825d4b5bb5b58fa650b5f8efecd2546b4ee889","sha256":"585c81a43d551f0429ce7413d7e686ffb65b2a42694aa8dc9ffac3a6321a51bb","sha512":"8c9d97aca7f77d6afc05881d2065fdcf4bcb0f187c8ba600b046d3af5492d7c8dfc3665508726fdbda33c5f6e85fbf5958903aa454fd26d7c24444c347251438","ssdeep":"","tlshash":"02d023a93c75863161d9014650b7e79c276035517711d240c5cccc2bef11fd304b195c","size":217,"data":"","first_seen":"2025-12-13T01:07:19.843003Z","last_seen":"2025-12-13T01:07:19.843003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b49a07f331fe87ce0f40ba7f61f0b7","sha1":"6d3b5d04c39fadc1926f94f77855edcce8bb603a","sha256":"b813e1f609e779391fd10e8a30007f3d5840bb2c064748bb2bf253b0dde07a27","sha512":"e14b2b4089a7d3e6444a95f6124d52f1c6be8091de1b8a0eb2609eabbe4244ce4cb4dde433acbb200afd3dcb7c39758e6d63d3c265be0423989b4ab673fd1dd2","ssdeep":"","tlshash":"4411c0793e2a5634c6c5818b317ee7a93e3260617a029184c36cdc299d18e8714efcbe","size":902,"data":"","first_seen":"2025-12-13T01:07:19.843998Z","last_seen":"2025-12-13T01:07:19.843998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/jquery.emoji.min.js?ver=aSjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd2f8a87c9334587e8156902a7cec592","sha1":"84f57c7afec146f7c063df446a0918a91b56d9cf","sha256":"f201dd95b48ce1d186f87f00404744f2daabd8e51cd9a8d94ef91e492211ac03","sha512":"ff6cec4863406c89165e85bcf8fa2ed8cf70e53f710d6b8f2a82320d2b18c8710dd3834245f91e7d18da0a53895e9fede1dada55539d2e42088ce54180ed4af1","ssdeep":"192:VfREWoR5LRXvjH2H652igK+QHsyBUeBQsSBAgtDOW2RXFpyLTN9z:8WoRDfFJgK+iRBTBQsSBdOFpyLTN9z","tlshash":"7622b7597e40201b11eb01ed405ddf1a65baf1f9eb228d48b2f14ae6da80edc121bdb7","size":10017,"data":"","first_seen":"2025-12-03T02:27:55.1669Z","last_seen":"2025-12-13T01:07:19.792567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/vue.runtime.min.js?ver=1Sjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d21769fc181d893fbd373c7a2e83895e","sha1":"9ddc5cc2b753b3fb235b5cfaa2f0ec54e55c4477","sha256":"084a413bdc22d598fa6aa4238b5bdca61e22bef61201548c60611cc5157c914e","sha512":"2933d2bbb411d2edd275bbd72ba2d4ac4b3008f8f67d172a20352c42c3e87c7f879bec46904e57a1492db8b8ddc9f73837d81932e410e73cf4725446664be733","ssdeep":"768:d8hGCH5hloAWLkZ1ISQVW0i1URiXLiJ7X3+1I4NiPGciQ6TlXAKuzFImy7:MbOk/EAURiXLYH+eXt6TlXAHzamy7","tlshash":"db53d4ddb295717117eb25e140bf140bf2367918a80ac0e0f256e4da7db848ea07be7d","size":61162,"data":"","first_seen":"2025-12-03T02:27:55.164757Z","last_seen":"2025-12-13T01:07:19.749718Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/owl.carousel.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c55a054d51f046526a6c94cf915b1f5","sha1":"a088565329115bea60113dd1e00b76528e545f04","sha256":"7ddc424649b256e50ebbde6522b13a627359b25c299b3ffa32a2896866e277c1","sha512":"f208121218f5ad44638b69a6f6307a9da8e09ed212ab494b4bbf8bca0e0180e529650d7de287141be941e9775b03134c0479716d34c6c9a45acee12a6474bf56","ssdeep":"768:lBI78tMFA0ndb38KNSRvnLGRep2lcwJeL+CkjQdc7buRQpUQuiBt33:7IOMFvd6MxAcXuDU","tlshash":"11137246b3202d2a869b61a0663f160bb23a251ce414507d7d79a6de6d7dc8c213fbfc","size":43237,"data":"","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-04-03T21:04:30.692463Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66e11f38ae88abb0b3324b021c01bbc7","sha1":"c16c3938fa9b3f10bd13b54240dd36d4accea397","sha256":"9e56b0f8a498b9cb58f34d27f1fd8da02c00b7cc10d20d92e508c520e26014c8","sha512":"eefd638b510cefe8a6d2ddc574115248314cb109c4a8f570eada6579bfd9f5856964c4ae53349555a889f24102939caa73cb17a74282848b469e589e9a4b794e","ssdeep":"96:t8cpH86YMv7++/g53KyvquagpKaSQu6QywQtDicQy90gxdq5/:tBpH86YYO53KyvquagpKaSQu6QywQtDu","tlshash":"eeb1845b31c41e7e89cbc8a1305637b83a685781e52095793cacdddf2b00dda29397f6","size":5094,"data":"","first_seen":"2025-12-03T02:27:55.198625Z","last_seen":"2025-12-13T01:07:19.845035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/vue.runtime.min.js?ver=1Sjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/vue.runtime.min.js?ver=1Sjks HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Jul 2025 18:18:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6883ca62-eeea\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mdi4X9GlgEDMr3I56YrSzq6MIcza8yMw7HqYjbZpRhBZbFtM%2FnVYyThvuI0URTgt8Us3RYfbxchiBITvcyh7WbzG2q9TonZmQvqLSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ee3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61074)","md5":"d21769fc181d893fbd373c7a2e83895e","sha1":"9ddc5cc2b753b3fb235b5cfaa2f0ec54e55c4477","sha256":"084a413bdc22d598fa6aa4238b5bdca61e22bef61201548c60611cc5157c914e","sha512":"2933d2bbb411d2edd275bbd72ba2d4ac4b3008f8f67d172a20352c42c3e87c7f879bec46904e57a1492db8b8ddc9f73837d81932e410e73cf4725446664be733","ssdeep":"768:d8hGCH5hloAWLkZ1ISQVW0i1URiXLiJ7X3+1I4NiPGciQ6TlXAKuzFImy7:MbOk/EAURiXLYH+eXt6TlXAHzamy7","tlshash":"db53d4ddb295717117eb25e140bf140bf2367918a80ac0e0f256e4da7db848ea07be7d","first_seen":"2025-12-03T02:27:55.164757Z","last_seen":"2025-12-13T01:07:19.749718Z","times_seen":2,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 18 Sep 2020 17:25:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f64ed74-1ed2\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuQ0sDG1Ih%2Bh6%2BU9Ltk%2B8t7Ac6NdQwSXtKyMT6YzaRevv05U0NSx2zHf48rgv9%2B2RL5tcxAqdhPxtuV67ft79iQC7rPn00ES9s0pfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa58efe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7889)","md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-04T00:02:57.889746Z","times_seen":6548,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/img/acgcbkcircle.svg?ver=456s1d","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/img/acgcbkcircle.svg?ver=456s1d HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:52 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 14 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: br\r\ncache-control: max-age=16070400\r\ncf-cache-status: MISS\r\netag: W/\"68c66dc2-181\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsVsOx05XSl7WSF6rp9qERFU0cKQS2AwazMKBL4wINsuikWQGdYGhDVv70KiUnsX3VAVSfCXMU%2BQ0bUj5cPeZNE8wUfxmG6BWRghbQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18faf6fee783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e56a87dafe092001fa58c76bfeeeb15f","sha1":"d66c5d08929e6cf7fa62eab98c51db3a3a3c1c0d","sha256":"63e615526ec82782cd9cfa947b31f66856265eb4db32b6837717ae3a7e959841","sha512":"4d5851a928a1087d5b1b7e935dc453d897975a1891a34126f2b4d28d2a0707bc6e21c99d777cfe7930d4b769e332f6c9fdbde1635443ea4aeeea703f38123031","ssdeep":"","tlshash":"26e0f150b098583ef60d832c13d2b19b05cf509d83415428b00091366c41d7f08731ec","first_seen":"2025-12-03T02:27:55.134826Z","last_seen":"2025-12-13T01:07:19.75325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/css/home.css?ver=BzAQK","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/css/home.css?ver=BzAQK HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Dec 2022 19:54:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"639f700c-7a6d\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoZGlH0P2Rngs2yUlF8zfH8gNI2TYCZty1aSO9lFtwu1%2BqtqxU2rk33yraKiQFiYv244DBWGVRjxhT1qCpJuzR7QgzcEXrWMWf6Hrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ee0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31341,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31132)","md5":"702996935af9715312b87cac88214fd9","sha1":"45aa46068fed26efc0155d638127d9a77be57591","sha256":"3eedc50925ff58d1b48e4e137a1fd4153cdd056f7f83c8c7559031cb9ddc8bb5","sha512":"e5263a394c93d84cd55150d9680e7631f24228c0a96639eaa9493c167477d0a8e6cd1a593fdac547b7e6b6ebceed6f1d9a6c4a6d5fec39a041ff4ef260671219","ssdeep":"768:PHLScr4r03xxW+uF4srF8jbNHPZ7CQt+q9lQBB:PrX+q9lQBB","tlshash":"41e242a84bb337b4ab22837e1d85646f3c146cb1a39765e5f860eddccac8d530e63584","first_seen":"2025-06-03T02:47:41.907133Z","last_seen":"2025-12-13T01:07:19.75603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/cache/min/1/t/font_416760_4qh32v621kt-79a69c4673a08ed88a83d45516b24b62.css","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/cache/min/1/t/font_416760_4qh32v621kt-79a69c4673a08ed88a83d45516b24b62.css HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 10 Aug 2025 06:51:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6898416b-c228\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTnw1Rufhb%2BiwJEkllUWDQ7Tsdpx00ktRgYDYjByHYuLrOnox7uRqQMTxTRAdhVnTujQ2iVCRb11C8C8Xsb11j%2BEnlEiMpTdwjCElQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ee1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49704,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49704), with no line terminators","md5":"3ed595caab0a9dfd3ea96b460cb6990b","sha1":"dddcb41617576679228283254cb1b8906c629d4b","sha256":"19ead00e44ef74bb4cd519a4559a6f6789f8850c9054cc1b1f43930687e9595d","sha512":"fd2b073d2154046aca14c0c3fd886c08b12487e12f2b937541e467505ac3abf3b282c8120f06b12e548343391f97919e28d42cadf53554f70675e0ab6cf7ed88","ssdeep":"768:RLLaj6+TzDBR4zjom8SkzWMOCNkdveetHZMusLu1jmNn6HcXGDYrjgth7Jq/BR1U:RLWbrCf8OJkuTmNnAc1Ih7JqL1U","tlshash":"b3235ae4b40f57e4f371d862efa2aa5814f2b565ca814c8bf52f878c08f12d526c5b39","first_seen":"2025-06-03T02:47:41.89258Z","last_seen":"2025-12-13T01:07:19.756937Z","times_seen":3,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Sep 2022 14:21:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6335a9d7-26935\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBqCcRtTSh530b6O2yXF%2F3bxY7eXfCZ4X%2BEb3Z29hpAfNhYTuIcb83OLTewRXo5isPTD4Qt%2B9HpLejBy71D9l6b0kQkCAw3qTTOe4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57efa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-04-04T01:26:15.636633Z","times_seen":40325,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/waifu-tips.