{"report_id":"48a40155-257a-4308-9a5b-95858e92bd50","version":6,"status":"done","tags":[],"date":"2025-12-07T12:26:48Z","url":{"schema":"http","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"title":"Hentai Manga Online Mới Nhất | 2tenCB","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-11T12:26:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"2tencb.top","ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":63,"request_count":63,"received_data":2256092,"sent_data":29919,"comment":"","tags":null,"fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:9","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"Yoast SEO Premium:26.2","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"cdn.hentaicube.xyz","ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-05-24T02:58:44.176934Z","last_seen":"2025-05-24T02:58:44.176935Z","alert_count":0,"request_count":8,"received_data":1631379,"sent_data":3528,"comment":"","tags":null,"fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2025-12-01T00:53:49.560722Z","alert_count":0,"request_count":2,"received_data":6806,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bundlemoviepumice.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":164435,"first_seen":"2025-03-20T06:33:53.20603Z","last_seen":"2025-11-29T11:51:24.847469Z","alert_count":0,"request_count":4,"received_data":162374,"sent_data":2922,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2tencb.top/wp-manga-login-ajax-js-extra","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebfa8dc39192b3939db4074a09dd4b41","sha1":"20561cbe1d75af7b9492f65e1c433160ab8cd472","sha256":"8bd1870b3c8500c1ebf5f970ef5cd18366db3540db9e24b2d2b0285d68c45744","sha512":"84cd737b3b9ea5b513612186aa519c93423f5bb40c2adeb7e093926067448e9cf98e8d4e6f2dd1ffc518e07a4265bbbc2943443198cb958681aca40612d7416c","ssdeep":"","tlshash":"4a51cc2dc2260d436667cab470022213a9c3e842c9724e050278ee0e33aedf77ec224f","size":2450,"data":"","first_seen":"2025-12-07T12:26:59.264909Z","last_seen":"2025-12-07T12:26:59.264909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/menu.min.js?ver=284953f0e0a5","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","size":10199,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-05-02T15:07:01.840555Z","times_seen":14966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/shuffle.min.js?ver=944b9d1ad68d","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"944b9d1ad68ddaa1f6207e08f6c9f962","sha1":"0487b56e38761046b11eab85e706758bfea112c2","sha256":"6def1bda699ef5e604dde98b184bb397b4b13483b2866ef5fb52fe3af531310b","sha512":"676a3dc65b3d851423b735341bca93c5a8fd732560ab0fdbda8719dd7f4b6c5fce8979dbc91ec4fdde7e625f2649eba5356efbc3dbd7ab98615076abcda70a2b","ssdeep":"192:++B/5MOxjchawVCujHqE1bvzf8DY3SfJIIEiDwIn3Mf9lnKtC/Q8/oAIvQyM/u3I:+ShMKyvmob7zCByBIn6xhHwAIMBv","tlshash":"099295997241762189c7b17554bf020eb23aa92476c6c08cf036dde66d78c8eb473f78","size":20725,"data":"","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T07:33:21.968036Z","times_seen":1344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/dom-ready.min.js?ver=e4bc17cc45ca","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-05-02T16:31:34.55939Z","times_seen":92594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5b40354e3808cc145ccb4d2fae41198","sha1":"05243e0b789bc8150d79a1cd9adde709c46e51b1","sha256":"4927b766324b2b02ece05e32be5cf5b4765b8f70e305a07440eceaed4bcf1e4b","sha512":"6eea243d806b105d40d55903398e47fbfbf6688e07cb2250f620c6f57ccdb76e8e4a0b1155aa270a00ebf796189c35e4cc3f648e2aceb4617cf6910f09803d26","ssdeep":"","tlshash":"c621001e142859f6dbe569e4481426ea5cee017fa1fc0e04c9f8cd9c039d4f79b5c15b","size":1237,"data":"","first_seen":"2025-12-07T12:26:59.266911Z","last_seen":"2025-12-07T12:26:59.266911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/28eb96f883aa.script.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c09cb02173d65203d6c3d7a2d5f64446","sha1":"6d4bbce53bdf8be1e535ff805018d5a77dcd617f","sha256":"23e2c3eba16236b50bb6923a4abac93b4290845d1b8991133bd19ba48e7b6d9e","sha512":"3c3c3d6a06aa38b1350d65a1402b96be7083713db94e270605aa696e692ad4403eb6a1c6a687134e2a6bff632b5ae2c17fe5278d0e06d4658bae0fcbdf92b3c2","ssdeep":"384:OjEk7yTSau4VbyiKafnLA1qgk1yhTrBowvq8/ZTfsDSf+rYybyDbwc6jDb0++hEt:MEk7yTTtV3KafLA1q/1yhBXvqmfsDSfk","tlshash":"7ca2c72cf01160b946bf217ea89f1a01b56359728704cb50e3b9822c8efd94562bff5f","size":23347,"data":"","first_seen":"2024-09-19T19:45:35.464811Z","last_seen":"2025-12-07T12:26:59.072668Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/jquery-migrate.min.js?ver=9ffeb32e2d9e","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-02T16:30:59.901247Z","times_seen":715715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3d267f11e3508b1fe4ad228a85760d4","sha1":"4a865d36275b86892f048aeed3ad325a6cc739eb","sha256":"649885a0ff8c2a1f15ac9870e19c9950d7c0eca0c3ec1b97192279078c8f3b01","sha512":"95b570a6f2eb7ba2cb41f288f0a42c912d34b06772e20cd893d69752bf8e6d58158bcd925adf0718bac2495c3064f7d12fa5023755e31503522f47cfeb892538","ssdeep":"","tlshash":"f74113c2f36d256b493130110c8f7acca6bd9132ed044d6ab9a83065b5dbc3d22b4bad","size":2193,"data":"","first_seen":"2023-03-07T12:05:51Z","last_seen":"2026-05-02T07:33:21.983276Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/get/1895656?id=1895656\u0026jp=_claoxzbfvbfguoefhetzcg\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.643-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=g5SQL7zCKfrV\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=mXfTt95aHR0cHM6Ly8ydGVuY2IudG9wLw\u0026afid=2930428041413120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1727\u0026rlp=%5B0%2C47%2C111%2C74%2C259%2C12691%2C9057%2C12066%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bdb71575283311b83545a929205bc3f","sha1":"ed1e3ed0ae077d73f805d4c1bf0bce7e57b85b1f","sha256":"f5a26074073898c78771ed3ea220a3753a219be3af8138db42c486cfb88226d3","sha512":"fd17b3a84064ba4551fb86ce09cf8c4f4a00852fcbc3bda33949efedc49e2c132d1023f92fbf0ce29f07a576291cc3ec6d26b9a9a811fdcc8692bd7c875a4dae","ssdeep":"","tlshash":"ea6152d8f00ae084877525784dbc4d3bae6c2bb81d5a5b5414d9dfaf50cc37ca713689","size":3241,"data":"","first_seen":"2025-12-07T12:26:59.259983Z","last_seen":"2025-12-07T12:26:59.259983Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/slick/slick.min.js?ver=22f754161489","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","size":43881,"data":"","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T14:56:08.820454Z","times_seen":20019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/madara-js-js-extra","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebb07bc62719821c6271b3ef689ffaa","sha1":"122e1f906fe090d6ee34301a1f5a9fdf84245dde","sha256":"8c82ce6d7e425a1e7bea0899ee4c09f6fc1dbf3b9a66d5170496b578c9a10f93","sha512":"f1d47be0f19ebca2ff33219bb83c3bfd5ca1a9ec6ccc9abea061dca2260c03ca713175114bfb59b3eddffcd228711b2a318abfbf345cf4014c13b53fdc0c225d","ssdeep":"","tlshash":"5a21fb1ec42818f6dba529f4481426aa5cee013fe1ec0e04c9b8cd9c03894f78b4811a","size":1401,"data":"","first_seen":"2025-12-07T12:26:59.269565Z","last_seen":"2025-12-07T12:26:59.269565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/jquery.min.js?ver=826eb77e86b0","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-02T16:30:59.679913Z","times_seen":772221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da8e76a56c16a7355a50a7f801ddb1a3","sha1":"2553cf02c0f8056b638df476dcd2e9c137f07815","sha256":"7cb4235e8541bf8844586f8e18858769833396cab5e3d41a0bc42080b4ef0f7d","sha512":"f7632050f5b1390dd8f1968edcb8e79723b9c602840f5c8cfeae2b6195f82c661b4be0ebff3353f6761af3fc6ff89a2c5f9851f2e498b5f29ce03b2d6c9be565","ssdeep":"","tlshash":"ac21ee1e143c59b5dba557a048051a866ce9007f66fc0e48f6fcce9c47858bb0b5905a","size":1276,"data":"","first_seen":"2025-12-07T12:26:59.273068Z","last_seen":"2025-12-07T12:26:59.273068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"538c3fabf064b2fa422ae44f6bbc1ddc","sha1":"aa1750683f887c9d86389b4662e75b93a89050d5","sha256":"37240caa948d9d4050c75cc3765b1795bab67b268deba802c3578cb5c7590a49","sha512":"88acba977ba1c4c4cb5bc86777f753a8036f254c54919f9743195de0b3da0505c844e37bd19747c6a6e9f4fe62a6fda0890a1be12ee5d0097e6cd2f9f42efc65","ssdeep":"","tlshash":"6851213677a231390323f1f65a87b04865b3d16b64ded9457a0e030d1fc5a9885f27ed","size":2615,"data":"","first_seen":"2025-12-07T12:26:59.274462Z","last_seen":"2025-12-07T12:26:59.274462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0915485d0e11fa487c65a1be08da053","sha1":"33d78fdccd1970b9c6b38483d9b6e8cd5c975c1c","sha256":"375d35b7924035b8b4428d0a24126e9e1dab5a4928fa85672a5c8d34a286bdbb","sha512":"7b9dcccb1006f3272eba6a97b201d89e21b821864f3de1c707e335610ff6c905d7721a885e4dfc48fd0873a78f026af86ad2738bb202ead02b7a172a4c024158","ssdeep":"192:t07XDMJQIo3NTkI+Lz5NVFm4xd1Y6lwIHMxSsCGIf+8ak9cRSksr6aBvWDGh:tfJQIoZ6pNVFmiee7sxqGI3alRSkU6ZO","tlshash":"ec0209b22152993d83a24dedc23d7d78f47a5a00304ac984f0dddda33c66a06d6b2d7e","size":8621,"data":"","first_seen":"2025-12-07T12:26:59.275824Z","last_seen":"2025-12-07T12:26:59.275824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/ajax.js?ver=ec76c60e3179","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec76c60e3179ea4c356b0f5b5fb3973c","sha1":"a9e8aaa95663241d395fbfaadbbb91413e1a035c","sha256":"3eb88534fc5575b986a134b5d7e1be167c0163b795d5101fd451347b977ff683","sha512":"00a1b6f8a01207c56e33ac205bccc756f9c0f8cc24ac7f899710cc63fb12455642dc791e2000ef94bdf784d8aa457eb480c7fb7a63e391c5191224ea2df3ddeb","ssdeep":"","tlshash":"8b41bdf8636c42dec1763025fc3e62a7193ed5327f012e5ebe8c9118a7d0468d2b5a59","size":2173,"data":"","first_seen":"2023-10-13T04:39:00Z","last_seen":"2026-05-02T07:33:21.956267Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-a11y-js-translations","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ce4b197400547ab90e17539b981d1e","sha1":"6530e8f856c26af67d41c53508af20e0dc0f6c00","sha256":"36874a820acac7d0057aa71609d0c787ccc36cee05f4adacea58a476d74995fc","sha512":"ac7ddadac98b7d7e2109eb632dc046baef355b234a3c1a99273c57a31f3d493105991dbf87925a7884f459b96825a133d5fb022d37e6772cef9d9227fb09525c","ssdeep":"","tlshash":"5d41d388fcb49a1540d253f97b567549b06df915c2bf6c06720f45051e21a2d96f360e","size":2238,"data":"","first_seen":"2025-12-07T12:26:59.279373Z","last_seen":"2025-12-07T12:26:59.279373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/17f97ced7aa9.ct-shortcodes.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c76c479d0fe54a7425a5af3d9ddd397","sha1":"217eb2b572ddb8dc491e25d2edb2db5366bf92ff","sha256":"3d493a80e842282dfa36c5ad9bdc4ddb64e5410175262ada21b39ad1315ca40d","sha512":"5fcfa998b56511223d99407b0de026e89aa5d8c5605e229c661ee5cfdc3845eca787855971ca890d3110fe93c3f9080099506251f74c916e4b093b61277ec383","ssdeep":"192:daMHgjWGjWc1jWiQ39avqOYXLmSEq5ATYpbVEQPv0+8P:cMHgjWGjWc1jWiQNaCYSV5EMbVFPv4","tlshash":"78f1865bf701102688bb6facda9f90149317b8324357998dd2e5c051d7a4e1e3a3abf8","size":8044,"data":"","first_seen":"2023-03-07T12:08:53Z","last_seen":"2026-04-20T20:18:28.842296Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/core.js?ver=cb3d0e1d2628","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb3d0e1d26283bad64c342f084beef12","sha1":"8ef0c3433bb5cde43dd6088c53959285c66e902a","sha256":"c7be8ac3019bc2698950c8cbff2453fffb7b6f7ea7757267f2ef15522b306a8e","sha512":"5ebb9f6d529de7e99c4df6c05983edb9cc7c0b0ba6e3ecd2aff31c03675c70d3290a4cf5630ad2551bc56b8006ad40db42e0e2aa4443970f185accd30ca14e71","ssdeep":"","tlshash":"0bf05980e7ec354610333ca5baa960ce509cc1bac80344276eb04a4b54d603ea7939ad","size":538,"data":"","first_seen":"2023-03-07T12:03:34Z","last_seen":"2026-05-02T14:56:08.777061Z","times_seen":891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/imagesloaded.min.js?ver=6823120876c9","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-05-02T16:27:37.594982Z","times_seen":163336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d11157674da203e8fb0b0dd4243bf3df","sha1":"c064db8ae5754cdd8d56a8538c71d6a2221e5fdb","sha256":"ff43daf9ddddd2a911b2cb9c173b558b4031d5e3b8bc6a506c0e9a06929c358a","sha512":"96c3affcb1bf8db4cc5d9055cdab7917ca08bfecff6ae6289c5749db45ce10ab711101ee035f93172e53bd7aa6d745c34c2c99e7287ad3393863e4b343332dfe","ssdeep":"","tlshash":"19f0867d352311a25e7b94969a57a4c0e45d7433b91e9c007a1d95050f75dc04dd5885","size":588,"data":"","first_seen":"2023-10-17T07:54:49Z","last_seen":"2026-05-02T07:33:21.992338Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-i18n-js-after","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe09df20dd6412d8cfb470a1d5b38ae","sha1":"baf09c71aebeb8414a7742afbcd7499e0cecbf55","sha256":"ac5f06e16b372dc8edecaae3f3293f517bc726fdb7db8c6f967bc42a2c20a9a4","sha512":"19b076a880ba409abf86132ad507cfe6c3bf7774891adb38341745f5181710ccb4bd10a49515823e11dafee7560b8a6480aeeef26012a5975ccdc01e65668832","ssdeep":"","tlshash":"30312b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":1753,"data":"","first_seen":"2025-12-07T12:26:59.281303Z","last_seen":"2026-04-27T04:56:20.852506Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/i18n.min.js?ver=3a5838d1182e","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-05-02T16:31:34.613515Z","times_seen":146698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-manga-js-extra","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2598b5efd778818b7315e1d59cc94bda","sha1":"9f952af5913f8f2d420034582ddf03afe5cac772","sha256":"97189bfe8204a36f14a237fa807f02ec5bee5289584ea80c9e20c5f3ef5dcfbb","sha512":"47a09340ad67649b0ee174e747f7df12392f293f390b5f63307cbcc1e18f54f4b8402e2697346dfb55bc41932cb886b0bab47f587b27ea18bcd73dee48a447c1","ssdeep":"","tlshash":"20412bbbc5cc198a17ad4af0302828b74457a925d4149f00531994d4072a5d0d25408f","size":1891,"data":"","first_seen":"2025-12-07T12:26:59.284999Z","last_seen":"2025-12-07T12:26:59.284999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/a11y.min.js?ver=fc6bf7359b5d","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","size":2212,"data":"","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-05-02T15:32:02.344618Z","times_seen":26410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/9e197ae1b39c.template.