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:50.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dtest/waifu-tips.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-2dc3\"\r\nexpires: Sat, 13 Dec 2025 13:06:51 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PVe%2FP73QM%2FGw%2FtdwOEeJkdz17dGfXIymN0qNTbVSpPkhKgSPnCxeypWyJS6HHiaADaPr7%2BHPPu%2BLM%2Fufgq56MiuSZN7BRczH%2Flx71g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fab9f86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11715,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11452)","md5":"6aa928524091586792850659846d0ecb","sha1":"36370ccc46f2e3b35723ba953a451ea8dfb2700b","sha256":"bdae5855254e5813d2978afd348d6eba3df3e0dcb24376c0bc714af6c536cc6c","sha512":"cc914682fbaaf08b4de85c1022d2f614e7d22e084f3630953df0127fc94dbf29cee73c1d501e61cbf3b1dc0ac33163023c06bd78de621b9c067b50e27e17e891","ssdeep":"192:8oeFaRt+QY6ybwWiWh+CbwxCbwuloDZbw5NtYjwpbwgbbwIAH5mbwVy449/5PaKy:8oeFaRt+QY6ybxpQCbRbnloDZbsSwpbc","tlshash":"10323b5a536d8a780f8d07d5be7a7270742570cd7a898224bc1c845072b69ceb2f8fc9","first_seen":"2025-06-03T02:47:41.883407Z","last_seen":"2025-12-13T01:07:19.758823Z","times_seen":3,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath5.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath5.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12530\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-30f2\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fgntK1THq3nUZuVXWoFm3Mq3sv9N2q9dXnAROdNazYNTFldrLsdok4Ool5PH0GtTaWNThxbb0QihQJ5KFqrh1lAPdqBJEKhEnuxug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138ee783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12530,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (730), with CRLF, CR line terminators","md5":"8b4c561e69d9b6c060dd7c4d2c2416f3","sha1":"df45551eb085bd60ec0da2aa053bf50d362f8f98","sha256":"c5f8f19c7cbec6a8107e742297fb4e79fd781121ad468ec30e37b058f5494556","sha512":"0d6371cef4e36ce4734036204f980ebddf9a70f5a804755c44c72d53a523782c26d952636ef2d2de25e8779986d2df35d049fcdbe672f9c932fbba4ecb94226f","ssdeep":"192:oP3nZWJDPWZM3kL+Vo3+fSeBZz/K30dL4LDl5+7U5c4gWvVq0et/iwtG9m5qH4Y:oPoDiMUJoikd4fVNO/ZtSmQJ","tlshash":"8242b37973dc698859a8176482bf77d737e0c1467498b8c8833be84cfcce997212ca15","first_seen":"2025-03-18T05:11:08.397866Z","last_seen":"2026-04-03T11:58:29.496814Z","times_seen":36,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/fonts/Tico.ttf?ver=1z9c2","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:50.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/fonts/Tico.ttf?ver=1z9c2 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/wp-content/themes/Acgbuster/assets/css/app.css?ver=CWA86\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 55084\r\nlast-modified: Wed, 29 Oct 2025 22:47:46 GMT\r\netag: \"69029992-d72c\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncache-control: max-age=16070400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDA8vN9x1pokW1ynXlOp8z39lXzQZRwng33VDI%2BkV8pQExMf4bjnjj0q3sb5qfMF0au3%2BGFzu0qDmMW4vhPlIpA3rwcj%2F3VczcK1IA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9ad18fac0fa0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55084,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 24 names, Macintosh, type 1 string, Tico       ","md5":"f7575174881b14635dc3787ef95f8150","sha1":"7e16ea3f6d3ee40ff028a5690548ae719ac1580d","sha256":"eb892bb7c5799e396f080ad17fddfa90c45d4f6918a371e259cdfcd55ce8d422","sha512":"bb698d09a369cfc882828ebca65c4bc004e4d671a7ffcd66615ee5548154a108afbefee525df734ab7028ad8c68a98f02cdd409d847ba1d3a3cbf75399dd32e3","ssdeep":"1536:i/F/kJhJ/hM0ZHCDp5tOfn+XKWLsUlmh8Y81lKF1o8HG7XxLWnBX:GF/kJhJ/hM0ZHCDp50SxlmJF1oogBLWZ","tlshash":"50333b46d3fdedcafd2d93bc489a85130df99604e214c36aed8a19cee0794d849393d1","first_seen":"2025-12-03T02:27:55.138258Z","last_seen":"2025-12-13T01:07:19.760426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":737,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/waifu-tips.json","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dtest/waifu-tips.json HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://acgcbk45.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:52 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-2d1c\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=seu3VIIXDC9T8Kpp%2FBAkjguyMrVNW2rN9BnH3BJDl2d6n2uMILTTUITBIyjeci4N8%2F4NUeJjqJbnRQTyUqPuCRM%2FN4wXUpxFmgRsVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ad18fb27829783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11548,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e10da623788c41839a17590ba909f7f","sha1":"ac969016a67c962336aabba5641681bb350f5785","sha256":"8785a3daf3723b7a8f708249b4cdd10faefcbfb1c70546a00d4fa92ea6197fbb","sha512":"2df26873e85ce471a2222d851b27c774ba3799af3ffd867d9645a011ab5c59c9e2964911c976096494003a441734cd18eef050b6d206bc803aa71756081fae2c","ssdeep":"192:LxqZGL8Iqf8jqipQcf6f7GaNvExXZF7FHeZod4XKooq4BgpepZ:LxqZGL8IW8j73e7jeHeZod4XKooqAZ","tlshash":"e0320023ab267ae726b5138f5b5dc183a5d051c7ae81c6cf9e05706c07ec62dd386c27","first_seen":"2023-06-19T12:51:16Z","last_seen":"2026-03-14T23:37:18.017186Z","times_seen":22,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/css/app.css?ver=CWA86","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/css/app.css?ver=CWA86 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 22:55:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69029b6d-42ffd\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNlKmoaplC4dP7VQDkEelBgzzBPGdltBmLwaoVwkIJkTzlZn9OsSB84GiXQj0T7nEVwaOfKDRCQ0h5VHSttsHp%2Bq%2F1DssIlwtB7Lxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50edd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dbd932e620877fa2ec6424a677247bde","sha1":"b0728132e77649102b3f75306e31ee80b25d4410","sha256":"3af0c9781a52876fb484dfbd62d9da071f9d74f20b60649d28fa6edfd1f97eca","sha512":"17c06cafc3e8a492b53b6c45cdc3a6bc26f5dabcc727cce229494457c604b08d60f18aba5c40fd0a08fd6014bcbc48ea535241d5a00912b4719635e07b81e25b","ssdeep":"6144:TLmGVYWZ1Awl73Ky3o/5Mvuyb6U/F6NPWlSb3Ykrqr5y/UkP8KvR8pfoJES3JT0S:TLmIZ1AfT0sBCs3rMhhuSzthDrlISep","tlshash":"2344d871e96031a97227c666b1c0beca6a285153d5230efef596346ccfc62ce1373b16","first_seen":"2025-12-03T02:27:55.145274Z","last_seen":"2025-12-13T01:07:19.763149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/cdn-cgi/challenge-platform/h/g/jsd/oneshot/5eaf848a0845/0.2479569913516831:1765585733:W3DLftJO2e7bTH0hmE2gbigVy_fn8s7xPk8h6hArd-g/9ad18f9ee88523eb","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/5eaf848a0845/0.2479569913516831:1765585733:W3DLftJO2e7bTH0hmE2gbigVy_fn8s7xPk8h6hArd-g/9ad18f9ee88523eb HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://acgcbk45.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"y7KeYJo1Bsvwowo5k2Vn29QR2dK2b2neICLeB92kel8BM8inWh2Qey8JCi2V2pp29hiP2hDBAMYALBWWRAL2AUUVJeoZ0RV8oTs2L7eWThORKoEg$y-Svxae2pklYLLJCq28urUPW2o4SrYtn02gpc0mnXI2P$gDoy2YKeMYBKd6J8dUd29tncvsPwCe2tRJCGjsE+ydYyoyD25ua2YDorKxs2ht4AF32AZaNJzOKJcMmlzTD25jK2vTN8OQACPW82VezCd33-2e2nRisD8k22XtxaykoCUL2-gfQk0h7CdjD2rjKDgJ3GWX5Wx7Wgi2nIPRK93aD2oq5msRK2dghUgjUI2V5R2gEd6I2BRe+S4lIq9I2tjkARxcxBftFxtFKXk5Yx4UNsRhNyosVRaYxCED2Bh4eB2KYn8a0ta2Kjr$rxcsrM2orlrpVxyY3vRhEKc-YC4Xk2gIo622sDJGFP-T8-IIdd2niZsYx7Zn5sN-VETYZ63MxyrnKx9Z3GshTK28JnwZiLOhv6FYJoIrze+67pJGkgLX4djvLL4SUf7RfsWfB76iSoY0wlOjLhdN1Fw8zV3RujTDxXj6qf6n3M4MPO2b4eGjLGNwkTsFY5NF2ru5CqU5SnRk1UkIEtoOAcd-Ln6LQLODVv73x08n$QrNoXK+cSWvJs0Ut9D0XuSBcP2-gn1tQmPL9eIZ$xgg1LuEYZ3T+Ldc6xFUIJjsd$blsvodEssQtFFhGqkQt+xEj3YxqtaKEF9ngtSWPyeKseJgi2o-Vmkvqhq-oaKqkm8OkG-LLUfX$5eDosoDfo10QoLDF7qrs1xYvdryd5MQxhvIBaDvR0kcBaQmjpDkeVlds3ygdKLjBJQDO980eWBKoa2JPoaMBJYeJ9V2KO9Iso3pI8kqB6jQ1g1zeD27dkLjMFIGr2U8KjKsLKOJ+Lem2j3-pIQD0JwCYdmqruNnIWkVm29k2$Nz7GqPcLWvK0LAiJdaNOa6Y3k7-okAIgqApIk4bZP44knFJ3rqP8z8mDXOrf9az1o6$IPmK9ePnqRqPMIaO6aqsF3pFSrvnPSF0nF+82MJT4MZRtmqKk0LFB7Wk$q8EFZA8Wka3wES+qaruRf6vCcMF6eZ4Neog9q0Y2t3C2q9IqvDBeug1Qee38r7PBqA978k3gGn9s9KQnheWBbYYA2mKeuBq0ke48GCBWrSC0mrJAOzN4eOBKsoLU7mfG2avjFw7v6RncwoJArdLqV3MRJgnOI3z1QrbAIaeSJIFXkvaC5jvt$oGgxPg3iWYDDgJC9LIRkS5JbKr3k7s2ZfRyDDBKXhLZ9WL8ti8DZl6lhjlisnKaklF$sdIx11qh4DMvwoLcMJlpk78krv2lhI3M-o36azxyW80LPUW+kd5cJqIC28O-Vd0k+OdUICJQioMFPIq19EaqABIh$WQDUUZBdU8ZIWS$5Nz-5kC4peeef-o+$7IxyBW9WRNionCAXZ1ybXwi35XdtVViFUFgB1$phL0WRzFi2u5V1cvN$CXeK$NkGo$qIf+$+kpWLCc4S0w20N0EDo95L-x29X-dB2ML8o72Vp+O+5cXZR8zfil24VjqpFDYL62Vb5q+C8R2jemoA1LvSBPgsRc3qyFwnAK-yRUkBNAD29aPnI2x0LfL32y9ag4X2tBuBwga0asqOEiCpLmK8KLXt9h5t4wfnbpvOnTbwsKQIh2pR79jqKaADpIqIvIn2S7WJxvR-dYC8R9Cz492PyDsOZxYR-o-OdsxzItuJB10PvRzJfnCXhw8IqJG$n6pPthFIceSvn9AyiVDvwPveiq9I-2I6ap7fm$IOIrBOaE5XwiSKfkrvsg68ii2M6wpiBR6LTajBm6Q28$zQVIKspknu1UUL1DDvSdEqUOKOLPvStnvLFOto0ILprqfRK$eaixY2nD0Ncs$YqsJQilIZisaF6KnKz3cqJeUb8sKz6QpRNF-w4e08re9mrdNphFRxt6OQ2KniVVPmni3r7g1Yh66pikeCedvCK286ymqvLoIXkyOJ2cIZsOh62v6ae3vktuQRWR7t9fnyPBQXLGQXRc6M0fUCrevi$6WBIBe8qtzpEuX8lUOR6nUKaIFzKtdbp1Em$aWArsAzmldvBvbdKFaJBMAL0FaPOiEl6gPEaWr3Lia2nh4VRqTsOiuPiAgCLyUW2Y9xe$M8PAM$i+nOUctIiNYs+iSxtXkl8r4RzkkrvqVJhYMXXyyeJjaZ2Jolgk97mqEjb5lLbpXYLlOFiMdsnaWVYTpfPOagX9pUkkX+UufPM57R37gtSas-7X4zmo3B07w5MTGiA2msBTRfR7Ew42BS8kLOIkTloew-2k3RFJIilKKctzwO72tkjKKDzvmg2mUFChNLqUJvcX6qpaaubkXFy3ypAFOBA2CODUhbFuOFMcLJINaTqrsRI2bJnDsL209RBNs2KeQiwojqTWyE6rbJg3QirqCibA+Ep5w7yk3rhLeUXPdGsKTiAn8w8sZXFR7dgCmvvhTi+JfYRst8W4YMbcOrJjULdDOomK4zejQtiD2kiEMSULcNPBgwq0aUDhoK4-ywULQQ-YAreIVrEUADzVg1VPgP4QogIhptnFdG3YgShsTvXPw32on199uqde2ikBjq8Q0iKebtcJAEtak+VN2PcLiYk7v3oULYpR9mjhfutq$FTeM870NBd2vFU+rs-AmIgeTiAzzYy3drDfQWItbOQAguk2em44c1O$IVp$4nVztByZY9u40MPv39kToqywQDvBMnJgL4Bna1XFmjq$eG-c8bINLLmEpjwlKmAtG3J6ZFK1jAizu8Z$aFnmnoo+4BB5$9fagvEio5su2VE3k52C9WWpDOyU-U16WrkxGvRm7fxnQU7ac65oF8uqxWbUqvqGl1nKnq-qiMvQut3EvvyE4hETJD2M+hNdLbvzs8L42ZVAxcV7Y7beRZYK12asjyfPphvbrDqIvTVaKO5kc3yyfrX6qqox8LgyTBNnKcv5SdxIEegceaIKT2PoXTVXh6CjswwdoM0Cxt-Aa0586hUN3AldQ68Un+F9aqCaRvNjSITb8LAwhkzjOK39YvzFuxMbJgLPvCYNt5iDvg1ll5RFRSsdaK6$Lpjz0mR-At+K9Us3pS6BN4d3aP8L$JVOK+aGNmyLT4UfyKL6fCOyko3XrzY8A8zq9VjI0GVt8gBfKhRUwE3jiAvBjVbcVJabmsbQRha9evNfbBWK+aoYwqeOiE6CufAaPufQyESPFzg4kouC2opOLJfqKy9fUPluDJuyFIsyew3JFVF-BsGfDzNShluWQ+Bu$3e-RAd8RKg$kTRzo4GWZRGWTBXQcolxuvnu5XnRGOCNeQnnB7vZhXsywfBWIOQuQ871wlW7BjEW39PlkBuQqwDy5Dq+O$ttQa0X8oojPAg6IyTEu7Lcv5WC40BYr3jW1kW0B$6IVzrGRjIDRcn3K91nReoJ1l15BG0fr30LoJkGteWb1Ezpkw145jF0tmjp2lU3n11j6zse596LBe8IIjXuVQVv84ja142MW7k7vvYvIe7354tiIv0+RuLzj42FIpsp6R882F8Myxtan5L4UW2vtar75+FOoNXk8os2$$6IVDnetf8yrlrpoIBtRtkq6ehn8ko-Vur-58Ke1bIKvD8IUlvAI$jt5nRL0enAXute7QRjYvy2feJ5I23$6eN2AjWkLzU0jLqanhU8jRF4zLEN8GtlrYUAVIt$6k86BgRrguUb1lzsIZyJKd1l1Il3YeoR9T1+BA6+yg8QvZv6L39gRtnG0krA9I1XFW2ls3s0V-tDiSKlW2$CIDaecWKe9LuI5jXrFssKAlKl6apSF87EVJrKBAYe2e28Eh5KEjXvkwtDGDpZYDi2rqBUVk1vUtsisaeX1DZun1k7Rm6RvqQEr7kz884cvXVbobzek+y$syt+zhhpWFoxUnU810IT60LOUIhe6YBAyYLlRrFUFpB77Qja5L9fQ2GYVehYn$WJoQ9-k8qaXYIIZv0EIMzqID9+t69VkX0TUIFb2z9T58XLRrlCV270yRl-ri4CtqIIt49T6QzKLUj7C+YLg7JzFOsetDfulu2z2l60rA08reRLz9nS2ljttJFOUA08Tt5CBI08-rL$rWgiczlrtWQD2MK2NInyjfsOXieUaeBe8ch7SfUI0KGDUUlCnqY4KLnqyqQAk4IUAOzKqLz7L5lTUTlihVYerer7r35qlCgpQ1v6l2ZwLZIj1vt0YeQ0WJLzUtUIGiOrUUgDX+BIl-vqv1vR2eIgXL0O8LrqK75zldweYa+lRehTg7jMUAI$Xrnq57ReYjo7DFWddiPzIsa8fCksAUPvQaYeVeYsPSvpLLfipQ1MLmz7sRXzk72SX7UlrA0Ngdw2zVWLRcrwCQ9DdhB0Li76I1Mu1lotYeolopjahoBIhzUsph1KsfF+s6twbyoIAISKn7jRsRFPwnzmvL3jFKZhF4zgy$ksC$BmlqoCQ7LzrnsLrw7U-Pp2JI28wdqIh4YLtIdqz72eQ+6y8aW2NeSvgP3KGl22-Pwiyeh1oJWafPb+W+1JwRjapb8CIwag1wEW6wPg91adLAYL8GUtlF8DVJKdQjtqLDPawbRN1Fr1dBu$1Bm8ThnjRcVEofY8TaR6beXezLgU3h9iNW2gIFl2j3132lRBc2EO86Yaq6O81M8LSOULf51M11$nI2UUFejAku$+vtneW+R6$S83B8MeR1pI7300k-5A1hI+FM5Wj5oNniTJ7ICeZkRInVlm08d4gOhswhUe3h9sAT2v9I1uge9uQlsO5gQa57V80Ls$oTXnrEV+zD1Lmwughul6MNlCFYtZhf5WsGhO3T1xyuz+YufhYKRml2Rl6oh6uIg$1Iqk0Lg8mDdIIcjR6yIDZr9TjuJd+F8yzslIYDYe5mWLk2CyB5Lz0OZZUUV8hVjv6RXaOrzK6ekBeg51+Ez5KKUWVEFbBseXhYX7e-X2jRDOQQ0INcv7zK1rWR2etaZyLztK6ahenJcRkOfn2Ro4RKvJaIqaB+rUwR3h16M8fP-rrw+GhRc24aqBIKVICRPM20Wb9AZROKqFz4hAp5zhLZLpYacFLLz40u3PaN7In528+wg0zLR9dtI8tTRRTrV4BU+uQa73FUlKktVJdoKV83LAD6ciZuoO-vk9oCgZ2RI9SuQKyuQDFRWSkZW-Ke2+5AyuE-hFdKcbEDmsf5iqY7KhY$K1-iPNPMUtvnn5rJ+BdtIRp8i-1lXzRLYLW1PA$a70X+1j5esLI8R8nNSKUJQFTNad2TVGKd8iwMUWXU7BATzKhKAJJax9te183h01Th9T282vKvKe0e7w40Ksa8iDU8M-VEWMr7BFmq5Jvb8PMFiTWEjnViue4aDzz3QMgTjKSKny0GsGIDx9JXj9dUTINBGYV4IKBRMekml8jXUsP5jBed3GIk2WQRARuDbAoRayyMRtY+jLRtVbC38OMJ09lDiqWFWUi$s$hWXfns+-FRwaVNnXg6UzzbOKndydtiNIanoIF2Aesy6MkNYLRcBK3jg$WK-Lxd-+vA2bE7XK3ddZWI+B-iC4RIVd3z6y5cP-1jV4F$gnzFas$CRM3958jMXNaNuqZJFU5VDJPlUIcLsqXuQudUnVyhY7YR9MsGv79hyRr+UWL7wGFa3Mv$vaGIdAnbPL+LQnsk-59eVLxOM461MeR9fpLOlpQ5kIGRFggP3l1IeIdWtatav7Wjn5I$5Mf9Qos9oLXxbXR-XPdIIiwI9TjtyNOLUnkNr308evlI6rBsyk+Wi2LVbJy$RkGDhVrAzC6DOK086vlztDMxb7oI0pBb+7ZxUWrw374alw7o49E5iqXrgVOADsER+9MAqAchKM-KzLXL5jIuZfKsDkOo1edO7FZSo+tZ5GnlnZyZYsdw7glJwghVIWLz5gWg0kK4jt29bG08SsPPDO8hfLlLg64UZfvRreRIAJ-rsiXFfP7OoWReINK8hDwWx9n5IDuogCIDSVOk-sSKgmgXkQnwGK3AI$tMwGkLpJgLJDKMWwNeueVef7Qygo5LI5XMXuERzTkxisEd+VwTv1QJoCuTnD0SgP-exi8cSuzelL-AfCoMOrY+BJ+Bqcapvvj5Y4U8rkfi58D6eYvAn8xYgoPkPCcL6Cdha1G97LUViDYuAu-37C25xFhFRBCuwGQMTMdAknDzjafn9JbgBslCN40L9oJeoWbVlUOdDdMJuOZpNMPvjpAJMEsqabSuxQWV1Vo3xQIk9$jOzLLzVELMumL0tA+9Tta5+vk6wMfShRwEtaLzhtFh5hULLhcRMJnRoQ6wN3GlvAj42EU2SUxAfl6ecFo7r7keDk7avJVdEX0U3VOrK3qa0ud-ru4MisDa+VJkiM3ADduPqaLmLOkUGmWGoaehqZWyQh-JdgRwwi9XXhVwisP6+c-9NZGeA$673bTE0YKWUAhc$t1NULLxiDybb2iAdLKKyX9TVUAeo$Yu3XUIhZsfjOnenXvJBqEJV7QOmvz7LbGWAInk4y37yC8VOiDMNpq5i3pe5DvwuZACgaIKyuFI89SZjDW57yfnrDPrMuN+jLRCGoTopbzoOc2jhpQ45sPX8D98IDXNi$hqfnzVMq4Q$tg3qjyAMyCF85Nv7MdML1cbdt257L5swfv6XCVyVkYuj8azgM-AmuMeoCKZMLdU9XYuvI+tFC1cMtNC-PDweL4ua+VZzyMQbjhZLDI$rnKeIkkMF80kSebpLdAdS7+vhpLkphzjiVjPbsxwjvha1YQJrrMBd$RxCe6RZebZJGmvZWLO731hZ7xbBbGxc34axsDt8thrCkAhKeuvaxiTVVudJ5mgyh5jYAAy4Jw+sbsqX7L0RLYWG3OKVpyEr9QKsPJSLOz6MjKnuhaFpdyrda8Dh4JiiqjUMNX1q+1Y4E7vE7RB-g0gKtTWcmxBNUPPTpjFJhRhRZYyDhwiBsMLj0KTaRcR1l1h$Cgp3-FGuyLAl8vAsndJpVG7Vr0V-b+pIRmj56fPfucj$CTSlZzZgrx2m7gVRKzCX6L6Jk767Grw+LgqPbWgYutF8EeKG19OOtKe$CAJwbaKlqeRjxDTsLl-6G3y4KGKRGNcNnWbjtzE$4VCoBi3JD-pZko78G-gN32sELP30VCTQDBqp9PtspEIrmTmZM8fiTwfbS7o0vBE37WqRMqLL6AI5un61Xd$QVPzOK5NqLzLZTndeBJx400wLMxz$gLPfTWnsrfyQLJI5jXlyJ9vQFUtSitFlx1dCjNlhJxwLUoTJOSniN3KLzYwu5VUNLkU3fFXRcFUYDoL8RYuYWqmeZZjGSvj$uBObkXj$hvQh-OetD+ZvO9kMkTRok-70QbR37j4lwdG$qnQUPcwxwxQoEi$rwSjLO6nKOn3PrGQUrDyahr3dWX303kQyBDgwOBedU4aDAZ$S$b-i2n9faktGTp+jTG38J7QFxcv4cRttDP07yYd32c8SK6uu0OzyADAxsfmWXPn1Yw3RTphqL5aDLaOOrV5CuBeuUaKrlG7XyIabmATy0T7xBKQR1jIDv2ukmSn02fLtWfqTPqnhjJVJI2Znve9qwZ2SLWjASnxSVya6T3FIZjms6NxG2MzKYrET7692YOSBs9MIxBNk8VA6u5e0qX96asjemthp$JiQOtPrc2Wv82P2aoLiua9D9tykfR6QxqPr-v8BpnEC$kG29Dl9gV-3zwyFPM2v82s9+ke2TJres3YKl5oJoXaNZk9VomiI51K8jt6KiaVJJ6vde2uv6o95io4pGwVeDWlKqs2JKyKpil2KLxnaOvEe3w87VBXeKf12LRUz3sKnFJiUZ27yKiBIYmkqB32ILP9MJINvkvqW2MVKUemPqkvqDsLeXREBqqIqY88W9T2BIRnzwiqoLaIwrI8gLq1RcnIahUrNmsa6PGLamIG2FoEv2LvLE259eDIMDwo792Isjn-YyvEeBesa92o99pvowYLxNl$bgBpvEdaxRIitqAIXpkeae9F3lXGBpvI907homkt59JoyVaFVdAa5bIyvmqziU71XA6ghvUqj6VKtilGv9L$RrLPii628Jv7SINDj70zgWB$vEeZI8LrvTrxIebi9UlRBGBBg4oP89u6IjaLBgJBJLwK34wGodrEtRWQihIQrpkgZBQBaMzIj2Xq9$kVeU-5GKtIrnDJdk4dtgyPyJmPwi5TisRI629vdrYMxLDIvY2RIqk2Rw1FR2Bg3gK3xi+KG89dfZepa02Oyni6dn$xaDrkiMX4sVvngs8meqAkgABYIIPQ9Wmu8IkTo2gzBAsAWRuVjn5JkZqDRKZRI5X56UmuPV2mAlAtPTovdepaiTi6Bon7PmqSeIyi6giILDlknewIX9qyIy2Tk+aQR2PVv9qJfkg6jzZ1q6nSiO21DrfvKlAn5kxB82hs19sAn3mTKAVYsWIxRICmV8qQ0s0lDov8ayDfd81yDI4gLmkeQe3LeL9ovu2MKnLEatJfyDgvVq4L3KQXTDon1Dxhmtn$No6qePwsKDaIFd5zg4akkqespgMLEOBZOxX25wtVro2cm5dihnJIblXgvqkeGUz11bRrvYqYB06zO2UVGmn7BxNDhV2c6q2mvZADjl2yAR1mskOqbNjuV2DRg7hFdKabLnLn8o-L39yigEeBg+926M27yzRiP2Pjvqi70gB86bAef0Bn2Pv0E482-IgmxiNIPM2B9OmhUd7OxtpIAvcv-ex2W20elaBzIaPnVMiFjOIldo3CiwBsUWoiiexdL2erekgvCq8Agk78vOQ6BM5IBPj129izDBrr2BSIwOWJ83nrKENQxbWx$BbgdAqBsnJAynhpBObrh6Jr2Ylr-la2W2WiP2q+X1ZjvT7t2nbnhYhZnB8A6CcwLl2DI+mWvu23UEsIbZJDP2N8Gs$dkTnh2GI8IRoJo07yq6Josja6ZeCRYJuIvnoOrce22nRQ2ALz2ODoYD$kN3c2tauZRKqZOLnh98ezqsZxd4Ux4iM15LWiow65K0o97KfYCYbLNBYiUKh2jaKmYlwCxGUueMJEaY6C5IpeT8vMEJNGjBetjg7IKI9ipI$FSUO0OFusg42dP42XOjkly4veD3X8a8X9JDSceYOaXjjouVa2gi-kutKi2TBB2JmKLh1ns0NoFi$w+xqeWFU6IrLJJXsTiIUz1In4YkvckKt92L2CeJJFxaukNQOJhSdrg3Cp5pqdrcoLqY6fdAQo4DooWkZkCUcN0qqnn2eLL4871vhgdjD1ExdK3enC9NL7uBqV7cLvVlMAbkIcxsaigmyqBUuiDI8h6V6kVNj2+KNgrDK8nFBKCLPnKfDheLa2ZJaVaP2IlDB5eJonk+a28lRr9on2-kneR3OFoavXoSex68nRGlbJR2iDvtL6r5lYq5kzewXrayBtEASZr8PXySvk6yAx1V8spsbthIaB1uBakisLUwEDo5LvKaPRuy3ndJVTna1Dn6KPgyJMTnxmeRYJ0kQpwL52QeOcnho3JkTQ2XehGahbmpZIuad1$z2gY8m$BDCpiInVdm8AVTYKX2RV5xgoqS2ddc1dV62nEAs2+hej6MFGnS6Vu5x2URwXXRzf-ZMF81ZMXnvMRQTWdd1Qb0XR6vFQ0641dNa-K7mrh6CXbkbhBv1T1uNCAe57BQDGi+KWWmwDDynTvA9oQ8nekbFyJiBUB$Rti0WQJAUnETGCQdkbQ46$fgQBaFPwVQ4URJ+32u3w9cLa9gpk24KjLQPa0sQf0ux2dKg51Dg+f3kOsR17ot4Dln+uZWBwVM62$SfLY-upPwVLx2LOc84KiesVKSsiv$pwnP3loQKnlxETXKsF1-KSKInjugrtiK$3+V82QkrB8138RyI8XAtnCmwifpZqRmwDGwUeo7IQiyiCGk21vQqti9DRrUNCCITGKDMkRUYDnbfl+s$Yb6YCS8SBwfY5sQiLTk2QdtLM2a2Ci8aLwJxbUxoITJRGVtamc6KOZnsxvn81m6l-9lL8YtkRw9A9m9DtVRj2$PwVWT9V2AoinxBGxXh9mqMR0nP1bqQ7wsDKR$n26DoLllBUOxMC7BqVmseBU5riPvPTusi3B53YAk81e8sYspIG2zn1BpaliZnf4vz2Y1zbz9lvAdxdnf1F35D4viw2YwaA5LeKMFtTiGi3wIWLAb$jesXn$+5xLt6hJyRNCnglhV2EQqguts06dAo83Lt8I5Fv6pMthnCf8IXUY6OugPsWzehtpJumhhd$AtEuEpGw1h1LtBL4RRpk55b0iosBMk-K81wM21pzktxFnjuxtsBA$pqueko2K3thB8vFoT9LLlC124FzeRwORZYKyfiQpUoDeUswV0PwV3WR2aj8c0qeZVm06Oo+JdaAGf25mo013s1XRTiU5Y6OnIrheI6aq2Zmk2oRPbW6OctEuq7s5Wlphn2T4kghjReFag9jmhubtPP$Bj3B7X0vOnutl$KGBRU2q2CTu3N1rvWvwLTqiOTMY1$dL7QfK7KctQPl8J1kaLS+kIRsV8Xlv4KKwE9qR$52WTmtlLIDrUMgBVRLp1ddEzFwsxT64tRDwEX0eRhQjZw3ONAz1xEjVJuo+aYDnqmcjpJ2pJlIyWwnR5adKEIwi5tYsd2k4zhoYKiRSYKuBu-tfwdIjFwSedo0hF1py1DgW5m2yCn1xtjglDXh4uEdeVVzL912nOgt91+b05wTA94wCwOqbggf4tp247hFiM1fl45pO-tPeFM0AMTtZuBEz1dh8Owf598rE$ForXVO6BkYvtz1aCQV4gpmOrC3soZzlRxzLJYp6PeZ86f$A9O6EWO4hX0JijSOb21Rjx8F3lpiYwEnPxMKOah5$4zCe12zaFw0fuofCrNGGW+VNXfOKnlPx2eBR+pFP8poFioLMMTUeRan19Ao8Vae-$ppEJOioX7wt5aRwemaZEheatt7znaqOLEhgKY5kuJnJOiqLl27zhORn+FbmQKb2-dYTxbF3qzqMM6wR5CJOmq8Eb7X4icn5C285Na2XBY5yaJJm1r3DIn4q2sJcm8F$itU43yuJ7vtEmih1F-tAJSk1VsttNYKwvF7xtc5id7BEEiAOxUfYYfhOSnKp8ttnx6tVCbyZAirXWwadoYsyW9erLq3KdoY8nYAir5q$1dqRaybFMr68neb9OipK5mEvuRXg0Ospi5Srjn$LdpRYtC6qZXi36En2XtNFbbQUa9UVFVpu5RQ5NaRbixZp9dxt6tOheAzWpIuSQ0haYtfYD9k5A4W14aX2a9ZDuCEgk92dfRvpq5GjXwaav4YRZ5uZ3tbs9-vzOpE5CeYEwFbixAZtuSY8xksv$JGtieYJosV$g4FQ3lC1wFsv7ti7$sm2Bj18gFkgzV1YG0dsMnMBdJJLSFeDq2Bjvno4e36cytCt$9zhkeFnv8lQg7BgP4bAacWkwIwe2j5IJKxjj7RwJzZS395qy8vMq9xO02zbPg0u3$gQwVeAUBiUAo12Trq2i222lj7SI85eQDIyaQBKoEevD1aKrv1e$ZjLqKWPl2iUmOr4eFJr6IAvf69oZwEDjfjaq7qrqxRMFe22kT2U2P2YIY2AM2zolKSeR1OFBB7VnFaEIU86MYqB-2aqJi1Ok8i-vRNFx9M-2oj$LoBN22nY7n$22oRRX64O7oyI5O681DsD9Lq5NSo82LplY3FBRSPQqMi-LSwagB2qQAKKXLWg5va222-IYaQbDrDG1DRlUYZteD2TLvaIlWzOn-0ai8t20g8RgL2gqwGbWaXkKp9vFLCecVN2Kf3vE5S-uk2lM9IJjo3S523IGLvGOPBN8ZO68jL22nauLuLCXLBOdo24yDzWCer-wNv82jKlWOWl-ZVorqR2Lioe2B$8Bek1BD7YFXLKdn6qjL6R6+VSus6ekYK47SuyNJjoueKDSWOJRqnYAtIt8caia5lUJog6LCXstxyt94qrqbEcVpD2dvEJSSlVBKI2OF9rbiS52CVufFCiZ2XUZeqeUdR19+beNoGf7I$5FITEPkI2LMSlh2gLvDoK2J2VPRq93A8hOayiYgze9ok1Nk3h7JiFoBoKgiBkrIPK920NqFoA2coM2u2IsiPoqPpayeCN3Redg12pas85OabeKT5o6822sL4SdBaIFS1Xqz6Ae1Q3k2fUj$12iNuQnVOf0mwZ2KDx2gJs722nGQvL22"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aVk2m8MC0GqSyVAKcIqeOLsuSqppbKDKwnomao2XSI4Xz%2FJ2YoD2kfgHoF9zFySrb1pbMF0JsNXbuzg0Ko0EFY%2F%2FCjrO4BngfvQPddqVkZQ%2FpsQZTcp55XFKSa1eggQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 9ad18fb1b821783d-OSL\r\ncf-chl-out-s: JmsdLR4F4jNgFx0zKST6UQ==$zmA4TRuKrugjsOF8XEMH/A==\r\nset-cookie: cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=acgcbk45.vip; Expires=Sun, 13 Dec 2026 01:06:51 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1511\u0026min_rtt=406\u0026rtt_var=873\u0026sent=621\u0026recv=151\u0026lost=0\u0026retrans=0\u0026sent_bytes=643960\u0026recv_bytes=28027\u0026delivery_rate=39355875\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=27401\u0026ss_exit_bw=4312184\u0026ss_exit_reason=2\u0026cwnd=49617\u0026unsent_bytes=0\u0026cid=04523fcfa3ef3f6b\u0026ts=2213\u0026inflight_dur=183\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/model.moc","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:52.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/model.moc HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 84445\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-149dd\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zb%2B6UTRcL4D3usATG3ZChpr5IzEhWDS5hMHTnMex%2Bvn%2FTs2z3mau2N%2FICM%2Bi28UttknAKD%2FGD6Mjdr0y0YBjjhroBWpBgHf4sA%2FdWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fb64850783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84445,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"8a1d30fc92f4f6541b3743b3bfbcdd50","sha1":"0f883ea279bda9133028124003b11c7f3edf20bb","sha256":"1545fdb296bb2d1c9c6f1c295b3a336705618aa467c45e9be8dbc9cb1ffb704d","sha512":"052d059362a5b581f65c4ebfa9cc86f3756e2adeade5ee3f190db1bea990ca15a78c7f0d7828e129093f36893c6878fbddcfeb47ea710a114f99b9164056ce82","ssdeep":"1536:C8cj5ggJECClbTPP/iuUTpXZhyTXNFIQgEdBBUpCHpQOieEI:C8qZJECCJirZ4pFNgIPH","tlshash":"ab838e4799907f17c024633d87e756651271a90e6b821b7bca2dc0183ef33166aeebcd","first_seen":"2025-05-06T02:24:55.250849Z","last_seen":"2026-03-24T07:50:37.352008Z","times_seen":24,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/site/css?ver=HeaAP","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /site/css?ver=HeaAP HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=no-cache\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iyf%2BmRLJu2PQvAhIuBuvpoH5IjW0DsXagtVKc3vSwgI4cYC7i9kVH%2Ft06XwKJkcXR3%2FcPeFJLidchpVMz5D2o43rxaegzCnul461qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50edf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6896,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (678), with CRLF, LF line terminators","md5":"3f194ea745b66041e7aa8c36b6ad0567","sha1":"ecf2cd06dc4c61805dc96fd8ed208ffb5abe1016","sha256":"04d8c2ecf088f9cf2615f3cb89c96ccae8e28d958c4914bcd149f48362bfea5c","sha512":"40931ba3f5814432309da4375ba8119e4fe886519fd31013cb727743502b8f21ee960418d4ad96001d01632b83f2ef1c9ed30f62788bd8b480a3bfeb3f924c55","ssdeep":"192:Uxai7naIl73kJ+3SLxTIscpCoTPgDSerNr4I4KZl:kai5Psc+TlXZl","tlshash":"11e1105491e31b6a733f43be2889b0675f110ab0ca050fbcb974b5add65c5c92eb2981","first_seen":"2025-06-03T02:47:41.890867Z","last_seen":"2025-12-13T01:07:19.766693Z","times_seen":3,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath1.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath1.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2238\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-8be\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDWnXORcl3JaDuIxNlo%2FUDwrBTgrFETS6VG5M1sLO4UPIo7W%2Bc2ldvyQHuJaUYRXS5Qyn9ywa7TJS1ypAE5WOfV8nN%2Bnwy8JAyQqbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138ea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (468), with CRLF, CR line terminators","md5":"84fa5c0a00f633ced8821254806beeb7","sha1":"8b9830960269c57540f235550b662bd8bb2eb9e7","sha256":"88a3aa1c03dfbdc323fce26d2be5ffc959e672059fd1d9ffd5826ab583ad3921","sha512":"228bfc4d5625b03919ae9df1f1a918592cd10a82f1bb9b5cb8ebc54d827467a4b05a5166c037b82b790bc570500f1ded62cfb079b58d670ee680882527d2edbe","ssdeep":"","tlshash":"8141b04ee3cca6dd74082b78cbbb46d637c6e06820e47c5cd63d8819e090d666232f44","first_seen":"2025-05-06T02:24:55.232805Z","last_seen":"2026-03-24T07:50:37.430428Z","times_seen":22,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Sleeping.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Sleeping.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5908\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-1714\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjvX5XcZc1%2BGE0XRt7LUjD2GvJZ2lwGzNnTBXA0m1Q1AK9SNcgUpEL%2B%2BLlWFnE0uUWfxA2dOdDdHu8UIXc6howKIwVEUE5D%2BgkI2Eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc148f1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5908,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (837), with CRLF, CR line terminators","md5":"1d493c706fa6f079ecab1377b1ae355a","sha1":"14371217f96d56b7920c89e8336aa19d2dc1b457","sha256":"580e727c6a871b7574fc6de19d3cf5f2b20a0fa5ea7f246e4cdb34443f30254c","sha512":"7358aec3a131782957cb7e4d5791a01873bad05c9b0225f96cb47e169cf990688dd976d430a61b2e2303c4ffa9188192fb5cc66cc46a29076afdd43f7361b917","ssdeep":"96:KZjvWoScjurvdab9Y+qxymV2snfttP8xUFs++hAN4uAsJx:K1WZcabdm4xRV2oK7FuAsJx","tlshash":"28c1cd07a7fc7ba8b7800b68965da6f5f1d1d412a068e3d8cfda844de109e7340e4b35","first_seen":"2025-05-06T02:24:55.255306Z","last_seen":"2026-03-24T07:50:37.511597Z","times_seen":16,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/cache/min/1/wp-includes/css/dist/block-library/style.min-adf0b4291cdc6db57085587f1215f423.css","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-includes/css/dist/block-library/style.min-adf0b4291cdc6db57085587f1215f423.css HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 14 Sep 2025 21:54:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c7399c-145c2\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vivVnkL5F4Ky%2BA%2BRhBdOC73jgKgtMEc5ljp6uGW%2FKMV2EqpAoebsWUsG%2FZ7XM8vVQbFRYpXHcT2hn4Gxxa%2BTnU3CRY79E14dj%2FCfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ee4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a62b83574be547ec6757607dc274f644","sha1":"500fda8e02549939dae9c68395f3319705064c11","sha256":"eb61dfec801d93041269b064f5c8221727c9350f80ee0c590618cf53c172c1d8","sha512":"7887be6052c3e1737856b6dec57b3457cb42326e624f50e4411ebdda48207d59db501772d809c14141a756631b70c8c020c0b54128760a925b1e0487df8cb5de","ssdeep":"768:UNX/7az4tkA5ScX+sQ354sMFwnT9FgmyfblnN8yJb3qB/zq20ucYBNaNSQBFrG:UNX+ykA5ScX+sQ354uwbm10uQBFrG","tlshash":"60833d5417b4dcf939bfa73a9d9de248a103e941c64aa7e6e072d190718ca590cf3b0f","first_seen":"2025-06-03T02:47:41.800738Z","last_seen":"2025-12-13T01:07:19.770602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/owl.carousel.