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e0d73497d9953ad1e22a2e0e2dd5d5","sha1":"cda10fce376976435e87454502f82d4dcd37d08d","sha256":"a2d99684d7bcd387977dc3fbcc2133e6904cd37e8271441949f9fd3b2da3e60f","sha512":"5a27a6ae7802fccc0eb8f94f543f768115dec6e071b664707779fcd2df436c707f98d034fad7c8b4cdbe54ac88599a15541bbf60b0a20e0dc893c2c8b40950ac","ssdeep":"384:UK4avwmV7oSHAHqO/Ra9BEXLZQtHpryCCI:UK4avwW7PHAHqO/Ra9BEXLaVyCh","tlshash":"c782b70bb610b56b04ff1636e02bba4466775831c744caa1f7f140695e9984e32b3efe","size":18094,"data":"","first_seen":"2024-12-02T03:02:21.838399Z","last_seen":"2025-12-07T12:26:59.055891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba4cf94eb79c2def8d7a52bf32c3aba1","sha1":"adf28ab5a17dccf416273269de9c8c9ff876ab34","sha256":"5529b9e06ab1aea9496af54d7c20fb810624f8dcb9155ab7a477744a1e335dcb","sha512":"c5aa3c01a84c131c52c71ec893f4cae7f590f497323e21c9299e003f5478a61bce9aeedff0c28b2196d88df54a138c2d8f6c81aca1c5b7cd0a5174131a390d95","ssdeep":"","tlshash":"768000222202000a822880000b2be203b820e88830322088e200020aa088b2b820e283","size":29,"data":"","first_seen":"2025-12-07T12:26:59.286208Z","last_seen":"2025-12-07T12:26:59.286208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/on.js","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f74dbac0e50c726185d6f449a54ce2c4","sha1":"41e095ce6c4904bf5dda14dcfa12151912e44f95","sha256":"da59a31e8291e917e574e9f500af90b32854fdb893b353b9b00d1785aa877493","sha512":"e45a8b2ed8aec880620ef6b7c1e6fdaa17157995e5481355441ef34e36b78d70bdb7e97e91d3ba8f6229532a6710dcced8c55f868c9c156c7cf84940511c5712","ssdeep":"1536:QD0pfV4Llg169i1t+gSZTpk+iATtWqsNvKHRV1Hbsuf+yDTQ3OjLZVFfc3WrT9tq:QD0P4LKeKzSlpwAIqsNvKJ7fZD5fc3pd","tlshash":"24e3978d758dad32c247d869092f6f05b7ba5cefa04f408681fee1845c7e90ad321f69","size":154660,"data":"","first_seen":"2025-12-01T13:24:57.412509Z","last_seen":"2025-12-08T07:37:45.104809Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/d2908744248c.login.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"745f204602cca45b6e3105994f71dc65","sha1":"6b36e4d8dfad7dbf710935e3c24787e820edb0bf","sha256":"ea6c077b0723185003689c33b7df81e63494bf13a8a76d3283194e738a07132a","sha512":"2e691fb137848e7fbc7fcd6dbb44eb2066e41ff75a99a1bb3077471f7ee923fb708953cceca657911e3584af6a030f579288f9391a96378ac62cd9fc994db031","ssdeep":"192:71UtO7G7/dlKiBEG+RpSz1GwolBU7dan6TjpocVUxj:Eka9Rxn7Uxj","tlshash":"11e15078353d548f0bbb196730fb3901b262a4325a44de47e2b154a8aff9e166073f0d","size":6922,"data":"","first_seen":"2024-04-26T10:44:14Z","last_seen":"2025-12-07T12:26:58.999846Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/plugins/madara-core/assets/slick/slick.min.js?ver=22f754161489","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","size":43881,"data":"","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T14:56:08.820454Z","times_seen":20019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"15ce03ebd54e0307d12914c3f46025c2","sha1":"580ae1a3376b39a41adfc51d0e7d1bb9d3f55d42","sha256":"3f31d0a1a85ea1fa74a5d878a8cbadd73930bfed5e1b4f7cf275e95269baddb8","sha512":"fce10d4cc29b3f01faf721691c615189f124d76dff7181f12ac0d9769765033f80f809cbcf794706ea67bb5985e4407266e8e80df975427730730c1225fb6930","ssdeep":"","tlshash":"db50003c000000000000c000000030000c000000000000000003000000000303000300","size":9,"data":"","first_seen":"2025-12-07T12:26:59.287491Z","last_seen":"2025-12-07T12:26:59.287491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/hooks.min.js?ver=90e932bd9e62","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-05-02T16:31:34.603192Z","times_seen":148574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/autocomplete.min.js?ver=6a53e18a345b","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","size":8536,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-05-02T15:07:01.880194Z","times_seen":13694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/aos.js?ver=7ee92212a3ec","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee92212a3ecbc19d9d71fa3818508af","sha1":"72926c9223dcb292f641dadbfc4fc7bd27d4cd8c","sha256":"4fc3dc353e44ae364d1dc0ebf2b40e1118ca7b7c45c43b02844b6d57fe458bda","sha512":"500c1332f4180346f76f415e632b53f9357fdb2ae1f4b022f0b5bd9b13ff1f7060c7415b887324ee1968a0b0f14e99b58fe98a4574b75e170bbbd227996a71b5","ssdeep":"384:3PXfNaS8QzGOFEUqF5ZDUbpva23GSeIf+y56:/XfNaS8QzGeEU05ZDU9C6GSeIf+y56","tlshash":"e84209ec3144f0a717e7d1bb816fa10ef5f18838689d9051d258d4d23eb4cae86a3e5e","size":12446,"data":"","first_seen":"2023-03-07T01:23:37Z","last_seen":"2026-05-02T14:56:08.750346Z","times_seen":1937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/core.min.js?ver=da215ae12b95","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-05-02T16:31:34.612669Z","times_seen":251940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/child/assets/js/child.js?ver=8893e46f1d53","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8893e46f1d53fe46aa15be1e6f11282c","sha1":"7f6d2deac5e8c6cd5d2dc14db4a4eacf213628aa","sha256":"f1fedc8b7f94342268412ef4100e48e58acf2dbe41369102ac04433d446854a1","sha512":"33cd065adb5fcd1cf232c3a948651590e16bcb0eb900360dd3104d441d9615cfb5fe45a274b55f1b55d3687410cbc1277b6f4fcd6e08b3db866ce572eebabace","ssdeep":"","tlshash":"336143345b6c74398c7a160c8c2fbcc2a7af90318e01bb25761e64515fa8c1d1569de9","size":3208,"data":"","first_seen":"2025-12-07T12:26:59.027686Z","last_seen":"2025-12-07T12:26:59.027686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c8eb930ab4fb8aa08c26508383829c18","sha1":"3c9b6ca21390adaabd4b6a56adf1ec5c354e7409","sha256":"6468c132e3049c4d75893a63241a09dc73aa198f213d8a03fd66231b4fdf5463","sha512":"d858626d12c7373b5f7b37494e83dc6a6767f1c7e49103ff35270f9845044009430b5c544422d30eee28c69c85cee386135120f0a688f897dfbe92ff2448f83b","ssdeep":"","tlshash":"3b9002590524c0451601df00902285525081541f0194934cf8126cd154bc444444bd61","size":56,"data":"","first_seen":"2023-04-12T05:19:10Z","last_seen":"2026-05-01T09:57:03.644645Z","times_seen":4494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/plugins/perfmatters/js/analytics-minimal-v4.js?ver=ca272d8b4096","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca272d8b40967105fb697a83138bd811","sha1":"7e99eb7866d0ecbe94e74aff075566df844fede1","sha256":"33e34b6da946e95f38240816f55dd8e6adc7c6f76d48bb7375394aa280ddf083","sha512":"429df9f1151dbcdca575105ca144e5eca60552ceba90dc921ff98b64d40c8b328aa271c1e5230831eaa74f47af12170b2be9948e3de047f0ae05c109109d67a6","ssdeep":"","tlshash":"ab51a91e970a57f746c483c6e4672136d2253075b6818c42766edd653424bf923e3f3d","size":3009,"data":"","first_seen":"2023-11-25T16:58:09Z","last_seen":"2026-05-01T23:15:58.183957Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/bootstrap.min.js?ver=f0c2bcf5ef0c","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63467,"data":"","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-05-02T09:57:03.799983Z","times_seen":9868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/core.min.js?ver=da215ae12b95","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=da215ae12b95 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 15 Apr 2025 21:54:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fed59e-53d8\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4CQlhUh6LNPphXdHeGMyVV3zwAyWkCUciNA71JWyosw%2FqgdV2Ahjctc%2BFOCXUFP%2FougPPs2ah7A0YrbhWwnF8NFacOezzyTVtw%3D\"}]}\r\ncf-ray: 9aa402e51d9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-05-02T16:31:34.612669Z","times_seen":251940,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/dom-ready.min.js?ver=e4bc17cc45ca","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=e4bc17cc45ca HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWCVtTg59X0TKcTUnByU070N90S1WNeT%2FWOFH7%2FE4atAeDO2CdU4GLCqlWGHATa2qIiOcU0b8XQ5xgdZsM6ETD8aCOtxJplwEO8%3D\"}]}\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"67d09bf0-1c9\"\r\ncf-ray: 9aa402e51d9d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-05-02T16:31:34.55939Z","times_seen":92594,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/17f97ced7aa9.ct-shortcodes.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/17f97ced7aa9.ct-shortcodes.js HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-1f6c\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eKwA6zaglvDei7vBHebnhl3bhE6m89fAxOkdDgh5w2e3Ew92EsJk6rfJIJE7RSNR32WO2I%2FR%2BaRlxTe3nSqsFm0kPSq5Dzo5zQ%3D\"}]}\r\ncf-ray: 9aa402e53dab3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1697)","md5":"3c76c479d0fe54a7425a5af3d9ddd397","sha1":"217eb2b572ddb8dc491e25d2edb2db5366bf92ff","sha256":"3d493a80e842282dfa36c5ad9bdc4ddb64e5410175262ada21b39ad1315ca40d","sha512":"5fcfa998b56511223d99407b0de026e89aa5d8c5605e229c661ee5cfdc3845eca787855971ca890d3110fe93c3f9080099506251f74c916e4b093b61277ec383","ssdeep":"192:daMHgjWGjWc1jWiQ39avqOYXLmSEq5ATYpbVEQPv0+8P:cMHgjWGjWc1jWiQNaCYSV5EMbVFPv4","tlshash":"78f1865bf701102688bb6facda9f90149317b8324357998dd2e5c051d7a4e1e3a3abf8","first_seen":"2023-03-07T12:08:53Z","last_seen":"2026-04-20T20:18:28.842296Z","times_seen":54,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/f38b2db10e01.slick.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/f38b2db10e01.slick.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpmPNpL75t1vm3z9Q67reo7yRc12UJ13kSiWGqlu5RqpKlp2I3vR%2Bty9Tm7ga33yCBXEq97A0vytfxZbuonB8VpAAibhhSpbifQ%3D\"}]}\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:21 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6929bac8-528\"\r\ncf-ray: 9aa402e5adb63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1320,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320), with no line terminators","md5":"09e19f5c6412902746177670838f525a","sha1":"da4547748fed2cebe1e3da4a787b086d5ef4cd3b","sha256":"5121ddad724d918a9ae215e7cb6153072e74e6bb64e4586266ba6af347351c90","sha512":"bc7c6c9c60b1fc8dbe7af90834df0138fe742a566c4481e80fbfe5bd2a29e785bc06e2918ee1d8f69422c019e9f3841fbba9fe8fa614c21d52668fb1803fe9bc","ssdeep":"","tlshash":"df218a190496115a4027e3025ed3ea9a38ebf1235c3607cdf740c305ce8faaa1ed25d7","first_seen":"2024-08-19T15:54:47.782755Z","last_seen":"2026-05-02T13:34:37.304345Z","times_seen":599,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/cuoc-song-voi-chi-gai-va-me-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cuoc-song-voi-chi-gai-va-me-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37838\r\nlast-modified: Fri, 05 Dec 2025 20:13:22 GMT\r\nvary: Accept-Encoding\r\netag: \"69333ce2-93ce\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nxbo8bApTzuZ4UgiyDi%2B%2BofkzuA0mzenafDZUxUsgy4RfYLJ3Ty2j2X%2BbCEqB2t7BONzjGDhxCvpbQC0tfAbZ%2BRpRA2IR86TN4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd883181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a0b950b627fac813d271003fb4d0606c","sha1":"6207b306ae9798cdf0cee2d47aa8c4e94dd2188c","sha256":"19b08c5abc935298312d6ad75f1bbcb765b21991b4a32991eede56b66ccc7dda","sha512":"01a45d734a7f31223256c9532309d86f0c619ad2ae66952d24046c150efc8e4b7e45ffbc22e8667aa7210cc9e46a875956f047c3449d63d4d0b9ade4ff71af63","ssdeep":"768:4d2pE2DuGmS3KTUSSMywa0GNhShYefmqd7OjNEEqiC0adku1GaJ0:4dgEuufOvS4wa7hSGud75EqBFqu1W","tlshash":"5f0302e156941a055eb4fba3f564129ec0685f17be2f63c90f6e072bdfe1295dc50c01","first_seen":"2025-12-07T12:26:58.997929Z","last_seen":"2025-12-07T12:26:58.997929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/d2908744248c.login.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/d2908744248c.login.js HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-1b0a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx3uRkEuQAoEt0r3mtUU8sN%2F2m2siVAXIkKgG542sC1CL5RpbOCOdpcb8A8zik4LkRFDQYJg1JkQ9UFXuapTa0S421ebQuAH61U%3D\"}]}\r\ncf-ray: 9aa402e50d983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6922,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1372)","md5":"745f204602cca45b6e3105994f71dc65","sha1":"6b36e4d8dfad7dbf710935e3c24787e820edb0bf","sha256":"ea6c077b0723185003689c33b7df81e63494bf13a8a76d3283194e738a07132a","sha512":"2e691fb137848e7fbc7fcd6dbb44eb2066e41ff75a99a1bb3077471f7ee923fb708953cceca657911e3584af6a030f579288f9391a96378ac62cd9fc994db031","ssdeep":"192:71UtO7G7/dlKiBEG+RpSz1GwolBU7dan6TjpocVUxj:Eka9Rxn7Uxj","tlshash":"11e15078353d548f0bbb196730fb3901b262a4325a44de47e2b154a8aff9e166073f0d","first_seen":"2024-04-26T10:44:14Z","last_seen":"2025-12-07T12:26:58.999846Z","times_seen":30,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/vs-ban-mb.