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 May 2018 10:38:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5b09393c-a8e5\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ye6uOzeqDkkB1TFYPhfXqZz2qHTKMoRak5IFTnvE7GwsxaDGqdquIyBVo%2BWGxeYxp%2BvfD5gwEmeEWmtaAPCmolJ4Eohimvxk6amfOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57ef2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32035)","md5":"7c55a054d51f046526a6c94cf915b1f5","sha1":"a088565329115bea60113dd1e00b76528e545f04","sha256":"7ddc424649b256e50ebbde6522b13a627359b25c299b3ffa32a2896866e277c1","sha512":"f208121218f5ad44638b69a6f6307a9da8e09ed212ab494b4bbf8bca0e0180e529650d7de287141be941e9775b03134c0479716d34c6c9a45acee12a6474bf56","ssdeep":"768:lBI78tMFA0ndb38KNSRvnLGRep2lcwJeL+CkjQdc7buRQpUQuiBt33:7IOMFvd6MxAcXuDU","tlshash":"11137246b3202d2a869b61a0663f160bb23a251ce414507d7d79a6de6d7dc8c213fbfc","first_seen":"2023-03-07T12:23:39Z","last_seen":"2026-04-03T21:04:30.692463Z","times_seen":765,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/modan-components.js?ver=YgVWS","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/modan-components.js?ver=YgVWS HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Oct 2025 00:43:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fc1d1c-2211\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nbxKFlOCMqSYFa0EKgcvHWiYK%2FhxQR6K8XLu1ufkJRG1EUqdQ0bAePjaybwty7EgkYP7%2FxI%2BJGXfAnD9WlZaF9QKLDfYrHPscL%2F%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57ef5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8721,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8648), with no line terminators","md5":"59e33ef55e24124dbbaed663b3102ba7","sha1":"dcd06c05f7d6e239c3b04fa173140c49f27cc836","sha256":"22762d530216c636f83c2f4df032b3cbe60128009faee29d7fbb8c3093c7528c","sha512":"3e242f44a4e60d4ee4f9c66a00aeb47904665e6aa18c2182c6d3c88f0e6698619df63d092d56566a6ddb931fae20a02d36b4592e0174c2a1abfba5db5ccc4096","ssdeep":"192:aqQYQvYI5NBDtrae7gQFwVHxSRpwJ4Fouu556UHQtiOb74rau:atYEl5NB1hFgHxcFouuPx4iOb7Wau","tlshash":"bd02c8c1b27e652b0dcb81b762df2f0dbe73401298b5a254683b5fed2670e51b817a34","first_seen":"2025-12-03T02:27:55.16242Z","last_seen":"2025-12-13T01:07:19.773569Z","times_seen":2,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/home.js?ver=3jpGr","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/home.js?ver=3jpGr HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Dec 2022 20:57:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"639f7ed6-13d55\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awMXdl0Ift5%2BgT5%2FUiYWUIqcb9y4LOtPvhUTYEhYTvBNHdXlxvbl1rel7Hc3923Ysnk7EZmB3piI6Ql%2FygMqH84%2Fr1buo5DpO23g5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57ef9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65194)","md5":"ec632d3077b36fbca18f7b845147aa97","sha1":"fcd5cc8fd0fbbf1bf6a28799d4f6fa3775d8b72f","sha256":"ce1443a0161afc3a18caec569a65961e5402c3b1e09196974fe025e02f7ba039","sha512":"d3bea9e3d890b313429b87083361757dffb8856834d78b4b29d90a5543c4815c3f27bad0a1bf8a930a72a31e6d33f4120c13b48116bdd75876c5638de4ede1fc","ssdeep":"1536:FgEHQSx6WRI2JWAzqn9xhUTfEkvHnwHRg0AfzaJbgQzFVy+G9Ofr+ACSBSvGndJz:uAI2JWAzqn9xh+fEkvQHRxv+QzFVfG94","tlshash":"c383941ef49f346321bf63a58a2f548ee93204a0b24c146474acb4f75ff582c5367a7a","first_seen":"2025-06-03T02:47:41.894168Z","last_seen":"2025-12-13T01:07:19.775299Z","times_seen":3,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/live2d.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:50.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dtest/live2d.min.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-251e2\"\r\nexpires: Sat, 13 Dec 2025 13:06:51 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfR0OlAXGHNrvi3mLlIP20VD3B2DNDEnLp69YbsD9GdqTaceYbwfWzGLiesHLi1vwHpnZTXm5EmlETGO84MWoV%2BfSa8JzNA3p0vXqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fab9f85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64851)","md5":"d7f221708b2c79547f8457e595b93205","sha1":"b4c0f5b53c22d7884cc8554a84b529baf016f8be","sha256":"af693e395fcdf211b9cdda45fd780c258e4daf7e7b7653a1b89b2b64ed59fd73","sha512":"35c396b5a03dedaf797b55064e451f7686a31e6941dc0853e02c5f8c770f6c99e3fee4b63b332a32373006c2d727cc10ddb0d6f5c8b62d97827a15265a2e548d","ssdeep":"3072:1zFijetP9IVhiThCShnCA2qYD1pbEGK6qoA7ZRc7k1K2mholcBs3ExXMY:1J0e9yiKA0EGKq1XMY","tlshash":"06e3b684f9f0a064521390e41d7f010f933aa96e7905857cbaa8d4efacfc84e6667f74","first_seen":"2025-06-03T02:47:41.865728Z","last_seen":"2025-12-13T01:07:19.786117Z","times_seen":3,"resource_available":true,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/vender/js/jquery/1.12.4/jquery.min.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/vender/js/jquery/1.12.4/jquery.min.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 May 2018 08:36:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5afa9c2a-17b8b\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5jcYS95b45CBQe3sk%2B7ckbZh3gHJr7ISO4C6RnXX%2Bnc0jmps20RABNcuWQsWrtA9ee%2FeAIvqYd69qXX0%2F2oyeL86kOIpcR%2B6a02kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa51ee5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T01:28:45.073552Z","times_seen":67159,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.acgcbk.link/wp-content/uploads/2020/07/cropped-buster1-1-32x32.png","fqdn":"img.acgcbk.link","domain":"acgcbk.link","tld":"link"},"ip":{"addr":"172.67.138.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:52.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 11:08:15 GMT","end":"Wed, 04 Mar 2026 12:04:42 GMT"},"fingerprint":{"sha1":"2B:1C:7D:29:4E:53:D6:ED:87:6A:C6:A2:3E:63:F6:86:D4:85:34:57","sha256":"16:D5:4B:0A:5D:7F:AA:36:25:CC:46:67:A4:9E:A6:7D:6D:0B:E7:4C:FE:F0:D8:5A:E0:D7:A6:93:3D:2F:1D:72"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/cropped-buster1-1-32x32.png HTTP/1.1\r\nHost: img.acgcbk.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 01:06:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 765\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2020 05:23:34 GMT\r\netag: \"5f07fb56-2fd\"\r\nexpires: Mon, 12 Jan 2026 01:06:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIbOS0WW6Lo82WASYLOd64fJnALohcSkNOjCsNhTGMvVIHAITvwIYWHOmDIauPe3syXdT5XFmj1RjrSx0hbSqIfcogV4r%2F1Ocn7CH9qpKA%3D%3D\"}]}\r\ncf-ray: 9ad18fb828a1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"27fa2b4301e35e07cc898176cb867966","sha1":"9e394fffa242ad996981d64e5f9559d7bfe96a67","sha256":"0ad67bd84f2d59d852c8ada73656da4c0005e6345620fb73587580b26f6f0d48","sha512":"d2c378cc0da7a458eccfaafa0f4a9d2c84c9d0b343c9c73dd37d5c6ad61aef38714fec0f3123186059e8c7976344a429ce6317f20efa9dec855b4e860a27d411","ssdeep":"","tlshash":"a6017582858105f3562e771fb9bba2e4673b8c0c101b7b04a16edc5b1b0798bb9f0203","first_seen":"2025-06-03T02:47:41.836021Z","last_seen":"2025-12-13T01:07:19.788163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":26,"connect":2,"send":0,"wait":597,"receive":5,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath2.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath2.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2143\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-85f\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBtbHjDSgGR8jtB%2FR%2FgJLCjOBZb4ngjrk9giGnLDekl4oH6Slb4jUQobPmm5QyaENQYv25lSpbl4xb1HGHkS9lO2AgM9DFT0JQurhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc1b8f5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2143,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (410), with CRLF, CR line terminators","md5":"442d8cf6034309120f73f22ca8136d1d","sha1":"2f1d687ac155865af6176d77e0ec6f4a4d29071b","sha256":"e85c1aa1743c161b0bf1e765b9ede74067a696411ae5ff6294eaf4ea66b69e2e","sha512":"3abd7cfa03a83d6ce7fc796c24450ebf476900d6421ca56308bc85d06bf32b0701cbed62bc133d42647a13f86219564c340ef0cc2a09b1d82a2b112a5be91448","ssdeep":"","tlshash":"b7415a0ae31cab9eb5082bac0ffb56ca33c6d94530d9f89cd42d841af091c7a5232f44","first_seen":"2025-05-06T02:24:55.231521Z","last_seen":"2026-03-24T07:50:37.522491Z","times_seen":22,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/jquery.emoji.min.js?ver=aSjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/jquery.emoji.min.js?ver=aSjks HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 10 Sep 2025 03:25:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c0efb2-2721\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6dSe03cQnaNJjY5S%2Fpox5JmTPT1jzwemMceL78DNPN9xc18kynsb3phl6yRyrynYAbThp%2FD8f73LGqpo9LftBC4RDghN%2FVK7%2BSqdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa51ee9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9967), with no line terminators","md5":"bd2f8a87c9334587e8156902a7cec592","sha1":"84f57c7afec146f7c063df446a0918a91b56d9cf","sha256":"f201dd95b48ce1d186f87f00404744f2daabd8e51cd9a8d94ef91e492211ac03","sha512":"ff6cec4863406c89165e85bcf8fa2ed8cf70e53f710d6b8f2a82320d2b18c8710dd3834245f91e7d18da0a53895e9fede1dada55539d2e42088ce54180ed4af1","ssdeep":"192:VfREWoR5LRXvjH2H652igK+QHsyBUeBQsSBAgtDOW2RXFpyLTN9z:8WoRDfFJgK+iRBTBQsSBdOFpyLTN9z","tlshash":"7622b7597e40201b11eb01ed405ddf1a65baf1f9eb228d48b2f14ae6da80edc121bdb7","first_seen":"2025-12-03T02:27:55.1669Z","last_seen":"2025-12-13T01:07:19.792567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/app.js?ver=vSD19","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/app.js?ver=vSD19 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Sep 2025 11:18:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c4017c-1feb7\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kj4Sn5Xjbbn3gfAeiPds%2BpqfW3b3Ll3%2FrhAWgmaurRaHjSptI5i1tPQFAsOsvxGW3ifs3chQG%2FYk28mFsQIoTkr4Vzmm9ZVTodiOiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57ef3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"9852c52490f55ef11ad2bff438184e53","sha1":"13de3809d4ac016c68b76f9ebd652b5c7e450456","sha256":"b0f2b235d9551aa5c8c85afac35071699da76dec04d95740886db3f62933081c","sha512":"a33658151763b0215f3557ca37037018e720bcfc2f3c15b7e290195b45570c8e8b18470f134e562d0169ea834266107c5a8b1b42ce075109f1ae3b76b9312c21","ssdeep":"3072:gIVOXGWvNFunbe+j6eAql3d7sm3Kla4aZ:mGEFunbeE6al3dRxZ","tlshash":"3cd31b8d7750707582fb21baa11f520aa1326826e506c460b46dc8e42ef4fdd62b7ffd","first_seen":"2025-12-03T02:27:55.130969Z","last_seen":"2025-12-13T01:07:19.794161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Sep 2020 15:53:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f735862-1940\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAAAZ%2Bwp%2FKm7kFsbWFW1YwyWsxWZ64HNCNWnizNV1ILM4BwMlcMqidYEyoOEOP%2B6KMelCiau91%2FSAV9mKuoTaIvZuZQqhkxje40wHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa58efd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6194)","md5":"170687433986a4a559fa4f16b1d7c70e","sha1":"84349b5fb0fcb057ae1768667f480fd607a1da49","sha256":"722a90d42ef2bd0ea38f0fdac6b4c0523aa4a027e9ffe889972100746e165582","sha512":"56a266d6abc2690a87954af3bc88b15c0fa08c3a8e9047741e8b18fd4179fbc107573bf19c242341bd5a7f7955db1c6394a2e9240332bfcca1785b47adb6cee2","ssdeep":"192:nuKZ7HKiSON64sKenMsCUV2E4eTwEFgImI9lJy6yrEZBd:nuYHKiSOmK9+TwEFgImIRy6yrEl","tlshash":"98d1a6df729ef04aa547507256af3906647b1b87192adaa0c031cd997cbcd05c43fde8","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-04-04T00:18:30.255011Z","times_seen":4406,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/textures/school-2017-costume-yellow.png","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:53.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/textures/school-2017-costume-yellow.png HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-71fc5\"\r\nexpires: Mon, 12 Jan 2026 01:06:53 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrFhoDeeVvduICetgIy255PnvfAPz3lNndGwnLXihZSqtkdYPWNvcZDWH68Oc9e6wnkYrImDNO8fVu3JkwkcX08GC3yY4PDSMFTFEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ad18fba188f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"2297d6901c36464711ce11071846266d","sha1":"3acef24e28d5e2175291310ae1622b452e77e922","sha256":"0799c35d0a0f279149c4d4e54e22bf6e4c07d85705be93fee31dc059fe56276d","sha512":"c746ca901106dded3fd82844a5ead914158c55ed6614cd3caac9591dc507fba6f399bc3521349eac54b9cf5e5e5d4b6f34e06a6b12fb104b4be6b0d933fdbc46","ssdeep":"12288:+JVMONhYd0xknBgpoqQLWBCao5Vs9nqjT/oM3w6NB3KLTqf:yVjhYCxknW1EWBeV7Xo6w6NVKLTqf","tlshash":"f5a423aefc2ff518f8cc822242c6c75f55b7725a8519962dbc6bf8127e3265624ce04c","first_seen":"2025-05-06T02:24:55.235245Z","last_seen":"2026-03-24T07:50:37.500187Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":374,"receive":734,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/css/modan-components.css?ver=a74OL","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/css/modan-components.css?ver=a74OL HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Oct 2025 00:42:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fc1d12-6d3\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMkurcISvXokY9Vh59Ah%2FmTkOsli0TZYZbZhrlvXjfwe7o3F%2BeY%2FkTcjYt%2BerEKZBqwwxe3m1mXwlI61P6q%2FIi2XZ78nH8vv9hUG6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ede783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1747,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1747), with no line terminators","md5":"07d395698ca1fe26383694116e481fc2","sha1":"576407bfc742c8f4c7846bdb2ab51a1823cdbfde","sha256":"8ac07b41d7ca77fbb56d7efc214991af8549f58204e8471c8c4ab91e4630a67d","sha512":"48d46f490a616d16ef92662256da3246dad4273c580119a9038bc8d5e3a379dfdd46f1a6a09b76d0637d5ca641abb9b83e63b60ce4312b1e45e410bab2988327","ssdeep":"","tlshash":"ee31eea5f2a02c1978d7e1e728f0afbe21794271d3211b3aa43b333c878519a00e7724","first_seen":"2025-12-03T02:27:55.173926Z","last_seen":"2025-12-13T01:07:19.799701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/fonts/Tico.ttf","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/fonts/Tico.ttf HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://acgcbk45.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 55084\r\nlast-modified: Wed, 29 Oct 2025 22:47:46 GMT\r\netag: \"69029992-d72c\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncache-control: max-age=16070400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mDQ3xyKnrhX%2BmLSV0jTV76sDGh6GO3q2VWF%2FEO7xp%2Fer0cdvWD%2B7RJchNS3t15pNZ5jGZjDFMcuT07nMV5Ck1OM7Gn8HrpOudF9Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9ad18fa51ee6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55084,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 24 names, Macintosh, type 1 string, Tico       ","md5":"f7575174881b14635dc3787ef95f8150","sha1":"7e16ea3f6d3ee40ff028a5690548ae719ac1580d","sha256":"eb892bb7c5799e396f080ad17fddfa90c45d4f6918a371e259cdfcd55ce8d422","sha512":"bb698d09a369cfc882828ebca65c4bc004e4d671a7ffcd66615ee5548154a108afbefee525df734ab7028ad8c68a98f02cdd409d847ba1d3a3cbf75399dd32e3","ssdeep":"1536:i/F/kJhJ/hM0ZHCDp5tOfn+XKWLsUlmh8Y81lKF1o8HG7XxLWnBX:GF/kJhJ/hM0ZHCDp50SxlmJF1oogBLWZ","tlshash":"50333b46d3fdedcafd2d93bc489a85130df99604e214c36aed8a19cee0794d849393d1","first_seen":"2025-12-03T02:27:55.138258Z","last_seen":"2025-12-13T01:07:19.760426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath3.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath3.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9363\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-2493\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rLPw8AWaSQ1cfqKxj4P%2FA5PKtPA53pDkbP7eHfMNazKFpwtsEKxwXaKu3d%2B88uDbD%2BwDu5zGt79se4ZUscJh7pxRUvfA0l9WwhhbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138ec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9363,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (622), with CRLF, CR line terminators","md5":"9d41c08433bb59d06cb7d2fb956b0f03","sha1":"848c2740a0b824a53c592c8052ce06453b1ca346","sha256":"1eb42542e7f5b645f4b83ceac7bae8194d1b86fa2602385da22286fe8a330a98","sha512":"4587302a46a85cdb8de6d2eb45681f7d009181aa2d446c4be9d20dbd28b12e8630cac7ad8d818139a44d417400e1913cf1e0c5f9acd7ac9c8a9d1fbf0a389a5c","ssdeep":"192:gfHyOMflE4McPs9acL5gBM5gBOs5+gfOOOOC5x2KjncVmrtS36kT3VIN7LNbLMY:gKFjMcPsb/ZKOOOOC5Y8YuS7VMN","tlshash":"7412f95f63ec66d869491b20827f37c636e1d5567494fc8c871bac28f809ea7222cb54","first_seen":"2025-03-18T05:11:08.410136Z","last_seen":"2026-04-03T11:58:29.495598Z","times_seen":36,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/autoload.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dtest/autoload.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-5be\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OklXOQdk8XMjpcsnFTSP%2F7KTzTQBb%2F7wKaVlZJCfqJV4vhCRd%2BV7kNEXDAg%2BKAc6cAVW30kR%2BCFHboRstFzxDlzYzJGiyPCP841Bfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa51eea783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"14b7547cc6579fa2ac49194e81cb908c","sha1":"4778e0a42989ee3ab13417e8636d3be72d5e43b1","sha256":"7d23a0b50529ca26e30dab2dd8884b8830f79f322431a33c4913c1f3c66e118a","sha512":"3383b11f74085c53ae8d89681b5bedcf858e10e78fd2adedb5c935a410677390b83e6dc3c82b3e3d8f4c9087fff54ddf93d7e9f3ee680ab2ff571df0bc656c67","ssdeep":"","tlshash":"1431653ba72c4b336077b4793b1de6cb6420444a25517467688d7b9082ea6ac0160f5e","first_seen":"2025-06-03T02:47:41.841657Z","last_seen":"2025-12-13T01:07:19.803713Z","times_seen":3,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/cache/min/1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min-4f5438176680a052c7385eead9e9dcff.css","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min-4f5438176680a052c7385eead9e9dcff.css HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 02:59:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c8d27c-2c8b\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHvLDFj3tJN8VW2b%2FO9G3Blk%2BOjfGw6xFdwsJs%2Fe%2FMrJZVrt40PWp4D6zEgebTQTydh3wh8197Qb6wQkKwRKNwJeTftiFB3XMgyJTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa57ef6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11403), with no line terminators","md5":"e4b6c8493886f49c1045602016cde93d","sha1":"e5e3a37453f1884eabbfcc36050db1e2ece4e3ef","sha256":"96dc3b02547de62ae9af953ae8d16aa4e0fa6f58dcf4101f50ffd8c606e4825b","sha512":"b843cd5235dad37ed537a788638c8ebdd65a657de617ea00bcf54be595cbf0faf6801acd13ed43988a877eda42803e3c0633ad32d9c3deb5d59c4156ced959d3","ssdeep":"192:xthsVmeDXDGnvgZenTAZKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDGnvuenTAUNBhDInSwh31r","tlshash":"cb3222929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2025-12-03T02:27:55.169022Z","last_seen":"2025-12-13T01:07:19.804397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js?","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js? HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tt_ref=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jor34bqPfwDBxymwv6XGXc2dROa0zY5nJR7Es4X0SQCIR7tDzD5%2B4Q9pYmKEhdiv3SFXeAErZemGcOUx04g8ZBFgC4zaXmJfghMfiIZYrT6IppFJp%2BiDgYnbxE8Nn4c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18faf9ff5783d-OSL\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1411\u0026min_rtt=406\u0026rtt_var=496\u0026sent=516\u0026recv=136\u0026lost=0\u0026retrans=0\u0026sent_bytes=531724\u0026recv_bytes=14855\u0026delivery_rate=39355875\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=27401\u0026ss_exit_bw=4312184\u0026ss_exit_reason=2\u0026cwnd=49617\u0026unsent_bytes=0\u0026cid=04523fcfa3ef3f6b\u0026ts=1871\u0026inflight_dur=170\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10403), with