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/vs-ban-mb.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 89114\r\nlast-modified: Thu, 13 Nov 2025 20:19:47 GMT\r\nvary: Accept-Encoding\r\netag: \"69163d63-15c1a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSsTgb%2FD0CT7zqEu%2FscmBKbQIuK6eBtKRcU8dXulBGzYTPqq939XBQqg6I04RRq0%2BRLiztWnC0vlQBNEta3AujykK%2FYIM0mP3hRvMp36SjA%3D\"}]}\r\ncf-ray: 9aa402e57d7956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89114,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 380 x 47","md5":"372e4f4ae012423c2c27521a110a97ca","sha1":"a11aab55f7e8147dd1e038eab9bd2ea075862201","sha256":"bc76007e778d40107e5e487ff5c946135d062a34e86ee01e7ad031f045771348","sha512":"3a5e1fe71cb3084cbd2a35144e3df827eaaba3daafa21d692ead3d7f0300a03e538ac950cbe044d70988e14f2d6306023b09007adfac5e74b39a8276e83dc34a","ssdeep":"1536:Q+9YKd2TWRTn+gVfkT/T0FNOU1uOyR5F+VqIMKal0qoUalJctgoHKetR4e:/GKEn0nOU1uOyqMY0g8DtR4e","tlshash":"7a930249c6e112f2de8d72f539fb62630fe2c694e0d6e1659a0c3da5a78c0b4d71e390","first_seen":"2025-12-07T12:26:59.01531Z","last_seen":"2025-12-07T12:26:59.01531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":86,"dns":48,"connect":1,"send":0,"wait":203,"receive":10,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/tai-nghe-thoi-mien-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/tai-nghe-thoi-mien-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29274\r\nlast-modified: Mon, 01 Dec 2025 10:30:13 GMT\r\nvary: Accept-Encoding\r\netag: \"692d6e35-725a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5GfGCzuE5ZwHe9iaRW04cXU7EW8ubGOmsXXaRivsj9zAFZ8OunDtmYauGUQokbV%2FkqcwByROvI5vI5un%2Bxjl7xwyLzL1JDS4fQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4cd833181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":29274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0c4d71cb38c47cdac190dfbcdaa6c44","sha1":"2d93ccbada07ca631a20c345d81f6d13f6db945b","sha256":"97628bf0e0e2d69118b90c93fd2649ce793d45ae8ed176a3f9eb81245dccd1ca","sha512":"0e0e0438ae46a58dee0c1819a3163e69612bc85444cff4d67e4ca085b50b5395a7791ca26803b40875f2e0e481e47c9c655d5046a717991b01866e8ff0e30cff","ssdeep":"768:ju0RwgFJ0O/+YHYb3ht2NL55TcjvXcs+uLW/B1kFxG:jTwgYM+gk3hYklW//IG","tlshash":"2cd2e0a09e37e0dfa5419049b6ef4b57dab80e3b7b054c00e0a7f88dde124ad54a7398","first_seen":"2025-12-07T12:26:59.018844Z","last_seen":"2025-12-07T12:26:59.018844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/aos.js?ver=7ee92212a3ec","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/aos.js?ver=7ee92212a3ec HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bef-309e\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNbXqRgeSgLH1xPBQtGKUwKnYPn5JJuXazT1eUCLlNjujChOQRvxmeWGGcFohgTzQhasTrnhISFVxhMow67Ko1ko0yGqp37Prg8%3D\"}]}\r\ncf-ray: 9aa402e4fd963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12414)","md5":"7ee92212a3ecbc19d9d71fa3818508af","sha1":"72926c9223dcb292f641dadbfc4fc7bd27d4cd8c","sha256":"4fc3dc353e44ae364d1dc0ebf2b40e1118ca7b7c45c43b02844b6d57fe458bda","sha512":"500c1332f4180346f76f415e632b53f9357fdb2ae1f4b022f0b5bd9b13ff1f7060c7415b887324ee1968a0b0f14e99b58fe98a4574b75e170bbbd227996a71b5","ssdeep":"384:3PXfNaS8QzGOFEUqF5ZDUbpva23GSeIf+y56:/XfNaS8QzGeEU05ZDU9C6GSeIf+y56","tlshash":"e84209ec3144f0a717e7d1bb816fa10ef5f18838689d9051d258d4d23eb4cae86a3e5e","first_seen":"2023-03-07T01:23:37Z","last_seen":"2026-05-02T14:56:08.750346Z","times_seen":1937,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/i18n.min.js?ver=3a5838d1182e","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=3a5838d1182e HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Dec 2025 20:48:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930a20d-14c2\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RMto%2FnVqsjKKPNb%2FdjQl32RwKziuoIEe%2BwLqG1z7Q%2F2z2CBqhWsF0yF5FOtNIeTFNSkK9%2B1BpkUAlae5G3NJAZfSkSZ7g1mz7g%3D\"}]}\r\ncf-ray: 9aa402e51d9f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-05-02T16:31:34.613515Z","times_seen":146698,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/4c8b929fd3bf.better-recent-comments.min.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/4c8b929fd3bf.better-recent-comments.min.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4qrtO40PpPiivQ0zz9ftut%2FdViXY7rXYJ59fvJPMqEbSUJQiMi8%2BlXwgd0AthWFrI0m5%2FWxksM5fEJReUkCmTysqNEkuU5tkXI%3D\"}]}\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6929bac8-438\"\r\ncf-ray: 9aa402e43d683181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1012)","md5":"4c014009ec96de03c5d97ae97c19503b","sha1":"b01fdfa85d6e19acdfc40ca1cc567d0950df7d76","sha256":"e464219a2630cf33846ff90abb728c325088f5a9b2418f095a1b69c5a994a672","sha512":"12829b219c6433974884e552e38df3ca020fa2c74936c79a3f161f1b70f99a1d6d0ee922ff79af8b043df467a02e21bb631361e33a471f59d51d56e637bbdb58","ssdeep":"","tlshash":"ee11d2e005f5184881aab2275da5b38318f8d721ca32d5dde66de704870bfdaf14570e","first_seen":"2023-04-07T05:23:40Z","last_seen":"2026-04-30T05:42:19.172697Z","times_seen":28,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/child/assets/js/child.js?ver=8893e46f1d53","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/child/assets/js/child.js?ver=8893e46f1d53 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 05 Jul 2025 09:59:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6868f78c-c88\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V893XN1BHD%2Bte01%2Fh5V1pma9hw3M%2B%2BT%2F3rkX93kHdN6HVsSu8ZCCVMZcN1XVjM7dFTB2LgxZVOLiwts9dIHAlWCAzkOO2MyUhS4%3D\"}]}\r\ncf-ray: 9aa402e4ad763181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3208,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8893e46f1d53fe46aa15be1e6f11282c","sha1":"7f6d2deac5e8c6cd5d2dc14db4a4eacf213628aa","sha256":"f1fedc8b7f94342268412ef4100e48e58acf2dbe41369102ac04433d446854a1","sha512":"33cd065adb5fcd1cf232c3a948651590e16bcb0eb900360dd3104d441d9615cfb5fe45a274b55f1b55d3687410cbc1277b6f4fcd6e08b3db866ce572eebabace","ssdeep":"","tlshash":"336143345b6c74398c7a160c8c2fbcc2a7af90318e01bb25761e64515fa8c1d1569de9","first_seen":"2025-12-07T12:26:59.027686Z","last_seen":"2025-12-07T12:26:59.027686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/loi-moi-doc-quyen-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/loi-moi-doc-quyen-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37874\r\nlast-modified: Thu, 04 Dec 2025 18:19:13 GMT\r\nvary: Accept-Encoding\r\netag: \"6931d0a1-93f2\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81E3I0Iv3HhshwF%2Fk7Nihot%2BJ51wncj8jzr7b0Pjf36n53KHlNbXTJjZAiW0dN%2FFlwZ93Q1V5jbceGxjUCMCH5ce6%2Bk8ACjm%2Boo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd8b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":37874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"08a721f79f255df36499ae0220381525","sha1":"5355dff15fea80ba9b276d1ed71b5e2eccd995c7","sha256":"a1c1df13d210943dc8daac947a4727c384cd9de6914437894b90f6057ffe414c","sha512":"0f4616c3aa18e5be5fee86216d9d07a7d7300a5394c3bd11f1b6bca266a0d3725997c8a2894ad5248c4aa6719f62bddf54901d5f3b349adf461055324eef0b07","ssdeep":"768:bwUQnPE0F3rcz+RmCWrUmTEvNKWzoTAJRAWyx0EnXw7J:bwzJRmCvdvgarpJ","tlshash":"a103f15b7fd36ead296e17a5a8c31414c7198f33a607153a3d03628d8fbdaf82d81a44","first_seen":"2025-12-07T12:26:59.029647Z","last_seen":"2025-12-07T12:26:59.029647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/css/fonts/ionicons/fonts/ionicons.woff2?v=4.5.10-1","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/css/fonts/ionicons/fonts/ionicons.woff2?v=4.5.10-1 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/wp-content/cache/flying-press/2d96d4063805.ionicons.min.css\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50556\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bef-c57c\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Mon, 07 Dec 2026 10:58:21 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 5284\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgjRRfGOkn1IeUzMDVPL3vZ2ur8abqePW9KLLR7i8Xsn5W9mq%2FR%2BirmXRlE6hwrWiwRqQ5ML9NMUAy6HL3TZbIrWDcECmJN52Kg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e9ae193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50556, version 1.0","md5":"96f1c901c087fb64019f7665f7f8aca6","sha1":"60c9e10a709815148bf4a9b333a396692739cd5c","sha256":"2d02d165cb720aec2fde78a93113a459729e0503951353f719076bc5b4a7a845","sha512":"f237649aa00c321dad0e6569c525c7eeeba3ca0b0da27e6a11c6a3fd7d8488dd70143764aab810b90fc30555b72395ef1ab96a196cb3c40598d7817d51d21fd9","ssdeep":"768:Jnkadu6y6VA95+4nal3yzjHHtEoXgaiAB4tTwShdVeJUU8rwXYbPbHbMQd:5q6y/zXat8jHH/Xpis4VZdVenXgP7bT","tlshash":"9333010cd1c20bbbeed82173ec949c02e1edeac910f09d956179ac8f6d661940e596ff","first_seen":"2023-04-05T08:46:20Z","last_seen":"2026-05-02T14:56:08.752329Z","times_seen":3776,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/c1ade602d94e30cfda7fa825d83d1fbeac45b38feb96067ac95e43c55bfd8102?s=40\u0026d=robohash\u0026r=r","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/c1ade602d94e30cfda7fa825d83d1fbeac45b38feb96067ac95e43c55bfd8102?s=40\u0026d=robohash\u0026r=r HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2867\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/c1ade602d94e30cfda7fa825d83d1fbeac45b38feb96067ac95e43c55bfd8102?s=40\u0026d=robohash\u0026r=r\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sun, 07 Dec 2025 12:31:26 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"bb5c92c399358f9acf06377da9da77a5","sha1":"a4cfab2439f9c4b89e51f8bc469b6dd1cbf95cec","sha256":"fa4fbc17946c021263afb6863a403151032426c1520ae4cd8808f62714573077","sha512":"abc61b3e6f4e3bbb3b2764273e8e4e5d231d1b39a7c795d2fde0a6c8504c41f4024b5a26ab403223ce7a46a7e0f76a0055105534c08d6448b9c008c1516f7e77","ssdeep":"","tlshash":"3e514b4c3b601a631267db3aa568e004dad742fdc1a6633684ad3f4ba0d3d1c8e2c137","first_seen":"2025-12-07T12:26:59.032595Z","last_seen":"2025-12-07T12:26:59.032595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":38,"dns":7,"connect":10,"send":0,"wait":9,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2023/06/cropped-fav-cube-192x192.png","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-fav-cube-192x192.png HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/net88-bans-mb.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/net88-bans-mb.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 366856\r\nlast-modified: Mon, 22 Sep 2025 10:22:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68d12350-59908\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPBFt7E7fQ4zq4g0st44JDSCiQmUDjb3kr%2Bfwn5z71WeWgt2HvujV6SIff6J%2Fz7EtUe%2BPhldeCiUTkRqRbtUpcjN5UrIjMLpVyKomjTuhS0%3D\"}]}\r\ncf-ray: 9aa402e59dae56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":366856,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 380 x 47","md5":"f810cae8ad5fd4848695779ebb155b8e","sha1":"4bd65641d94bfe79a7ac7738dd6781bd1475e4d0","sha256":"aed0d6a49238db862a532e93c286830171bf5d7b74332024fad5295053bd51b4","sha512":"fe611b9c0d0735f9bb7ebb9559c0563c3cd33b9a78aab37dc347164182be8c9da09180fd8015ff04100d2b662e81b39159430c5498bbcace5ca4936616b2d2c3","ssdeep":"6144:VPLLLLvSQZiZiZiZiZpjnqKjXkmmmmQWCByByByByN:VPLLLLvSQoooobjntkmmmmrCEEEEN","tlshash":"36741201603aa8dc821bc17aa632b14b1c31715dd2944ca6f69e5bfadc1887f5bfdce1","first_seen":"2025-12-07T12:26:59.04275Z","last_seen":"2025-12-07T12:26:59.04275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":99,"dns":47,"connect":12,"send":0,"wait":187,"receive":62,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/ajax.js?ver=ec76c60e3179","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/ajax.js?ver=ec76c60e3179 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bef-87d\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ1xhyJQFrSw7fn6b0B96IXv6%2FZRGA3GU4VCYn1jsfUT4dEt2SRIDye1VtgxHhzjvJVZkbtspKo7jU9hR9giQ0HN%2FWNKnaOQDek%3D\"}]}\r\ncf-ray: 9aa402e4fd973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2173,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ec76c60e3179ea4c356b0f5b5fb3973c","sha1":"a9e8aaa95663241d395fbfaadbbb91413e1a035c","sha256":"3eb88534fc5575b986a134b5d7e1be167c0163b795d5101fd451347b977ff683","sha512":"00a1b6f8a01207c56e33ac205bccc756f9c0f8cc24ac7f899710cc63fb12455642dc791e2000ef94bdf784d8aa457eb480c7fb7a63e391c5191224ea2df3ddeb","ssdeep":"","tlshash":"8b41bdf8636c42dec1763025fc3e62a7193ed5327f012e5ebe8c9118a7d0468d2b5a59","first_seen":"2023-10-13T04:39:00Z","last_seen":"2026-05-02T07:33:21.956267Z","times_seen":365,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2023/06/cropped-fav-cube-192x192.png","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-fav-cube-192x192.png HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 17485\r\nlast-modified: Tue, 11 Mar 2025 20:24:09 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09be9-444d\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:31 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 5275\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J9uuxWIxCbRUf7pdhPPzQUxyYkBIzG6dlwu1N5RwyMaSZRuwMfa0m9FhYySqxAVpwryeV8KjOy1w4uUY6UIGRi46Wq4WKPOmq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402ec9e623181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"509a3990a7919bbcf8bbdd924198053a","sha1":"2d4bcc50d3abaaec10857c47b127e3ccb72df68d","sha256":"06b06d3abf690a06fef5ff36051202e12cde324d3ba95ec989d2ac7c6f1b87c3","sha512":"db29eed1df2ba1a2292bf8a7806a323f3caa37b11930eda738ce99854579260be2e638fe00d00b5c9408c57e5cdbcdb38863106f1b506653ce2c487f153bd7dd","ssdeep":"384:hA1pWYsphU5aHDojeb1eaChTupRGyIh8AO6UUt01KQCw0:610gaMraChTHD8AeJ8Jl","tlshash":"ce72d052be92876bb4ea4472c8986c2cb1cf8ec73e5d1fdd7db152017d618a774822e0","first_seen":"2025-12-07T12:26:59.052959Z","last_seen":"2025-12-07T12:26:59.052959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":325,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/9e197ae1b39c.template.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/9e197ae1b39c.template.js HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-46ae\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNr8yb6pC9RP4xC8sc1gmEhkK5KuU50MwhqNrzevOaHb6p18p5lzf0IkQq7vuPlGRtx7f2duIbBtzQSFzBXcQ5vSi9oex7Axgoo%3D\"}]}\r\ncf-ray: 9aa402e4ad753181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18094,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3036)","md5":"25e0d73497d9953ad1e22a2e0e2dd5d5","sha1":"cda10fce376976435e87454502f82d4dcd37d08d","sha256":"a2d99684d7bcd387977dc3fbcc2133e6904cd37e8271441949f9fd3b2da3e60f","sha512":"5a27a6ae7802fccc0eb8f94f543f768115dec6e071b664707779fcd2df436c707f98d034fad7c8b4cdbe54ac88599a15541bbf60b0a20e0dc893c2c8b40950ac","ssdeep":"384:UK4avwmV7oSHAHqO/Ra9BEXLZQtHpryCCI:UK4avwW7PHAHqO/Ra9BEXLaVyCh","tlshash":"c782b70bb610b56b04ff1636e02bba4466775831c744caa1f7f140695e9984e32b3efe","first_seen":"2024-12-02T03:02:21.838399Z","last_seen":"2025-12-07T12:26:59.055891Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/hai-me-con-tro-thanh-vat-hien-te-cua-lang-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/hai-me-con-tro-thanh-vat-hien-te-cua-lang-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26400\r\nlast-modified: Tue, 02 Dec 2025 09:19:51 GMT\r\nvary: Accept-Encoding\r\netag: \"692eaf37-6720\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=000Dz1WKiQ5k2tS58XZkFrrK9we9m0n3%2BgWfPhfUx%2FScxzBrETsp3Cb%2F9MfBLHs6wPEOKA3g4SuIGEdwBHttIJ3mQkDbO67h5VM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd7b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":26400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8601cfc94ef42637bd862c487b49ef3a","sha1":"44dddc3a171c9dc1b97c75f80c6c434ae2a71f9c","sha256":"6e8c44c64ae19cca51727f0be6facb27f76925d69da6c7542f82d2ece9aeeae6","sha512":"c94bd7b033a13aaf03160564a29c7279e4b9ec77857b65d3c5881d938a537fb07be1fbc79d40b95ef1fe34152e48d4f6057c0c7c4d719104697ece6ff2d9d476","ssdeep":"768:TI87qzkzhuLwVUvXjhPmFOH9nTSZaBSUOWVJvB:TjqzSunjhPmuTJSUrJvB","tlshash":"51c2e1bf5e60a2a1c1f51244c92317efe94934b751e8118ec433823c95ea57f2a961cf","first_seen":"2025-12-07T12:26:59.060356Z","last_seen":"2025-12-07T12:26:59.060356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/on.js","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bundlemoviepumice.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:35 GMT","end":"Wed, 21 Jan 2026 14:24:34 GMT"},"fingerprint":{"sha1":"DA:88:07:3B:D2:D1:3B:9F:27:5F:6C:49:13:6C:AE:B8:11:17:22:39","sha256":"5C:79:46:7D:01:B3:34:5B:6A:DA:24:4B:09:56:F1:34:13:DD:76:5D:EE:2A:39:BE:D5:C8:BC:4D:F8:9C:65:B9"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: bundlemoviepumice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 01 Dec 2025 12:50:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d8f16-25c24\"\r\nexpires: Sun, 14 Dec 2025 12:26:25 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154660,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f74dbac0e50c726185d6f449a54ce2c4","sha1":"41e095ce6c4904bf5dda14dcfa12151912e44f95","sha256":"da59a31e8291e917e574e9f500af90b32854fdb893b353b9b00d1785aa877493","sha512":"e45a8b2ed8aec880620ef6b7c1e6fdaa17157995e5481355441ef34e36b78d70bdb7e97e91d3ba8f6229532a6710dcced8c55f868c9c156c7cf84940511c5712","ssdeep":"1536:QD0pfV4Llg169i1t+gSZTpk+iATtWqsNvKHRV1Hbsuf+yDTQ3OjLZVFfc3WrT9tq:QD0P4LKeKzSlpwAIqsNvKJ7fZD5fc3pd","tlshash":"24e3978d758dad32c247d869092f6f05b7ba5cefa04f408681fee1845c7e90ad321f69","first_seen":"2025-12-01T13:24:57.412509Z","last_seen":"2025-12-08T07:37:45.104809Z","times_seen":152,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":18,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/plugins/madara-core/assets/slick/slick.min.js?ver=22f754161489","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/plugins/madara-core/assets/slick/slick.min.js?ver=22f754161489 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-ab69\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HquniiqzRtXfE85uoz2etAbZRlOd1%2FRuh1SimPcEOnpWraIRUtUHF8Ak7rYLTYMZas0AEofK5Q5p7yYy%2BeSbXdIVhM0cUevOTV4%3D\"}]}\r\ncf-ray: 9aa402e51d9a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":43881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32026)","md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T14:56:08.820454Z","times_seen":20019,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/28eb96f883aa.script.js","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/28eb96f883aa.script.js HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-5b33\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukH7z7ibtOvrObmi%2FLyitRa7aU1Aeby6Ex2c6Tb3nydS6XHqInicquJb%2F7q1AU4jkQcPZcssh%2BdivubJsxDd%2BhZUqMqYHgRPn3E%3D\"}]}\r\ncf-ray: 9aa402e53da93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4095)","md5":"c09cb02173d65203d6c3d7a2d5f64446","sha1":"6d4bbce53bdf8be1e535ff805018d5a77dcd617f","sha256":"23e2c3eba16236b50bb6923a4abac93b4290845d1b8991133bd19ba48e7b6d9e","sha512":"3c3c3d6a06aa38b1350d65a1402b96be7083713db94e270605aa696e692ad4403eb6a1c6a687134e2a6bff632b5ae2c17fe5278d0e06d4658bae0fcbdf92b3c2","ssdeep":"384:OjEk7yTSau4VbyiKafnLA1qgk1yhTrBowvq8/ZTfsDSf+rYybyDbwc6jDb0++hEt:MEk7yTTtV3KafLA1q/1yhBXvqmfsDSfk","tlshash":"7ca2c72cf01160b946bf217ea89f1a01b56359728704cb50e3b9822c8efd94562bff5f","first_seen":"2024-09-19T19:45:35.464811Z","last_seen":"2025-12-07T12:26:59.072668Z","times_seen":10,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/6730f1e0d24e.style.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/6730f1e0d24e.style.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-2c02\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIeUcN7Jy88uWSBaUouy%2BpXFu%2BktZoq6ZJI0%2BZnglt5e%2F%2BdUZ9jdcHe5fY%2F03pEMvbTLdOBEmuCOnwxjlRDmd%2BDJV70k3zr4UJs%3D\"}]}\r\ncf-ray: 9aa402e5adb73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":11266,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11266), with no line terminators","md5":"778150b96c7bce2febedc97af9184037","sha1":"a63b4b12327a1a12f7df0a24087ee7abdf88a295","sha256":"39371bd90289fc050dbed185714d140f4b845516f6392bc2e9b3f9a93a3f4834","sha512":"b3a2d48ccc12a9a3d97a4b9d3333f7f26cfe0d3d80ca4028d7465aa2fd96465acbbf4925de9963be6235dffba984b2bde4295c72ca9c4410293ff0879b84cd55","ssdeep":"96:gOYZQ4cQEdLIw9jmjqihootwixFUPfuh7h9DQboeEA8dgzO6enQ6jPP3idtyMY56:Q+dQeyW0rAtEA+nH/PYL0rzzxFLI","tlshash":"48328624e15e0a181727077ef895b79cfe6b8432d2164cdb9730e56ede4f08e0299ac9","first_seen":"2025-12-07T12:26:59.076436Z","last_seen":"2025-12-07T12:26:59.076436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/solid.gif?z=1895656\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.643-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=g5SQL7zCKfrV\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=mXfTt95aHR0cHM6Ly8ydGVuY2IudG9wLw\u0026afid=2930428041413120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1727\u0026rlp=%5B0%2C47%2C111%2C74%2C259%2C12691%2C9057%2C12066%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bundlemoviepumice.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:35 GMT","end":"Wed, 21 Jan 2026 14:24:34 GMT"},"fingerprint":{"sha1":"DA:88:07:3B:D2:D1:3B:9F:27:5F:6C:49:13:6C:AE:B8:11:17:22:39","sha256":"5C:79:46:7D:01:B3:34:5B:6A:DA:24:4B:09:56:F1:34:13:DD:76:5D:EE:2A:39:BE:D5:C8:BC:4D:F8:9C:65:B9"}}},"request":{"raw":"POST /solid.gif?z=1895656\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.643-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=g5SQL7zCKfrV\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=mXfTt95aHR0cHM6Ly8ydGVuY2IudG9wLw\u0026afid=2930428041413120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1727\u0026rlp=%5B0%2C47%2C111%2C74%2C259%2C12691%2C9057%2C12066%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: bundlemoviepumice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2tencb.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\nUID=251207072621184ba698f144bab3fa79135c; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-05-02T16:22:38.019534Z","times_seen":21215,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/slick/ajax-loader.gif","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/slick/ajax-loader.gif HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/wp-content/cache/flying-press/f9faba678c4d.slick-theme.css\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bef-1052\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:26 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0M1dM3HiGI4xSkDLdJxiTTz5L08yju9ZiKqVDLHpVncr4yg0CaoXQ9lnjipdRhL3sRPAiXt4FLto2mPFvMoVYT9%2Foka9m45ogx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402eb2e3a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-05-02T16:23:19.558441Z","times_seen":37185,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/bootstrap.min.js?ver=f0c2bcf5ef0c","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/bootstrap.min.js?ver=f0c2bcf5ef0c HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bef-f7eb\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRyh5IzfkTE1eedFsD0pXcwoquypb41miidwRGGd%2BYSyp%2B%2BXRZNLWi8x%2FrdButpAhGS2JIzVYMeIfFnGEaUsZxKym2p%2FyEx%2F1B0%3D\"}]}\r\ncf-ray: 9aa402e49d733181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63467,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63188)","md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-05-02T09:57:03.799983Z","times_seen":9868,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/69448906dcdf.shortcodes.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/69448906dcdf.shortcodes.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-5cee\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNMeBeOrHBIDo8rZu9v8Vaxd1prG2paNjXQu%2BLk%2BcvXVzMnYlUirtGPaQ%2FqwD5RUiorDwy2UyC7gynEMZiYPMPPw%2FAvbP3mb9Z0%3D\"}]}\r\ncf-ray: 9aa402e59db33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23790,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23790), with no line terminators","md5":"21631a9e806188c000cd4a303dcc7eee","sha1":"70c884e5c62d45d2813e5e44d39e4b8f2684226f","sha256":"88d8be75d087e7bf009e50a38a607c54728b653b24dabb3b651f0fb92d374c8c","sha512":"0d37140d692b5d9a9643d34315c9dd70450b930619b2e75b44dce329ae2526bddace218dc12fa22f370e79eab27394d94a2686c4710f0cbb082f5c35f76b617c","ssdeep":"384://R2I97N7jnKQK4+jj4vAJGPJfav8lqmPgI+OePQF1y8GVxyIL8CBRp8w:Ik7jK140j4pJLXw","tlshash":"88b2a529966708ba20b7c250b9c0337d722dc131c3474eeaa574c9be97de19731f6b1a","first_seen":"2025-06-19T03:50:43.290942Z","last_seen":"2026-04-20T20:18:28.836781Z","times_seen":14,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/68-ban-mb.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/68-ban-mb.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 174165\r\nlast-modified: Fri, 12 Sep 2025 09:45:33 GMT\r\nvary: Accept-Encoding\r\netag: \"68c3ebbd-2a855\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 01:00:19 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7I%2FZh%2FAPj1COtDvNCMD1hE4HW35lXEvWBPqOiXVmGP%2BBkOWDPzFliF9zTyUO%2FvwhKaBrBN4IBnoAhbvwRYI1KTqmP2%2BaaCaC2kn5OW2KKm0%3D\"}]}\r\ncf-ray: 9aa402e59dab56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":174165,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 380 x 47","md5":"0a0fd3fe74062c050aa8be72d3e65259","sha1":"546f19218e71711ddf7e8c43e99d61a0c0207acd","sha256":"2594a0cb01dcf271f47b05a607d1bfda57d03b86c5bc0c976cdd4c586fab0590","sha512":"27e5ffd498994b75b7b1a62c52b3c1c7c8f9cfc16de555ded5b98fa8960918ef099c60957e3896ed595d527e65f9d453d054765a26d47c3958371b11d7f85ce5","ssdeep":"3072:iL1w6Zf8lePVVgzNkp9c1ZYymrxzTs54olPu/DvkifsZ+6T7/9GfzXWxP9pzz:iLXf8leLFfc/YymVzAColPNZ+omLoT","tlshash":"a704011f9dae1e91d3512ab0368edf658ea55493daed4b6b2440fd4331d223e8880bd1","first_seen":"2025-12-07T12:26:59.121154Z","last_seen":"2025-12-07T12:26:59.121154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":100,"dns":46,"connect":12,"send":0,"wait":188,"receive":399,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/04/gal-to-boku-ga-seibetsu-gyakuten-mesu-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/gal-to-boku-ga-seibetsu-gyakuten-mesu-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24610\r\nlast-modified: Wed, 03 Dec 2025 22:10:04 GMT\r\nvary: Accept-Encoding\r\netag: \"6930b53c-6022\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYdf3vgXSZvZNTYEl267kH7tjy%2BRazrRNtKS%2Fgd92TtI60Jh97iTu%2BOp%2Br6U9H6ykejvNwIaXJq2%2F%2BsydO9%2F0sp0l7TZiRgD3oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4ed913181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":24610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1561b98df235b09a851448370bcc2424","sha1":"8313a74bac1f94bf1088d00a74574982a951c2d8","sha256":"24ae94e7d60a2409dcf5de6b759e68c9f03ea809b510dc10fde1d10a191f4258","sha512":"88fa5fab2f3038e45c6dad51245968ee0d7f9c532d10f67fc88680be58bbc1d49e3d90a3c1054cce5c51b470f04f5adc11da8271f5203b87f9cea1925ed528bf","ssdeep":"384:cORQ5tgRtmUWMdBYrb7Bkhz5PiVEIvioTvxe4gX1lNhyFAnSg4O23r:IETmKBYtkhIVEUXDM4SDbXP4O23r","tlshash":"6cb2f1d0e2ccf6b7eb7ad0a1af2895387d7b9e5a1932558f7ccc506cab012171474052","first_seen":"2025-12-07T12:26:59.142834Z","last_seen":"2025-12-07T12:26:59.142834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/f9faba678c4d.slick-theme.