no line terminators","md5":"77b9b8c29a5343764192e876291e785e","sha1":"64040814529b1622686d802ff36ab8db9e6a7c54","sha256":"65251399ffaabd70ec4dd94b08f8608566be5183e7ebb3adeab2c1eb3262c796","sha512":"0b23324220e197d68dea263d5422af3412cf601a11b5d8c305ad8913635315c0583b41046e3130d2b4e92186f72a2b3d0a800191d043b7b074f2ed9b06497625","ssdeep":"192:+s9td3XzIwn0aPyISjy7AagYaxaZeaL7xQFaB6seR4I9kmui66ktr63YB9ZBqo:+8pRn1Pypjy7/xQFilfI6mui6dtr6A9Z","tlshash":"6a220a8f7f08f464d3521070a62b60c214b4fe8b8c186ec3da789d74be38b99b51be55","first_seen":"2025-12-13T01:07:19.805492Z","last_seen":"2025-12-13T01:07:19.805492Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.2","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.8.2 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a4f0fe-453\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptA62HqpOKg8osw%2BHiQyGodIzlgaJBKyHCp5LXmki5uNJFFWama%2BxFUD8bfk6sCb9hyh%2BsH1YRkAqTlM88LdNlccf%2Fm6vLz37x3Jdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa58efc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-04-04T01:26:15.647685Z","times_seen":38217,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath2.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath2.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2143\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-85f\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGBhzFGfzcrfC1B%2FjOzaISl1kfhNRHmaxSVkbj0b3TGNliyvkFatbt4RTsN2QtcCksfjaRCAct0gYbof%2FY%2BEZSfjBTSCNo2fuHdMFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138eb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2143,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (410), with CRLF, CR line terminators","md5":"442d8cf6034309120f73f22ca8136d1d","sha1":"2f1d687ac155865af6176d77e0ec6f4a4d29071b","sha256":"e85c1aa1743c161b0bf1e765b9ede74067a696411ae5ff6294eaf4ea66b69e2e","sha512":"3abd7cfa03a83d6ce7fc796c24450ebf476900d6421ca56308bc85d06bf32b0701cbed62bc133d42647a13f86219564c340ef0cc2a09b1d82a2b112a5be91448","ssdeep":"","tlshash":"b7415a0ae31cab9eb5082bac0ffb56ca33c6d94530d9f89cd42d841af091c7a5232f44","first_seen":"2025-05-06T02:24:55.231521Z","last_seen":"2026-03-24T07:50:37.522491Z","times_seen":22,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-13T01:06:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 01:06:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 06:53:21 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfULyv5sF3c%2BbYb6BJvgK7%2F8sHHW4JJwKDCUqAGyhSmYZLyopJHjz7Sfb0QHAbo4xMNu3NqSqBtYrosJ%2BbNvbXxiTno4yK9FrAwhkQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9ad18f9ee88523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":259344,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63100), with no line terminators","md5":"d95a5a7f6daaf9f995cea6481ef2fca4","sha1":"662f7d2a4c54705640124aec3a98ac8b5b12cb8c","sha256":"3b29991331176e5a009eb0bd229ac5ce74f9e698863f9f1b7cf4d29ddc0359a0","sha512":"f9844bf54792a3b45c6213fe913c3fa418b271a7c0ce20cb29b4ebab3241e80b219bad88aff64aa82a85d10e691e6fbe6e53d304f398bcc2975035438459e1db","ssdeep":"3072:dRRwg6GsbFT6OCVQxuP5gTL08dUwpJ3kgVVi:daGsbFuzQxuPOxJ3LVs","tlshash":"194439bb90c85a37535693c0e9a5bb1df602c13fcf020fd8b6f4628cdb85ea55953928","first_seen":"2025-12-13T01:07:19.808086Z","last_seen":"2025-12-13T01:07:19.808086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":19,"dns":4,"connect":1,"send":0,"wait":796,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/css/custom.css?ver=IE2a4","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/css/custom.css?ver=IE2a4 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Sep 2025 10:07:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c3f0cc-3587c\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WenuVuMo6fCIl1WjGw7Taq5wFzt7UKqVqFyc2%2FPloLLvXri3rv8E%2FFcSkP6xDm7poOPFemgsyiRrgWlYWp5CJU9Bjkh0RjWmDV%2BQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa50ee2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219260,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (917)","md5":"069c8e68874aa660ddf46e61263532e6","sha1":"d1cf0b87534634f1105ef8fa8c5efbf71eab9c25","sha256":"d30edbf3fae5dd058361c6f9f6f2bede4c00d79ba3926e22f92e4ccd8363ef70","sha512":"e919b38413fd6e4502f7db92e5835b4afa39348b46915c66149fe08a51e31295d1cfecf86525d2580ce35c007404a6ecbd1f7141e829a73d9980ebd7350d8ae9","ssdeep":"3072:WALgelUmBNM1d6gj/wY0dqvAZGa/Ky8nu:WALgelUmBNM1d6gMGa/58nu","tlshash":"7b24b6b8e04910d75336c573d7847bac62a9f271e5430d9af20e218d6ac27b721d3b6e","first_seen":"2025-12-03T02:27:55.147127Z","last_seen":"2025-12-13T01:07:19.808989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/cache/min/1/wp-includes/js/mediaelement/wp-mediaelement.min-04e126589dce29b33b2d3f300775dfbd.css","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-includes/js/mediaelement/wp-mediaelement.min-04e126589dce29b33b2d3f300775dfbd.css HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 02:59:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c8d27c-105a\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUAq%2BAMIp1VzVQC7bIZ%2BxBHB9ge%2FQrHRnFAVkydhi8Gj45PkUMcIOo85D6zvVP4wciVHKr4idNxm73CeG1jQ8f6MQWur3Je%2Bva8Tcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa57ef7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-04-04T01:31:11.558322Z","times_seen":70335,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tt_ref=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 9ad18faf0fe9783d-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V%2B21lAOH%2FyHXcn6vyGe6AZH1LHI5QWu7USLL4UAIVR0Z39sSAvvPB0ljG%2FoSgNRCXbBMfELhooBhdbWMDelDpDFKLwJKEJv464zNvlSia0mp00CoFkfJDMQKja6K6O8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1449\u0026min_rtt=406\u0026rtt_var=551\u0026sent=506\u0026recv=131\u0026lost=0\u0026retrans=0\u0026sent_bytes=523960\u0026recv_bytes=14126\u0026delivery_rate=39355875\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=27401\u0026ss_exit_bw=4312184\u0026ss_exit_reason=2\u0026cwnd=49617\u0026unsent_bytes=0\u0026cid=04523fcfa3ef3f6b\u0026ts=1786\u0026inflight_dur=145\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/get/?id=1-53","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/get/?id=1-53 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEfF9j4u8qwcDRusMn1RgOnPgHdVLyHo71uvz5VsxquoNXdMCeh24K%2F73fFYNKb6M9TapgrDmRGbHAaaVHgAsByYUSm%2F83SiWeBZSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fb26828783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2958,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d8e0d563578fc6a5faf84a5cc3e206f0","sha1":"3510b0ea4bfaf0b604e431b3137a2dc7e054faf3","sha256":"2c1235fc76128d0c9915f364e246688172c88cab5ef6be5582917f31ced9a078","sha512":"e8472c1d7935eaddf913fe535cfe8c4fea1fd1a83bb28f1fda418ed2a49fde5744849937a8b718e1ee58495e311f78a0c82b8a2ba66ab01bc03c963cc0da2e37","ssdeep":"","tlshash":"87519009c0b60ee5c02ff12b260d81a1a6768bcb54a93d4d3e4c846f4fad25a15773bf","first_seen":"2025-06-03T02:47:41.879394Z","last_seen":"2025-12-13T01:07:19.811499Z","times_seen":3,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img11.360buyimg.com/img/jfs/t1/146223/15/6271/1286725/5f414686E87cbecac/9a0ff3b13767b3ab.jpg","fqdn":"img11.360buyimg.com","domain":"360buyimg.com","tld":"com"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:51.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jd.com","organization":"BEIJING JINGDONG SHANGKE INFORMATION TECHNOLOGY CO., LTD."