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/f9faba678c4d.slick-theme.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-a9f\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEuOrBOwaeadzqVVLsYuWWCIckgJMJF4hsH8c0Acbf577hdPwx6XrrFYAE6tcWroR8YJpqQsvSlb5EriI%2Brm1PrUgXydFu1ZxQY%3D\"}]}\r\ncf-ray: 9aa402e59db13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2719,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2709), with no line terminators","md5":"a5d236b6d7245ad8d17625d150166da6","sha1":"7024d16d3eea0867b0771622dc937415ab259528","sha256":"d6ab7b44442da05a539160bf689e4f34183f8e2526a07f3ef0a249eb43d5bcb7","sha512":"a63881e48f34a502cb66b3694b97630308ab12ddf1c2458764a4bbcaeb6f54cea85e722414bb0d9d03942c3184dbb317becb6f1211ca845999db5f47b6bedc09","ssdeep":"","tlshash":"6b514135522a718a042ac1107793a6a571c3b923ad770ff8f93e53bcc2ce1941fd875a","first_seen":"2025-12-07T12:26:59.148932Z","last_seen":"2025-12-07T12:26:59.148932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2023/04/truyen-lo-da-mo.jpg","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/truyen-lo-da-mo.jpg HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27685\r\nlast-modified: Tue, 11 Mar 2025 20:24:09 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09be9-6c25\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:25 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XPO7ovzUtG6OiVzetNaw42YQd4rWFSS%2BdnehL%2BWtPIwIFFoaAbg3zdjzCpYs6dcVwcP%2FTSzi8js9O%2FTG53JlyEHpal7990Uc4o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd813181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 282x400, components 3","md5":"54f92d255efb8a23736d9339866b7898","sha1":"b4976059c874ee8b626edcc41fdab931049b97fd","sha256":"da1ba0f3890d9ee99b34cb6f2afa8dba8ebc157b08f1bee17299960d516899e5","sha512":"369f759a7c8c611d32dc8ba6b3ffd5cb6d7092f7fc7c007951eaffdc099b326dfed6a003d6763c5b0038df381a175a118d4482ec73ec417217be74d0c34d2630","ssdeep":"768:quVsKjwU6Ty39tibd4le2gunZ8H9e/QsY3j:q1KjJ6TI6d4leZP9/3j","tlshash":"8bc2e1f9ae57a728ced7d90156cb700ae6188e38221c805ae1b91d7693d0280cff16a3","first_seen":"2024-12-26T02:35:09.475247Z","last_seen":"2025-12-07T12:26:59.15308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/suc-manh-thoi-mien-tra-thu-dam-bat-nat-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/suc-manh-thoi-mien-tra-thu-dam-bat-nat-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40720\r\nlast-modified: Thu, 04 Dec 2025 18:46:31 GMT\r\nvary: Accept-Encoding\r\netag: \"6931d707-9f10\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frn7G%2BmnnhB6SDVMHHfE8Andd20RkFuYBnp06NvRSJyu3Y68zZgUC037%2F8L94naXXZxvn%2FD9NXFwUTdGdL0Zkvu1Yf4c3VsTPVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4cd843181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5cbb4c5b971e764282fbb8ee081b945","sha1":"f54fc71c043fc09f10f00e378d5e6b62a6583cb8","sha256":"34c62884da7473b57b35df47251618362ee3db73fd169b8a9551069eb3e68d03","sha512":"c9053d1d3c80ace9c028c66a91d446761e4d268c6c3121e8fccccb78e81c2644b54eac1513cd7ba274cfdc081e58a73c0d2eb7e60f16486b56b36784d83f5a55","ssdeep":"768:nLNZoGQnEs8AA9H2sv8xYwAPGhH5aX13iaXOwlydozyt:nxZRQnEZAcH0mw35aUaXOwdzyt","tlshash":"2a03f1d8e8186f4425877b0a17ad722178cc24db652987cc75181dee7ae8dd4e0ecbcb","first_seen":"2025-12-07T12:26:59.157351Z","last_seen":"2025-12-07T12:26:59.157351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/hatsujou-hasumi-torotoro-nama-koubi-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/hatsujou-hasumi-torotoro-nama-koubi-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29248\r\nlast-modified: Wed, 03 Dec 2025 22:20:12 GMT\r\nvary: Accept-Encoding\r\netag: \"6930b79c-7240\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIibPAJwJsVDeEDEmkms0ntRQ1KWsJw7EVK4ghn23dLAiMRzp3WRlCxqHU8YKtsH%2BX6omfNNm51zUBk1UgAN1tQ7l0mIWxgun2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd8d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":29248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4c59952169125f5ef00ddc1b46a5b692","sha1":"559614cf352d5ee1f544099e9255dee3d3c57332","sha256":"a5674d50b6ca72c45b4040ab871d4ae66a01dbd46ce8ac55eea625eb5336f0eb","sha512":"3aa3ddd640b1d43ed97a01cc17e79f27fe656a112c7c1d5b2c67d739c8059b79d4da0bb26450349bf54cdfbb01d70992bd099f13b4107654579b223fb6d38130","ssdeep":"768:Ag4guf618UETx3rQd43FWp/Lg3hPrYqz4J8Zl654U:Al6+rAk49WjuJ87Ef","tlshash":"edd201965ee991232e06d01e7b857a76f701430bf09612cfcb1b72e9dd221d7a19630f","first_seen":"2025-12-07T12:26:59.173803Z","last_seen":"2025-12-07T12:26:59.173803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2024/09/rentaru-suieibu-kanojo-193x273.jpg","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/rentaru-suieibu-kanojo-193x273.jpg HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21274\r\nlast-modified: Tue, 11 Mar 2025 20:24:14 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bee-531a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:25 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVahsnx2k81pT8%2FUoGu%2BsXHKJDhQOiwCxOrjpHsNBSx3bJHyeu9VDAvJrdUrBZ0ealPDMplgRfNdSFzjmeiqEqGW3FEkBr5YBrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd8f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":21274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 193x273, components 3","md5":"ed52f77342bc4e8225793acb755c14bf","sha1":"73b74fdea383f39d7999f37011a063fcd55ed296","sha256":"544ac7db4027c13224de1766e0abdce434c0d5caa36a403ea98e7c50e1b7ed90","sha512":"061117ec8b1315b4f7120287c9652293824bcf980e6e0648042f1ffe45a3f34f97652908e00e8d0608583737a3b2bfd85a3fed166d6d0a18dcad79e0c9380f37","ssdeep":"384:8y9VAvkQIBeRCr1F5p1dZ1ETxqXffTUsfqFAhaPJSGhvIOOQ:8y9Vo0+Q1F71dZ1VX3TULFA4QOZ","tlshash":"e9a2d0dbb9245090f5247cbb5e6e647947de28c9aa8c90a27d37c1bc43780c291fb86d","first_seen":"2025-12-07T12:26:59.17678Z","last_seen":"2025-12-07T12:26:59.17678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/imagesloaded.min.js?ver=6823120876c9","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=6823120876c9 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-1590\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Bqvx5eaEVLZmvUoNAqZoh4okNGuJJ4EhDbDcXVWEteSDrKe6vBzYj7sT2serMSbSwWficBRW77%2FVJzPHPnZNKNcXtGqBmoNdb0%3D\"}]}\r\ncf-ray: 9aa402e4fd953181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-05-02T16:27:37.594982Z","times_seen":163336,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/4c11326e21df81b230c1c88c2c5ae2bdc2bf2868f2c6852a7e177f4ad4bb9c9a?s=40\u0026d=robohash\u0026r=r","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/4c11326e21df81b230c1c88c2c5ae2bdc2bf2868f2c6852a7e177f4ad4bb9c9a?s=40\u0026d=robohash\u0026r=r HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2835\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/4c11326e21df81b230c1c88c2c5ae2bdc2bf2868f2c6852a7e177f4ad4bb9c9a?s=40\u0026d=robohash\u0026r=r\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Sun, 07 Dec 2025 12:31:26 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"dfd9d74a1788003e19d4169d9daf124f","sha1":"31c98d209943b082b5008bbd95029f792ae77f2c","sha256":"6e001af27d6ab8888e600a1e5d2d2f36f126503f7c6933fc227327f7eac44af8","sha512":"06e2ef5c118707676367a26492ebf5ac6426dbf9538e883aad6bb0bbb42e0407f91d81bd8b001dbfc138e1c256689cc8e2010f4a4e42dedc750458f15cee36f1","ssdeep":"","tlshash":"d1514d789f62612ee6c16f35a514ed527b1b0be303e14a3d55c9493737b023844ab723","first_seen":"2025-12-07T12:26:59.181401Z","last_seen":"2025-12-07T12:26:59.181401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":36,"dns":10,"connect":7,"send":0,"wait":8,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/net88-bans-pc.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/net88-bans-pc.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 392140\r\nlast-modified: Mon, 22 Sep 2025 10:22:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68d12350-5fbcc\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSM0d4YqT9qrbrYt9h%2F2MLxdcPozvYnJHlXBNigp0zoBBxRXDWSri9Do6yPEDkDqO%2B%2Bk9diYu4N7wN6vmqQFA9TqjoO%2Bab80x12ou4mowBI%3D\"}]}\r\ncf-ray: 9aa402e57d8a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":392140,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 550 x 68","md5":"a9c0baac9f26ba2226b81b7fa27a0065","sha1":"8ac56dd90c3ccdbfd35b5474efb6addb0fba24d5","sha256":"b7af7899cbb0b7a448157254bdbc8b7d90aa078fbaae839973a26697ec96dc5e","sha512":"f5e3c7b8b1d67ef2c81f5d18dc55b33f84d2159cda3a97cacd6825f76594d7a30b95dec63d16a9274c84bedee01d5ef25d8c7503e6d098028006f8bba388f989","ssdeep":"6144:iG//etewsetewsetewsetewsetewOLp7Lp7Lp7Lp7Lpc/BmJRRRRK:/IRRRROLp7Lp7Lp7Lp7LpWZ","tlshash":"fe84121b5ef5d018b84dc1067b4beffa0e90d4b8e6ca34adfdd9ae480b514f60a49e05","first_seen":"2025-12-07T12:26:59.184024Z","last_seen":"2025-12-07T12:26:59.184024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":92,"dns":51,"connect":1,"send":0,"wait":188,"receive":58,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/74bab4578692.all.min.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/74bab4578692.all.min.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-edb2\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mZ8IPAq2tpkpD8jnOIubtUm5WGsV9sl2glO%2FM1LFiim6%2B8caYiyvGC7t3d0V1oJiNoqHCBRIcufT87nJBYdcrez4AF2t%2BzulAI%3D\"}]}\r\ncf-ray: 9aa402e59daf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":60850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60664)","md5":"e04c45f3597c2c6632e5c31b063f20fa","sha1":"54b48e48c9e55b9509e50abb93247e25d2169654","sha256":"3fecf6b0d5a5ac0471a7d37be5dba1e00ffd9badfe225706afefdbdbd4521af0","sha512":"e4d73d400897e37ab7edf2fef197816d7b26fe15c98b8625e88f7baf9f2140e5256a589b692155541fb710104ff2bfac5bb0d2f29f6ff0984d675743d26f1c75","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzi:0E0PxXE4YXJgndFTfy9lt5e","tlshash":"a7530cb8e44d01cab735c04bbf85b2bc61b6f73de9814d95f00e591c2ad16a811c5fba","first_seen":"2025-12-07T12:26:59.186457Z","last_seen":"2025-12-07T12:26:59.186457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/check.html","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bundlemoviepumice.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:35 GMT","end":"Wed, 21 Jan 2026 14:24:34 GMT"},"fingerprint":{"sha1":"DA:88:07:3B:D2:D1:3B:9F:27:5F:6C:49:13:6C:AE:B8:11:17:22:39","sha256":"5C:79:46:7D:01:B3:34:5B:6A:DA:24:4B:09:56:F1:34:13:DD:76:5D:EE:2A:39:BE:D5:C8:BC:4D:F8:9C:65:B9"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: bundlemoviepumice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2023/06/cropped-fav-cube-32x32.png","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-fav-cube-32x32.png HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-02T16:30:46.037205Z","times_seen":14535246,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/jquery-migrate.min.js?ver=9ffeb32e2d9e","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=9ffeb32e2d9e HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-3509\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fI1ENOZ0MPKAlHODzZKJTEm7rscJJ1x4b1W9Eso3KPmNH200jAYtFm085PkibxkVQXf%2Fj86UA%2Bh4eqPT%2Bg7wJfw31CPXxinyyY%3D\"}]}\r\ncf-ray: 9aa402e49d713181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-02T16:30:59.901247Z","times_seen":715715,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/11/nguoi-ma-con-trai-toi-thuoc-ve-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/nguoi-ma-con-trai-toi-thuoc-ve-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27934\r\nlast-modified: Sat, 29 Nov 2025 06:39:11 GMT\r\nvary: Accept-Encoding\r\netag: \"692a950f-6d1e\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxcFo%2FxD0mR9UHxir9%2BAQVfKjhlgxLjcVx5UbDN%2FaGOPX%2FRGktujKp1H%2FI9l%2BAu8hTdYuqRcuvEdEzrxB3JE9DaY%2F3XV9ml6VPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd793181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":27934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5cfde8e5bc0d30b2e3271fa4f0d18d36","sha1":"3b099e0025a240a0fe4c3f617e6f3bc51f1eaf1b","sha256":"c74b33374b68c0b0214acded925446a6665b476d150580b16314c3391b5144ba","sha512":"30a14824101037f170e47b7180b45d295771796deafedb5066e292ad5769f6825e1d1a680455efc73d426daec2f8d88d4a954aa75f5e56fbdcfea9688c4f295c","ssdeep":"768:njQxLG+w1DKz5UV3KhdUSJ2gflxw0WcqD:nAw0zTzUrqlxwJD","tlshash":"40c2f1e1685c9cc949a8dd98942c4999a59c20770ab8db52ccc3c9e89d98f7c183fc9d","first_seen":"2025-12-07T12:26:59.190717Z","last_seen":"2025-12-07T12:26:59.190717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2018/07/mama-hame-sex-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2018/07/mama-hame-sex-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31566\r\nlast-modified: Thu, 04 Dec 2025 17:56:32 GMT\r\nvary: Accept-Encoding\r\netag: \"6931cb50-7b4e\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNH6pfc2uAGv5x3KFYQS%2BHqzeK5NOjybrcRZUp46qV%2FKyHgfhfzsHhsBA5h3N%2BQqD4GCkKzuFNcdn%2FFUx6%2Bzke1JAfdWY0LEMBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd7a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":31566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14732cf7d33c6a6bb3866bdfed01000d","sha1":"94a37a339b44b3a7f448f9880e8aaf813e2e93f0","sha256":"3762c2a867e7788966f7215f5eca7b30e8b6b224057061b7cb7b3399c5071497","sha512":"2fd5fd80fd2b8cb6015547b5b2429356fe68cfc1e5af2a7dc1cd88518e14c03b95d349ef40c48a895d4ffca3430e47f05f15428b3321dac2a423637704ebfe23","ssdeep":"768:oBIo4hP1Pc1ncUzEX+/LYzWeVYQKQ1xizXmPlztu2wmKy:omoKNPMEXQMWukAxizmtztu2wY","tlshash":"16e2f1e83583489d2bfa830d7168f7f0f2d2465640de962049da3438dcd9a87f78c88e","first_seen":"2025-12-07T12:26:59.196321Z","last_seen":"2025-12-07T12:26:59.196321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/02/vua-chich-tang-gac-mai-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/vua-chich-tang-gac-mai-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25522\r\nlast-modified: Tue, 11 Mar 2025 20:24:12 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bec-63b2\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5c4R3rq773EzSftO6Lw2w0KTp5mQK%2F4W904SjyvzJ4scw1BEnhIwzA3F2fDBODOo1peF%2FminwiwcPXSuKucU85DwtjawUc8Zgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4cd823181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":25522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f514071268da91b8c9156453dc70429","sha1":"f3dcaa6e57ee53faf570e44f9b5c7644b7d14408","sha256":"34c245c662134e3f5a1f032ad2634be71bfc315429148045336a5afd9a798fca","sha512":"f51573a57c364c7541e5eb8029364856a012501c90dd82a349a38bb01ba3ee7b6cc83dd4d9901a3f48c5a0b5359d493ebcfcf5f2a3df78300a6a11d522aac0fb","ssdeep":"384:8eLycLE8Z8yeeNtEyzHMtLx7phlii63AMfWiH71MKkztattCPhDooP+jUfVfImpH:x/LzZ8INULtii+fWOCJOqPx/h","tlshash":"f5b2d0f5e89790926dd813e6ccff8260e34c46f74648482019b4a6dcfba3e55347d4e6","first_seen":"2025-12-07T12:26:59.209711Z","last_seen":"2025-12-07T12:26:59.209711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/bi-bao-vay-chuyen-di-cua-truong-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bi-bao-vay-chuyen-di-cua-truong-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47784\r\nlast-modified: Fri, 05 Dec 2025 20:54:27 GMT\r\nvary: Accept-Encoding\r\netag: \"69334683-baa8\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oeonGoao7T%2FsuzAlLqLetXFHahEhjC7ZP5gI2vPjm7h9KTrHesRLqJWV2O%2BXVFUUXrDKsRDwENN20RCv6GKLVRiL%2FPQDePCf%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd853181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ed61fb32068878a669013ef4625060c","sha1":"693d1f59a068c5f5ed9a3d795435f5ecf7ffed20","sha256":"edab699186aa88603e77b7aacf20b6be971eeeeee662a46794c0922360231f82","sha512":"194e1700f66f6bcf40a92db578296fb6aaf4f41108e03d8aa7d17c0383a33a890eb5b35cfbee6bd3bfb9cd8277b104c39d29dea1f06c43a88baac823943675ff","ssdeep":"768:XJn58oOvCYXhP0/OSqw6FOLLV7jNuH7EVmptUYWy6AC9A5lkrX3EeK2Aa9Z1emwY:XJniOOO6AxYAVUt1aPrbQc","tlshash":"6a2302e21f825bf200eb6a75991c13cb50a8f671faf59807ce323291b0349dd63a1d67","first_seen":"2025-12-07T12:26:59.223177Z","last_seen":"2025-12-07T12:26:59.223177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/everybody-wants-to-get-drunk-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/everybody-wants-to-get-drunk-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25032\r\nlast-modified: Fri, 05 Dec 2025 20:39:22 GMT\r\nvary: Accept-Encoding\r\netag: \"693342fa-61c8\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSa7pPYmDiOlWmgMnuOqmh160Q%2BnEzdNTKZI3DOLxsEmVHOazwDfi8SJtaJOtixNCcCBVBXCmLzKfBVXvT9CMnHfxbNRl2gra1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd863181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":25032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b63449a4ae22fc906c4e5236bbb672d","sha1":"c3a9a82642a5cfbdf78c6d1fd70e257cd2e4946c","sha256":"2a829551b123db2a705f69c930584ce864ffd491ea321e553694a258a4b343ed","sha512":"5c370472c0e1322cbee75044132b9e463eabb0e0bf8fb6185a08ae3cea5a2720902e4eb9f81922c570ba6823be6495a760ef840aa45890f5ef92924fbe9eb234","ssdeep":"768:4AtBraDTzQ5HGIDCJrMYk1cBwrs4LQ5EF:4At9aHsF3uLtBwYuQm","tlshash":"20b2f17efc604ecee367728811c86732b536a3d35ba701033a60557520c8f26f9ee48a","first_seen":"2025-12-07T12:26:59.22726Z","last_seen":"2025-12-07T12:26:59.22726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/09/ban-than-cua-con-gai-toi-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ban-than-cua-con-gai-toi-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23228\r\nlast-modified: Thu, 04 Dec 2025 19:14:31 GMT\r\nvary: Accept-Encoding\r\netag: \"6931dd97-5abc\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5yJyk%2BUr2wVieSNJEmCh%2BC2bKx52TvutWd4V3Smib8ud5Y12hxElw9aW8woSvgG9uvSzoLm9tWAEtMYj86c0NJX%2BxJekn3MSfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd8a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":23228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53074931959a21c9d226df40177b8ee1","sha1":"8dc48cd8f714ad1591b4cf899f87b1e185914168","sha256":"cb651e8f7ee139a37ee5eb0cc45a5281fd8b113b6bc6261be4742830fc8197fc","sha512":"352f1e39b55bcbc6631d97c365801aee759f78616baa037eecc56598cf4ab3faf2b85deffd969cdfee53bea8b16dd9e57a10e2e55831e743f54027db043c49a8","ssdeep":"384:qvwA2DWdAiL1C4jEoPMytaZgkABsQ9nkCDkyBZLiN1+4Sr/I+SY/D:8wApdAiL1Hjh+QJkCDjZLcMdIY/D","tlshash":"e7a2d0bf708b2af402547c6e876c43ac1dbaec0456468a3b5d6e08c9dc3b097dee6615","first_seen":"2025-12-07T12:26:59.230197Z","last_seen":"2025-12-07T12:26:59.230197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/core.js?ver=cb3d0e1d2628","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/core.js?ver=cb3d0e1d2628 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQHvDmwaKD6pU2QJcDCLcaR3jzfBICbLVjmZ7%2Bhd5m%2BNaMrYOFKSSLpFPnYHlqYb3DvJ%2Bibz2MVUPLwsXwg%2BhyxAQlLqrnNTDqA%3D\"}]}\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"67d09bef-21a\"\r\ncf-ray: 9aa402e4ed943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":538,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"cb3d0e1d26283bad64c342f084beef12","sha1":"8ef0c3433bb5cde43dd6088c53959285c66e902a","sha256":"c7be8ac3019bc2698950c8cbff2453fffb7b6f7ea7757267f2ef15522b306a8e","sha512":"5ebb9f6d529de7e99c4df6c05983edb9cc7c0b0ba6e3ecd2aff31c03675c70d3290a4cf5630ad2551bc56b8006ad40db42e0e2aa4443970f185accd30ca14e71","ssdeep":"","tlshash":"0bf05980e7ec354610333ca5baa960ce509cc1bac80344276eb04a4b54d603ea7939ad","first_seen":"2023-03-07T12:03:34Z","last_seen":"2026-05-02T14:56:08.777061Z","times_seen":891,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/uri-camp-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/uri-camp-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28044\r\nlast-modified: Sun, 30 Nov 2025 19:32:11 GMT\r\nvary: Accept-Encoding\r\netag: \"692c9bbb-6d8c\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUBEJ94%2Bzzw4cDoo2WPDRBsJ83o9y1xa4bhgqdq9zN3q5WAiwIt5m5vcuXMql80U2UjRejMBIae%2B7lw2m3NsPgOq84VC2HGYwcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd7c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":28044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"343d89bf4a0687b0a191409b0a5f01db","sha1":"e9c9fe7f4f31504df761a32d34d5b4a3c4c6f582","sha256":"bce32e97e43dd2ff0299dcf5e24ad6cc2e0d6793ac741d137299b640c497b332","sha512":"7ef25b42037d62e3900eed0627839984e7035a14648da7a666ebaad3c80b98fda00fe5234672e794f073a9d571399984f3562accdafbf804472fd07aa0e20745","ssdeep":"384:oL4gv7DtG2Nb7wGZx5OU5DLLW47M1Usk40cmfhlFgp7MUeviXocGR8waAFq:E4ENh7DYUpC47MasGhUvnELaAFq","tlshash":"50c2f1831770b44cd38cce906b502d23dd8968b2fd36e2ae1dbe294e556c229763b5f4","first_seen":"2025-12-07T12:26:59.23374Z","last_seen":"2025-12-07T12:26:59.23374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/plugins/perfmatters/js/analytics-minimal-v4.js?ver=ca272d8b4096","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/plugins/perfmatters/js/analytics-minimal-v4.js?ver=ca272d8b4096 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 31 Dec 2024 08:37:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6773ad4a-bc1\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BP54Te49hxBA4DxncjhONgDasEBiXj0HGJiaKLeLIQQ5Cf8RfmZdewb4FqERDfR7tto%2FxwQ0zzk85C1PK6ZIo4uZXuoDCkNRUw%3D\"}]}\r\ncf-ray: 9aa402e4ed923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3009,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3009), with no line terminators","md5":"ca272d8b40967105fb697a83138bd811","sha1":"7e99eb7866d0ecbe94e74aff075566df844fede1","sha256":"33e34b6da946e95f38240816f55dd8e6adc7c6f76d48bb7375394aa280ddf083","sha512":"429df9f1151dbcdca575105ca144e5eca60552ceba90dc921ff98b64d40c8b328aa271c1e5230831eaa74f47af12170b2be9948e3de047f0ae05c109109d67a6","ssdeep":"","tlshash":"ab51a91e970a57f746c483c6e4672136d2253075b6818c42766edd653424bf923e3f3d","first_seen":"2023-11-25T16:58:09Z","last_seen":"2026-05-01T23:15:58.183957Z","times_seen":122,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/menu.min.js?ver=284953f0e0a5","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/menu.min.js?ver=284953f0e0a5 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-27d7\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkfpTEJashnGGdzU8TBOY3tbPftdvvrFC6J3tM8wV2G4BPqC4pLJpXWVGRV8g%2FSOA8T85whPPckckWQre3MBTelVgPa4JTRllF0%3D\"}]}\r\ncf-ray: 9aa402e51d9b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":10199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10020)","md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-05-02T15:07:01.840555Z","times_seen":14966,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/slick/slick.min.js?ver=22f754161489","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/slick/slick.min.js?ver=22f754161489 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bef-ab69\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tkvlq0jB8LwTAcVlxkoTe80TeXqlvUJ5m0Dl%2Bb34iJOMxuQR4sGSkgY5RyVkbz%2FhYOMRo35gSr07Pa0vYAdyQxd3MKB9EZPADA%3D\"}]}\r\ncf-ray: 9aa402e53daa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":43881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32026)","md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T14:56:08.820454Z","times_seen":20019,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/09917e843f2c.loaders.min.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/09917e843f2c.loaders.min.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-959c\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hY%2BachztxMXbKeFFTwdOk%2Fxje20NLY8HvVlw%2Fnmat87YYJp1gnSJ4hT2Z6ocR7xP4KbRTvMwVkPcPFOAEd%2Fm57NLoMKGZAD%2F3Hk%3D\"}]}\r\ncf-ray: 9aa402e59db03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38300), with no line terminators","md5":"ce0b73fd7a87c8c7cfddf6aa8a7724b6","sha1":"42d570b7a0ee592d2fcdf358faadd28c468e4937","sha256":"aa7a46854244ebd6d3415cd68f47e43f8cc1544d24bf502555b332a36d490c84","sha512":"e64ff2016da3930ac9ec7630968d3ec38907de5ff39fca11718b273d5e1faa3a2b37932b9c1f782ee9403f88506d947819c2489b7f209cdaff77436f84256234","ssdeep":"768:5yUbK4AFGFxKAeGcYkYrYCY7wnxjgLJxe/9pMQpHMIyrwYTJJ3YNGwgZwk636wHV:cUbK4AFGFxKAeGcYkYrYCY7wnxjgLJxq","tlshash":"140390e74883678695274f5293dc4a24463c8a635b230deeb3353d0ec782a9d73d762b","first_seen":"2025-06-19T03:50:43.303349Z","last_seen":"2025-12-07T12:26:59.23804Z","times_seen":4,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/au-cat-mb.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/au-cat-mb.