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 24 Nov 2025 03:41:51 GMT","end":"Sun, 20 Dec 2026 04:28:34 GMT"},"fingerprint":{"sha1":"D5:2E:D2:A8:11:5F:6F:C4:C3:C8:BF:5E:5B:FA:9E:C4:E2:FD:28:11","sha256":"8E:56:41:84:20:7C:A7:85:64:FE:22:CD:53:D0:93:97:02:31:DA:D9:77:39:DE:C9:E7:DE:52:80:51:43:C7:E5"}}},"request":{"raw":"GET /img/jfs/t1/146223/15/6271/1286725/5f414686E87cbecac/9a0ff3b13767b3ab.jpg HTTP/1.1\r\nHost: img11.360buyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Dec 2025 01:06:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 514965\r\nexpires: Fri, 02 Jan 2026 19:00:51 GMT\r\nserver: nginx\r\ncache-control: max-age=7789049\r\nlast-modified: Sat, 22 Aug 2020 16:23:34 GMT\r\nvia: http/1.1 ORI-CLOUD-GD-MIX-176 (jcs [cMsSfW]), http/1.1 GDdongguan-CT-01-MIX-202 (jcs [cMsSfW])\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-trace: 200-1759591402142-0-0-17-184-184;200;200-1759591402125-0-0-0-244-244;200-1759591402115-0-0-0-332-332\r\nage: 5996610\r\nx-via: 1.1 kf230:0 (Cdn Cache Server V2.0), 1.1 PSrdsdgemSTO1sw92:1 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 693cbc2c_PSrdsdgemSTO1sw92_14277-59120\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514965,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x932, components 3","md5":"10002866b90b5b219ff15302c741ebcf","sha1":"620f6a341cd0a1b2820304b61b849d33dff9f149","sha256":"8687241489f997b433cbc4ca056f90df3c6eefcf16157cf25a93ca672a775d66","sha512":"d45fe095de08582bfbe76e07180f74f631e3a42cb71dc2beb6b73c510eb29fac6e30960857186ce778e7fcd9b1ed63aeea25480ad3314200dd3d384d4bd16572","ssdeep":"12288:GHyjUv4kMWR3dEcwc9sdjdT1STnmFSKB5ysTuO:foM4tDwTdZSTwz2O","tlshash":"e3b4237ec6a958a0f773a7fd6cc40b2fd945efc0707f64aea5a828843211b506a4725c","first_seen":"2025-12-03T02:27:55.125277Z","last_seen":"2025-12-13T01:07:19.812609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1970,"timings":{"blocked":937,"dns":702,"connect":8,"send":0,"wait":36,"receive":53,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/fonts/fontawesome-webfont.woff?v=4.2.0","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://acgcbk45.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 65452\r\nlast-modified: Tue, 15 May 2018 08:36:58 GMT\r\netag: \"5afa9c2a-ffac\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncache-control: max-age=16070400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpw9h8JMFfpE87xmFDY%2BjspJoe8hIq%2FM0z7UH2OAowNNBwqqUhQTisxJRYK%2BGaRUysBG5nAb9wBOgAUAJIvIohmRC4y59oKhahHL6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9ad18fa51ee7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65452,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 65452, version 1.0","md5":"d95d6f5d5ab7cfefd09651800b69bd54","sha1":"7d65e0227d0d7cdc1718119cd2a7dce0638f151c","sha256":"199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1","sha512":"e96012d2fcd5df03c2f7385c9ee2a2932b3909659d59e32bf3155e102eaf9eb7b4b00c5806c892ace1b8f4bdb58630fb20868ad368c771bd8d2aad7749b7a399","ssdeep":"1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan","tlshash":"4f53023b2a717a74b8f5cda4af04f33229dbfe99f8840472d52a1b5a84671185b04b19","first_seen":"2023-04-06T01:39:02Z","last_seen":"2026-04-03T22:45:39.530407Z","times_seen":10789,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dtest/waifu.css","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dtest/waifu.css HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c73586-1349\"\r\nexpires: Sat, 13 Dec 2025 13:06:51 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8%2BpGXhuRHI6eEYlFUWJR2zaVHK8c20v7TcH53ymjFGbJZvBEwypKlLQyTxMIaMbXFEh8L2abxzUbSf%2F%2FpQ6ZynAczEkIDQ5OIMG9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fab9f84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6c95aef3daffa5cdb0b4429ec2f6076d","sha1":"20500dafb16ecb0c18e760aaadac07b023baa15a","sha256":"9610bbc4db6f94e7c35f7f8112635a6f66996b69f59bcdca9eafcf1289f3e192","sha512":"ac8de379f6e5c2564da5558df0d8d9855ab196ec07953b66ef951b4d340bcc37b90b5bed1c954e749140677f87aaafe096b50866c8b5256cb96e5fca22297d17","ssdeep":"96:uf0LwX+d++vSMG7pw70HI/I3jNmzZN0viVS70tGqDQURQBfzjqoh6:ufkM+w+6MaFo/I3626","tlshash":"eca1cd16ffe85044a7340e11cfea47a84a3db1629c6b0eaff385605fd49629d224df89","first_seen":"2023-09-09T23:32:03Z","last_seen":"2026-03-24T07:50:37.391393Z","times_seen":21,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath7.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath7.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 6915\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-1b03\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFHoCRK0FjRCIpUr3ACyTBejL9CbJ4jyepbsS%2B0s4j40f%2BnEBwey3ebC5j3JOM5MknM3BRJ5hXzw%2FOD6chDtEb%2BMwD6mZaHD9WWx0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138ef783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6915,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (912), with CRLF, CR line terminators","md5":"afd0bc4a0e03addcb64d506b33c37817","sha1":"cbab9298b360f3548e2365813ec0ed95ab111135","sha256":"d1e085251638dd94c1d9b102ba650200f664b90b7a7d65b06e66fd0bc8b249a9","sha512":"a8c703b8829f55804e9dfe7e71085c36f013eda398f59d48485d0090f57fc11a59af3a2649abf4df00439bf9764cf1e7191ae1b27ec632724f5ecab547a5c545","ssdeep":"96:fOcrGNNpYVqC+G2GrXIh2iuAUMvmed1bzw0+UShyq2S30gnJjCot/AxsYQW/KjWM:fOU+gIhHoJe7ahVJ30gRAhyjWax","tlshash":"4ce12a7a93e8b798a5882374f6ae05e6f7d1d45731a8bcccc727a801dc81df72134a49","first_seen":"2025-05-06T02:24:55.237911Z","last_seen":"2026-03-24T07:50:37.513479Z","times_seen":22,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/live2dapitest/model/Potion-Maker/Pio/motions/Breath8.mtn","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:54.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /live2dapitest/model/Potion-Maker/Pio/motions/Breath8.mtn HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nCookie: tt_ref=; cf_clearance=Kr.4qiZEC4G83LgC3OWF9rQV3Sf9ulD6EHU6g0f1YUA-1765588011-1.2.1.1-Xoa9OzYPKyNh0oJmIlbJMTmOCSn.h5MdffKEjN_tLsreST_Kcmp15Kp580CiBEoJdMOLe06c4uu.m4ALb8NK5803lkLuNthC9lPxmM2HmOT4mI3Qh93sl1AsBzTMYuHQO.7vN1yIDBdIFEzxBnGkIJi.kv4pAXwte3x.KMrilvkhHczLMJrbIxhCJpbFkV7IK04he8rCLTSS1OM1F9EmJMDFPPeBoeDexG28IfdUL9M\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 8463\r\nlast-modified: Sun, 14 Sep 2025 21:37:10 GMT\r\netag: \"68c73586-210f\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgbCCFIHI4q52%2BZ89hOViWjp%2FbZ42g4eUQSwJObQq3Ygvk8mb0jPGvBUIxluOymrn%2B65gk8RridJVgNqzYtoOrkEJoi4Yw2qpch4fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ad18fc138f0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8463,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (766), with CRLF, CR line terminators","md5":"ced37c0caffe4b4d999b45b5e9447a25","sha1":"366b357fb26bcc39ed3f6d397f280d0e6381be0c","sha256":"926d5bec75c45ffd6e5f07ab683b7d75a7b6430f8ab9bf14d7e105ca2ebbb5f1","sha512":"a7194594bac240ea8d0a8571d0caf3723ebe69f41e307aedc57032e1bf6c19dfc9e92586775ea4c25e322438d25074c4d3aff9aa00df2f1e3a23835f3ec2ccc9","ssdeep":"192:2n1P0VHdho4adDt0jfQqSaSmvWOAdxI69z+qx:G1P0VXxuDtK7AnI+z3","tlshash":"f402f37a93d867a865483778f26e16c2b3e1d41730a8bdccd71afc41dc09ea32124e75","first_seen":"2025-05-06T02:24:55.260792Z","last_seen":"2026-03-24T07:50:37.407406Z","times_seen":22,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-content/themes/Acgbuster/assets/js/emoji.list.js?ver=3Sjks","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-content/themes/Acgbuster/assets/js/emoji.list.js?ver=3Sjks HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Jul 2025 20:41:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688a837e-2f74\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wGL7hJU148YSyTcNkiQ55XaZHJOlgSfcHKxmzQj5MyE3rcRojuO%2FuBFETm6wxNKqUcRXJjXKI0sV3VnrALSpReeyN0iPKTaGLf1AcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ad18fa51ee8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12148,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"496c4eb81abeb4ae4ba4a0c0b3a6ea13","sha1":"9ed0b941edae87dcc82fcda4eaa7b3057a6662f4","sha256":"8436cc1bf40dae390111f55be1cd3886c00c00a3563688f0188cf92a94d833e3","sha512":"d52d91d129072fe4c6ee90d69b141efb46c0bd1a934ee84a767d3c97d10cf45539d08391478121bfd87ff7e1beb7ba6aa9498ac7ec36ad99388d5d514a80414a","ssdeep":"96:PjkFdd/DY0kqOeZRyS78AD5f8oLMcvV5N3C5j3gFY4Lh56SIAxxljOrmYEc+TLdd:PYqte3NLRIKlFl6ZSQ7cXxd4m","tlshash":"c142a4a9e226efa79d5d12592b1d36a400609587cf4df09a3b1f03ac1f2d81f5a760cf","first_seen":"2025-06-03T02:47:41.826966Z","last_seen":"2025-12-13T01:07:19.817335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acgcbk45.vip/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.2","fqdn":"acgcbk45.vip","domain":"acgcbk45.vip","tld":"vip"},"ip":{"addr":"104.21.69.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acgcbk45.vip/","date":"2025-12-13T01:06:49.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acgcbk45.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 21:40:11 GMT","end":"Wed, 11 Feb 2026 22:36:51 GMT"},"fingerprint":{"sha1":"D2:B6:32:60:C0:46:4C:9C:9A:FA:61:38:84:7C:A3:D9:24:04:5F:42","sha256":"48:31:28:E7:B5:47:A2:E6:E5:AD:E5:C9:70:7F:76:30:29:4E:FF:6B:0E:C9:53:7C:F0:41:50:85:76:2F:AD:8F"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.8.2 HTTP/1.1\r\nHost: acgcbk45.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acgcbk45.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Dec 2025 01:06:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a4f0fe-4a7\"\r\nexpires: Sat, 13 Dec 2025 13:06:50 GMT\r\ncache-control: max-age=16070400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMCSyd0xoXXEIcFYrs2TVhxAb4JiI4FjOQW2Y5%2Fw342cutx2DqaHtmJEumk%2BMYX%2BVMu6EPHw35Ag3jJl%2BD4SAacj%2Fr1Hq1v9Ac09UQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ad18fa57efb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-04T01:31:11.442553Z","times_seen":40616,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-13","alert":"Sinkholed","trigger":"acgcbk45.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}