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 108609\r\nlast-modified: Fri, 12 Sep 2025 09:47:42 GMT\r\nvary: Accept-Encoding\r\netag: \"68c3ec3e-1a841\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOd7%2FonnzcAwZq2iecaeDIlJBjwWUXCTTcPZEx5D3ZfcKQb00wA61tQ1ZbmqAOyn1CaYO3oUWbA1T1%2BYp5%2FJ5ZDjo0a3zwsKHyeFB2%2BP0qE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e9db7e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":108609,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 380 x 47","md5":"94debac63e00ff7a15f00dbb782f56e9","sha1":"3db01827653aaef726ec681af51f7265e0cd0d58","sha256":"6cc6b9596107ba0f9e75b6db81bfb9571552a5cf1ac21a9f023f5ee78beb4749","sha512":"9c1533021381944c2b51ca0b0a3caa1d605a08dfc12fd68172079d7ab35833bf5a62925e19f47e24620cbeec8972f424164e087bbc2967fa62b425303f9c22b5","ssdeep":"3072:zRwtNYl4sl4s/LWv1hG2SjKv9T+bW5W5We:zaXI1jWv1w20ET+bmmb","tlshash":"9db3021f9afb4c5564c969fa684c36c22b71b1b0a7d8e4d38ac0f7c390ed14a7968d13","first_seen":"2025-12-07T12:26:59.240055Z","last_seen":"2025-12-07T12:26:59.240055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/thanh-tay-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/thanh-tay-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43174\r\nlast-modified: Fri, 05 Dec 2025 20:28:47 GMT\r\nvary: Accept-Encoding\r\netag: \"6933407f-a8a6\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGCvAfSr%2BESc0nxE3bRNdHjlFltEsSf9FbdJmhbqoGuPSPPnQoN%2BN5Nuq3KAk2vDyZVJ1Oi8ffkQ6i4TLFsXIe47jc7Jx6ApaYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4dd873181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":43174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 318x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5e3703598ad79d8b0d42c2e093ceaf6","sha1":"e251bddf39f3e09bb1d613b985c651b570def24c","sha256":"5d002d6edb3ee15e64e0f14452990bad58d8d3d9b2713b62ad864c6f0126e959","sha512":"1ffc725a8c128e85a5019c84a645e29b29393e6d319cea916471cdb6f272e052bad6cebd9bfd261144426949b4f440bf94aa37ca35edb3d5a183365fbf16af51","ssdeep":"768:wERWXGsZugLtKgrlEL1UrXGhx0ruFt91e2TgHmB781xfPqwAQVkxj0D1XDsJE:Fxx+GL1UrWH0086dBAr6wZVEQD1oE","tlshash":"0713f1a5368e205cb685493d8adf56a412a05ccc3fb4412b877fd2d38b4ce6e7ef6804","first_seen":"2025-12-07T12:26:59.241648Z","last_seen":"2025-12-07T12:26:59.241648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/hooks.min.js?ver=90e932bd9e62","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=90e932bd9e62 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Dec 2025 20:48:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930a20d-161d\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FQ0wU3s6Sri0JpLt4sjVDuppU4USCNF5RPBHEoNJzMFAv9zAFTPRyDmOXT%2FwoKE9W1gTP%2FSjnwYB4OoqUF3X5o%2B8xnxP2AlNo8%3D\"}]}\r\ncf-ray: 9aa402e51d9e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-05-02T16:31:34.603192Z","times_seen":148574,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/images/new.png","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/images/new.png HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1001\r\nlast-modified: Thu, 23 Oct 2025 21:12:30 GMT\r\nvary: Accept-Encoding\r\netag: \"68fa9a3e-3e9\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:25 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLgI94%2BlFzfFuvUS%2BBVcwb9EoTZyz0jZYlVwLJ34I3Cf6BNUWbI4plaLAoc9TFVFJGtlv02%2BGt%2Bb9m%2BRNloenQgTFUcFZnJStVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e87e003181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":1001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 16, 8-bit colormap, non-interlaced","md5":"dd7dd929e3f8e4e299666822f148bb3f","sha1":"16e677490e901c10ff1e28816bbe9b830d41997b","sha256":"8cbd83cbfdfc082c6bd875d950d431a44abeb39a7ce3985add346625f3443626","sha512":"fdc78a60b560dc51e4523bdd8c63875730de0a13076b644db35f956b684d7a8aba3008ed9b738c995c584c2aecc8eb95a0055d6378f2a5709853c0c4bebc1b32","ssdeep":"","tlshash":"14117dd21b54a869c50d9430072056038871edbcd27702823d30b20208369dd137a60c","first_seen":"2025-12-07T12:26:59.243973Z","last_seen":"2025-12-07T12:26:59.243973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2023/06/cropped-fav-cube-32x32.png","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-fav-cube-32x32.png HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1585\r\nlast-modified: Tue, 11 Mar 2025 20:24:09 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09be9-631\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BT%2F6iDk67QzdPSGn96Gy6Zhx5cQCgxXt9tdQpHfVgKa6TNTD33uJK9jDBCxtGKMQxt6P3zj43zKApJwwKxSUHe64jqIaKvXsLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402ec9e613181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"aee9502d91fe14e1da110feca97912a7","sha1":"ad4ac538044fe77b8d60cb529596aa963e6431f9","sha256":"bf5601ff07b66e36a93f6e89ce7ff667be017b993a6c1b0f655749c4653c5734","sha512":"174f86076d0c4c0ea9660ad3a815bf85dee2756f391cccb85d4ffb23fb447676f317b96a425c09f3bb77d155d8f64fc96fe7e79464b13de7cd09b232638213c4","ssdeep":"","tlshash":"2e312c5e83178e004e43e0d7a58716c2ed3ef368bf140c2ee817596acb5b415a6393ed","first_seen":"2025-12-07T12:26:59.245451Z","last_seen":"2025-12-07T12:26:59.245451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/vs-ban-pc.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/vs-ban-pc.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 113555\r\nlast-modified: Thu, 13 Nov 2025 20:19:47 GMT\r\nvary: Accept-Encoding\r\netag: \"69163d63-1bb93\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IkW1EPU0SnPsx1vfPVFhpuGnCPGpZ2U2J67YKmpP3Y9X2buIoJY%2FhYGN5HqC%2B0GCM24USiGeFqE8mLgmx8YxK65Wo%2FP1ZKYy31uOpdzbvQ%3D\"}]}\r\ncf-ray: 9aa402e57d7356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113555,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 550 x 68","md5":"4561dcd8174e7f6514a07ea0996bcd67","sha1":"f10ef30ac7ce4f7d2d14652ece68311e9febcc23","sha256":"de0d7a9c17fccc4bea04a89df20976310ee29d6408dcbe850f64a1cc9b9bb12e","sha512":"7c52b42aec2a208da346951271dbe7a817f8859c606cf542f99a1f55b7ddb5f84715e3afd1fc2dd5106c8f8b1ecb21ee27293d7766ddb01720f83ac271997ff3","ssdeep":"3072:zYerjm4cMyVJyNi2s66uLfbPUZEPUZtoq+cLYW6:Y6N9s66uzM1z6","tlshash":"20b3024eb5e5e0d21e76017733671c205eba84dc909a9d8a951cfeb67224f3cf488e47","first_seen":"2025-12-07T12:26:59.246717Z","last_seen":"2025-12-07T12:26:59.246717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":95,"dns":49,"connect":1,"send":0,"wait":205,"receive":66,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T12:26:24.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9aa402de79a18deb-OSL\r\ncf-cache-status: BYPASS\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Sun, 07 Dec 2025 12:24:32 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncdn-cache-control: max-age=2592000\r\ncf-apo-via: origin,no-cache\r\nx-cache: MISS\r\nx-cache-2: BYPASS\r\nx-content-type-options: nosniff\r\nx-flying-press-cache: HIT\r\nx-flying-press-source: PHP\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBKNfQ3o8w5IMiVEyPhBN2hZt%2FvOBsh5VvPiIlpnrk41OxQ7fsvwLWoUtnJp0pRk61W0U16vt4hjUyv%2BCNrEiieOF9x9GACo%2B9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"jQuery Migrate:9","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Perfmatters","description":"Perfmatters is a performance optimisation plugin for WordPress websites.","website":"https://perfmatters.io","common_platform_enumeration":"","icon":"Perfmatters.svg","categories":["WordPress plugins","Performance"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Yoast SEO Premium:26.2","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395462,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (44855)","md5":"597946a502005352464f2db4f39f22bf","sha1":"0e7e6a93415320d2ae04b5268d2da4f2d138643a","sha256":"a43ee290154c1610dbd9164c8ef88e391f2d296e78eb40a2b72fb4ee84965fca","sha512":"ada3898d87824f86d41c8eaa81034af3df8c063a58bd13f78deeb56d7b7d585a7c61280fb0b6bcc353e9ecd7cbf47742c041c197c3eb31e2fff03de18895d367","ssdeep":"12288:h2ziJNKyazlcfPdLmP0HeJypVBBtEqEqnWXFoS2WXFV:5myazlcfPdLEoBtEqExn","tlshash":"31840a7280a920651137c39676c47b186a6ec233d6024fe9f27d96ac8bc7ec513f375a","first_seen":"2025-12-07T12:26:59.248104Z","last_seen":"2025-12-07T12:26:59.248104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":63,"dns":47,"connect":1,"send":0,"wait":561,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/jquery.min.js?ver=826eb77e86b0","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=826eb77e86b0 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-15601\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO10yLP7450lxwRhNTxuhVGqwNHGZSXOCfdzv3qZjvMw%2B1rpJ2FzMdvO7u44CdJ5XlbNZEAkCz2N43h%2Bv92hdUu9sYRy6Dy%2B4fE%3D\"}]}\r\ncf-ray: 9aa402e49d6f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-02T16:30:59.679913Z","times_seen":772221,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/js/shuffle.min.js?ver=944b9d1ad68d","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/js/shuffle.min.js?ver=944b9d1ad68d HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bef-50f5\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ge7Kh468elG07%2FLrz3UmOHd2pC5UC50DoGksJWAWfD0346pckZFsrGm0xC1YinfRu0pulxDLndBgi0O8C0ks7xjkvrCbmWDJJpg%3D\"}]}\r\ncf-ray: 9aa402e4ad743181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20725,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20684)","md5":"944b9d1ad68ddaa1f6207e08f6c9f962","sha1":"0487b56e38761046b11eab85e706758bfea112c2","sha256":"6def1bda699ef5e604dde98b184bb397b4b13483b2866ef5fb52fe3af531310b","sha512":"676a3dc65b3d851423b735341bca93c5a8fd732560ab0fdbda8719dd7f4b6c5fce8979dbc91ec4fdde7e625f2649eba5356efbc3dbd7ab98615076abcda70a2b","ssdeep":"192:++B/5MOxjchawVCujHqE1bvzf8DY3SfJIIEiDwIn3Mf9lnKtC/Q8/oAIvQyM/u3I:+ShMKyvmob7zCByBIn6xhHwAIMBv","tlshash":"099295997241762189c7b17554bf020eb23aa92476c6c08cf036dde66d78c8eb473f78","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-05-02T07:33:21.968036Z","times_seen":1344,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/02/logo-hentaicb.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/logo-hentaicb.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1338\r\nlast-modified: Tue, 11 Mar 2025 20:24:12 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bec-53a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FnE0ZeqLLbsabGCmZrVoi0oNol29RZDZZzQmapGV96mV%2F8TkQsLPBESg9VV6YQaliVL%2FRtvzexkm%2BL1Io0uVYBYb8ezYP4FxYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4ad773181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be901accc3a5146ea8c933f8a5daf85a","sha1":"87b05623a4e6f7cb1468f5d20b23ddf7e15fa655","sha256":"ade74d138dbe89900a513b7f8da02ae03e0946e5d2feca8fa622f859050e0059","sha512":"7bce8956c57ecb90c0c63d6667c06239af5d85f2ca684a1d89fbd2b0918a943a9b0fa2096fdb7a7be16531f19970a34bb2518f9ee68e418407b25ca69f9cd33c","ssdeep":"","tlshash":"9f21b6b306a75367e49f5d38029868464cd59a1b32e66110e0a394ac29dfe9666b0248","first_seen":"2025-12-07T12:26:59.251069Z","last_seen":"2025-12-07T12:26:59.251069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/uploads/2025/12/fuuko-va-thieu-chu-318x450.webp","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/fuuko-va-thieu-chu-318x450.webp HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37722\r\nlast-modified: Mon, 01 Dec 2025 10:43:23 GMT\r\nvary: Accept-Encoding\r\netag: \"692d714b-935a\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcLnWGwMQRKeAHFar%2F5t%2FQj9F8lrbbs3VajdrBqfbyJZNjY6GkVwzl8pMFwQmu8x1C9KpdmMlBtALBa9yl5UgVf9hxJjUiAzRYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e4bd7d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96421d7e4b847bb8d2f1e0f94b5b6a22","sha1":"e10a4518bb5caffd475d483365b1989e8e646e6b","sha256":"6dd81ca96db930e72775d5c157c0f1dfcc63a2bbd6fa040281aa32be2fb15950","sha512":"132fd698b07f3f771ccee37e1570b6573c5c478d14882879bd403e63c9eb838c0badf873ce0e0ed52b5a0f923cbcd2449b6a71111d2ec9612b5571eda9cf900d","ssdeep":"768:HOZtgoZzUOZm2Jnc626qYyEgQcIQ6O6rleOviYv4OMQ0LcjK:uPFZm2JnNUYyE3cYjrlDKYv0LH","tlshash":"4c03e278745b74034035af6839376fe2bc46b2a42a4ce4f575a17d60bceb3096fb2061","first_seen":"2025-12-07T12:26:59.252219Z","last_seen":"2025-12-07T12:26:59.252219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/jquery/ui/autocomplete.min.js?ver=6a53e18a345b","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=6a53e18a345b HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 11 Mar 2025 20:24:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67d09bf0-2158\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJcmBLX7zfc%2BNeg%2BXAk%2BYFy69mLnj5TOVmxE12z5GsPMZ0Fy3ZFRPpkNgvHrEPNOOVuViOMdxou9tM7t9EqZ1d0zzJBWOqir25Q%3D\"}]}\r\ncf-ray: 9aa402e53da83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8536,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8349)","md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-05-02T15:07:01.880194Z","times_seen":13694,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-includes/js/dist/a11y.min.js?ver=fc6bf7359b5d","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-includes/js/dist/a11y.min.js?ver=fc6bf7359b5d HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 03 Dec 2025 20:48:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930a20d-8a4\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:20 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D33R15dp5DeCMiBlfAgYKgQPTmtZTeE5H8Aoxjn291EEgmFwfZkx0VI%2Bz%2BA%2FlTIUqStL7vTYL6B1ae5baj2pQrQilYQUzOPw9JY%3D\"}]}\r\ncf-ray: 9aa402e51da03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2176)","md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-05-02T15:32:02.344618Z","times_seen":26410,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/c7b667a9e064.style.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/c7b667a9e064.style.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-44868\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvAit1mxASUqx2cU57%2BLbIVyjp18SCz%2Bf0Z7g7mIV3vKS8lUSVD5LNpSyo%2FPZ30b6IuEQTwQK1gCGuFIQz8PFmpYt1nQT3X54hM%3D\"}]}\r\ncf-ray: 9aa402e59db23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":280680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45841)","md5":"b09157d8ea0dbfbdc289f8f996539fff","sha1":"48e2a245ee196ad4bea4dc17d04eb0910e74eb84","sha256":"a5b3053b781cada193d4871d0788ee990c7b75177f99b8fcf1942a123ec6d464","sha512":"8f839651348fda14932984ed19c999b64ead15ce34948fd3e4cddef409d254103e88d133be1df6292838808f5484ff684310f79bf57338058f4e907413602cf3","ssdeep":"6144:jzKzrl/W/yGzObAlG/J+X4yLzlcfPdLxP0FteItEypVz:jzKzrl/W/yGzObAlGx+X4yLzlcfPdLx6","tlshash":"e454b8318094121c237bc37e7dc8bb087d6dc131e6135aeda575966ccacbad612f2b89","first_seen":"2025-12-07T12:26:59.254929Z","last_seen":"2025-12-07T12:26:59.254929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/47c53c6ddea8.widget-options.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/47c53c6ddea8.widget-options.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-841\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:21 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jrGEpeZUNyjLF970%2BMRwke%2FWG7esfQRN2htJSKsu7%2Bg6KMz%2BCq55pjNoiNWe2w%2F7MOovQoUGFD558Nb5u6sGIwGSVVZOKd1eJfg%3D\"}]}\r\ncf-ray: 9aa402e5adb53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2113), with no line terminators","md5":"031f651aad5f18cd31bbb7f28b4635d5","sha1":"d3cca185a168e3b7d6b2897fa57d142bd394b3e5","sha256":"0c0eb73c12355c6f822cb24a3aba66a6b144d6a25dd02ef244736d36938f95c5","sha512":"df645dae2ffd5b6cc899e39a3db0b64490719d90bc60aa06b252993c53f41e5bc269bb128ebeee638304895748756505b93937a3e1fc3b98c9ccb972da1ca2c8","ssdeep":"","tlshash":"bd4114879a93330b5036e92d47dda3a3d93676474fca5be64cc86c60afdac40213d9a4","first_seen":"2023-08-13T00:26:45Z","last_seen":"2026-05-02T03:12:31.446214Z","times_seen":315,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/2d96d4063805.ionicons.min.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/2d96d4063805.ionicons.min.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-b224\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:22 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5YqtdLl8%2BoerAKeuDzIrvYE1R3Xm5ps2cbdXLo0efFl%2BsJBLVTdYXV5fziScLAVMXRlgaVew%2BQALf4p87uEs6ytcaNPbNnv9%2FI%3D\"}]}\r\ncf-ray: 9aa402e5adb83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":45604,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43745)","md5":"49bfa7035e16c9917940d551304aae3b","sha1":"57a0ca64ad4e72c9651ba5c2fa8c4486e9aff2a1","sha256":"b2146761bc66c96c1db749c0ed45de9ccdcf2505f9d4c4fd1f0c85ba2ce62bad","sha512":"773ccf7a4ddb21bf0dedb33a5a460d61a013a30f99078c1abe317926884cc3d9f59603d0e2527f71f5abbcdd4419b30aeec82c411fcaf730f33eb4d186f243bb","ssdeep":"768:/4/Fr0VnCv3Kji/sBLRyY99GZ+d4cJRsxVonU6hP:/4dr0VE3KssaY5RAW","tlshash":"0823dee9d04e0cd06b32c853830a7b5d6835f6f6e1444de9e02fc1ad2acb215a6e5b3d","first_seen":"2025-12-07T12:26:59.256982Z","last_seen":"2025-12-07T12:26:59.256982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/css/fonts/ionicons/fonts/ionicons.woff2?v=4.5.10-1","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/css/fonts/ionicons/fonts/ionicons.woff2?v=4.5.10-1 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50556\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bef-c57c\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Mon, 07 Dec 2026 10:58:21 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVsR5QkYaVbzwed5TS0rZJyfJX2Y3a6nYQfGRB%2F%2BHjwyLKnTKh%2FPP1ALaaOn8NHdqsAUjp%2BqU5ty2EzK%2FnP%2BjTM0wzLsXMg%2B5Q8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e88e013181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":50556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50556, version 1.0","md5":"96f1c901c087fb64019f7665f7f8aca6","sha1":"60c9e10a709815148bf4a9b333a396692739cd5c","sha256":"2d02d165cb720aec2fde78a93113a459729e0503951353f719076bc5b4a7a845","sha512":"f237649aa00c321dad0e6569c525c7eeeba3ca0b0da27e6a11c6a3fd7d8488dd70143764aab810b90fc30555b72395ef1ab96a196cb3c40598d7817d51d21fd9","ssdeep":"768:Jnkadu6y6VA95+4nal3yzjHHtEoXgaiAB4tTwShdVeJUU8rwXYbPbHbMQd:5q6y/zXat8jHH/Xpis4VZdVenXgP7bT","tlshash":"9333010cd1c20bbbeed82173ec949c02e1edeac910f09d956179ac8f6d661940e596ff","first_seen":"2023-04-05T08:46:20Z","last_seen":"2026-05-02T14:56:08.752329Z","times_seen":3776,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/au-cat-pc.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/au-cat-pc.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 140720\r\nlast-modified: Fri, 12 Sep 2025 09:47:42 GMT\r\nvary: Accept-Encoding\r\netag: \"68c3ec3e-225b0\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 00:52:51 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjHeP8GsqsAzsyhGuEWAVeTZyUZaK8NT8vDq%2FgpbOHh%2FMhC3NZFirh4aFqJeSERe6XZFHz5%2BeiOkOc11LS7gHiOunfTMsxx5O3tRi0Yl3T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402e9db7d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]}],"data":{"size":140720,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 550 x 68","md5":"9bf37f5c68a9c47aa3a11a4ae192f8df","sha1":"7b36c7fc37a946ee679dd667a92c41c749047ba3","sha256":"d8ef3457fd01b1f411d3a1df7684b04839bb10c660ecbc442ab8f2cfd7601cd7","sha512":"39454eb52e5448d9c573abf5654bad2a3399f9ff4ad4e1138dd7a625adc826d24235870c33b10c3037e6991506b6bc60b05e09a3d38723debb36af156e165826","ssdeep":"1536:qt+lMoN9L+L9L+L9L+LhW+zAe7muAKONwS+rFoTkc/3I+rFi+hccu1qx2kXhhX5x:jdkkG1mgONwhxohLxi8ccu1q/WXA","tlshash":"b2d302ca2bc8008d3c7e51e4e20f116b1bf5706ceda50582c9cfabe7d55060f699daa7","first_seen":"2025-12-07T12:26:59.258575Z","last_seen":"2025-12-07T12:26:59.258575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bundlemoviepumice.com/get/1895656?id=1895656\u0026jp=_claoxzbfvbfguoefhetzcg\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.643-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=g5SQL7zCKfrV\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=mXfTt95aHR0cHM6Ly8ydGVuY2IudG9wLw\u0026afid=2930428041413120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1727\u0026rlp=%5B0%2C47%2C111%2C74%2C259%2C12691%2C9057%2C12066%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"bundlemoviepumice.com","domain":"bundlemoviepumice.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bundlemoviepumice.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:35 GMT","end":"Wed, 21 Jan 2026 14:24:34 GMT"},"fingerprint":{"sha1":"DA:88:07:3B:D2:D1:3B:9F:27:5F:6C:49:13:6C:AE:B8:11:17:22:39","sha256":"5C:79:46:7D:01:B3:34:5B:6A:DA:24:4B:09:56:F1:34:13:DD:76:5D:EE:2A:39:BE:D5:C8:BC:4D:F8:9C:65:B9"}}},"request":{"raw":"GET /get/1895656?id=1895656\u0026jp=_claoxzbfvbfguoefhetzcg\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.643-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=g5SQL7zCKfrV\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=mXfTt95aHR0cHM6Ly8ydGVuY2IudG9wLw\u0026afid=2930428041413120\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=0\u0026pload=1727\u0026rlp=%5B0%2C47%2C111%2C74%2C259%2C12691%2C9057%2C12066%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: bundlemoviepumice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\nUID=2512070726538a1094b4e043f2a358a530fa; Path=/; Expires=Sun, 10 Jan 2027 12:26:26 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3241), with no line terminators","md5":"5bdb71575283311b83545a929205bc3f","sha1":"ed1e3ed0ae077d73f805d4c1bf0bce7e57b85b1f","sha256":"f5a26074073898c78771ed3ea220a3753a219be3af8138db42c486cfb88226d3","sha512":"fd17b3a84064ba4551fb86ce09cf8c4f4a00852fcbc3bda33949efedc49e2c132d1023f92fbf0ce29f07a576291cc3ec6d26b9a9a811fdcc8692bd7c875a4dae","ssdeep":"","tlshash":"ea6152d8f00ae084877525784dbc4d3bae6c2bb81d5a5b5414d9dfaf50cc37ca713689","first_seen":"2025-12-07T12:26:59.259983Z","last_seen":"2025-12-07T12:26:59.259983Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.hentaicube.xyz/qcs/68-ban-pc.gif","fqdn":"cdn.hentaicube.xyz","domain":"hentaicube.xyz","tld":"xyz"},"ip":{"addr":"172.67.199.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaicube.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 17:22:44 GMT","end":"Thu, 22 Jan 2026 18:21:08 GMT"},"fingerprint":{"sha1":"F0:14:D4:B4:B5:7B:13:DF:D7:73:60:A8:1F:66:82:B7:46:79:80:FF","sha256":"75:4A:74:24:04:51:24:99:98:87:56:DC:E1:86:FD:50:6B:FF:E3:3C:A2:51:3E:EE:5D:25:36:B6:A3:35:05:61"}}},"request":{"raw":"GET /qcs/68-ban-pc.gif HTTP/1.1\r\nHost: cdn.hentaicube.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 239151\r\nlast-modified: Fri, 12 Sep 2025 09:45:33 GMT\r\nvary: Accept-Encoding\r\netag: \"68c3ebbd-3a62f\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 01:47:25 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhirzeVQgY4x8AD%2FJBvHi0feUHP7ew6OVDvFVsyY1pwfvEXkW113thGN%2ByQDW9MQ7%2BjVRrx7j8mNU5Wx8rbeA%2BwLQk3ctARrbRg0qgP7h7U%3D\"}]}\r\ncf-ray: 9aa402e57d7f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":239151,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 550 x 68","md5":"fe80dca40ec06059cf565ada31ac7b89","sha1":"2f47e6855c47a30a37ee707ad04f53aa9346dc90","sha256":"c1738a3050ad4d7fc2eb6941271db92e0fe92feec3b4dbc6dc6dcc291deae558","sha512":"1468f5205516cc04baa37f4c0f26013a5ad70f78b28ac7639cbed971d31d22bb5b642eaab8da2decd1dda033c57277d1511e102b3da326ff7c2000c0a8150d1d","ssdeep":"6144:su7aJ+vAonvFc5pdf0YvyF0wWFJ6yffjcjog40d9t:su7aURntCdf0YuDyffoj9bt","tlshash":"e634126f95090db41912243020bb8fa72cf8d492a4dead339d1db9cb375a27e949cf17","first_seen":"2025-12-07T12:26:59.261129Z","last_seen":"2025-12-07T12:26:59.261129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":93,"dns":50,"connect":1,"send":0,"wait":190,"receive":28,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/cache/flying-press/d432e4222814.bootstrap.min.css","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:25.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/cache/flying-press/d432e4222814.bootstrap.min.css HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 15:07:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6929bac8-2759d\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Tue, 06 Jan 2026 10:58:21 GMT\r\ncache-control: public, max-age=2678400, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr%2F5MIwt8QeIs%2FGufLgUXyQhqRJ%2Bt0fOVXJn9wSzFCDXTpSj%2B9jOzThQaNmLrtISUXA9fq5h1qNGGe5gWAVIcuZ5%2BNMWQO%2BIGNo%3D\"}]}\r\ncf-ray: 9aa402e59db43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161181,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"67b9cab1b6fd4ac607aa9d63594ae25c","sha1":"3732a94a2569be3c06987ac2754d4fbd7fb1b989","sha256":"f87749606908be33b350f0a352989a02cc7bff5d53c154f24fc73d87de292f58","sha512":"c0f83694d362f0e61bc2701db91b7ac540bd497e26848bcd07f04d13da4b45c7e6a34cd52915c23ea7da61ac4a383907ddb9e6a3727332fbc9e09d73c9ccfcee","ssdeep":"1536:yM8iIPeA4TvmY+caqFVDchEDk8IXcoEE/4Y/uJHq3SYiLENM6HN26C:t8LlGJq3SYiLENM6HN26C","tlshash":"64f363a6f5a0312de4a7c61964d0bafe052f8255d7224bfbf827376487892c70a73d4c","first_seen":"2025-06-19T03:50:43.30696Z","last_seen":"2025-12-07T12:26:59.262475Z","times_seen":4,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2tencb.top/wp-content/themes/Hentaicube/app/lib/fontawesome/web-fonts-with-css/webfonts/fa-solid-900.woff2","fqdn":"2tencb.top","domain":"2tencb.top","tld":"top"},"ip":{"addr":"172.67.178.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2tencb.top/","date":"2025-12-07T12:26:26.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2tencb.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 16:56:59 GMT","end":"Wed, 14 Jan 2026 17:55:44 GMT"},"fingerprint":{"sha1":"5E:B7:62:6F:E5:85:47:DE:A0:0C:53:14:81:E7:4A:04:37:A2:FA:13","sha256":"D7:07:75:2B:47:D5:DF:54:D2:9E:87:92:6D:4F:FA:0D:FB:F1:A2:F5:B9:3D:27:9D:17:A8:63:07:78:53:A2:4C"}}},"request":{"raw":"GET /wp-content/themes/Hentaicube/app/lib/fontawesome/web-fonts-with-css/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: 2tencb.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2tencb.top/wp-content/cache/flying-press/74bab4578692.all.min.css\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Dec 2025 12:26:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Tue, 11 Mar 2025 20:24:15 GMT\r\nvary: Accept-Encoding\r\netag: \"67d09bef-13174\"\r\nserver: cloudflare\r\nx-powered-by: centminmod\r\nexpires: Mon, 07 Dec 2026 10:58:22 GMT\r\ncache-control: public, max-age=31536000, must-revalidate, proxy-revalidate\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2B3wgzsA%2B5bV83nWpzKPfsLlcD7FxZh5oG%2FKHr9BLA05zVOoOCSJzP39co3ZBW%2BwwOALcGzHgr2HGNRCErdMw3sRIGNTewF2gO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa402ea6e293181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Centminmod","description":"","website":"https://centminmod.com","common_platform_enumeration":"","icon":"centminmod.png","categories":["Web servers"]},{"name":"CentOS","description":"CentOS is a Linux distribution that provides a free, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL).","website":"https://centos.org","common_platform_enumeration":"cpe:2.3:o:centos:centos:*:*:*:*:*:*:*:*","icon":"CentOS.svg","categories":["Operating systems"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-05-02T16:30:59.908854Z","times_seen":134022,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"2tencb.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}