{"report_id":"4bbd52db-9f09-4c26-90ba-cb228ce316dd","version":6,"status":"done","tags":[],"date":"2025-11-05T08:13:05Z","url":{"schema":"http","addr":"everythingwithpodcasting.com/","fqdn":"everythingwithpodcasting.com","domain":"everythingwithpodcasting.com","tld":"com"},"ip":{"addr":"172.67.157.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"doctor-maths.com/","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"title":"Top 15 game tài xỉu uy tín với hệ thống bảo mật tiên tiến","dom":{"size":84709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (504)","md5":"595c877d102617cfd5095ac548a429a8","sha1":"b820b9b7293d3a0f0b93d9317044f47c609352ef","sha256":"254a7aa25da3dd1d98bb6c096927c1cb77d99b531b73f80208737335b89c9315","sha512":"e646353a101379977921f9f820e2253a4c6defd4d852a4e95aec109960c30a84b8ee0bffd75bd2e34789dfb05c90ad8bbf2c8a68e7dfc23d2ae0ce20c809df3b","ssdeep":"768:+ZsT6y6OOM1GTD3Z668Cz0e73WRtCs91RMMdIGGjoDqejLq0xMJ9Ne+NXuQ5rplF:YOOJHoxjLq2i9NeSXuYvoScx4t","tlshash":"6483e72310e81517004a81aed1ad791d5fe7b82bf7c8a600f5fd41a5bf91ee19e23bc9","dom_hash":"domhashfd94baa049e667db8662d9f346596256","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"everythingwithpodcasting.com/","fqdn":"everythingwithpodcasting.com","domain":"everythingwithpodcasting.com","tld":"com"},"ip":{"addr":"172.67.157.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-10T08:13:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-05T08:12:53Z","timestamp":1762330373,"ip_dst":{"addr":"172.65.190.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":57760,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-05T08:12:53.111357+0000\",\"flow_id\":821893630262455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":57760,\"dest_ip\":\"172.65.190.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"www.mky2.icu\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":206,\"start\":\"2025-11-05T08:07:59.654519+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"everythingwithpodcasting.com","ip":{"addr":"104.21.40.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-10-04","domain_rank":0,"first_seen":"2025-11-05T08:13:06.688304Z","last_seen":"2025-11-05T08:13:06.688304Z","alert_count":0,"request_count":1,"received_data":56281,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":88548,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnabc.online","ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-06","domain_rank":1692004,"first_seen":"2024-12-09T04:03:12.562058Z","last_seen":"2025-11-04T06:51:15.605735Z","alert_count":0,"request_count":21,"received_data":1602884,"sent_data":9616,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-30T13:54:25.120134Z","alert_count":0,"request_count":1,"received_data":850,"sent_data":1111,"comment":"","tags":null,"fingerprints":null},{"fqdn":"doctor-maths.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-13","domain_rank":0,"first_seen":"2025-11-05T08:13:06.692561Z","last_seen":"2025-11-05T08:13:06.692561Z","alert_count":0,"request_count":5,"received_data":468983,"sent_data":2409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":1,"received_data":429561,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"test.topthethao.tv","ip":{"addr":"104.21.78.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-01-19T02:39:14.717351Z","last_seen":"2025-11-04T06:51:17.676319Z","alert_count":0,"request_count":1,"received_data":42337,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-05T08:12:53Z","timestamp":1762330373,"ip_dst":{"addr":"172.65.190.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.9","port":57760,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-05T08:12:53.111357+0000\",\"flow_id\":821893630262455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":57760,\"dest_ip\":\"172.65.190.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"www.mky2.icu\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":206,\"start\":\"2025-11-05T08:07:59.654519+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"doctor-maths.com/","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52b3f410e4972e52b1bcbc27efc20324","sha1":"b28d7de80a36178991031c2b70a57f5ab544db19","sha256":"85caf2768f5faecfd9e202dd7d7c8a6b80f7d0f1a8ca775de4d2ffb502bac34b","sha512":"09850b676b324830b1cb352aa27ae289c0d7980fca8fe211b7821f797292475a0fa8de8e4694d3379f133010f08021134ea20159c00d1349247b2e608d9fa98b","ssdeep":"","tlshash":"a3c08c8c250b0cb041ab2a050b6fa200b0663213a4e09a22395e73044f20e03e7a8818","size":193,"data":"","first_seen":"2025-11-05T08:13:12.60958Z","last_seen":"2026-03-23T11:38:47.970621Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-12T13:06:31.756258Z","times_seen":139338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/loadtemplate.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"194d2a990e85774b437c1c3121a40921","sha1":"cdd8ebe3751703d0f584c588765201e78d488d12","sha256":"ea5481279515b7c81f0c6c88cca959153850e80f66260f522026371e84256828","sha512":"40c7dc36111ea878d85214bfcd30b7ba42c5998421aab1b8415126dc3faea1660411a7e064424fb3722d24f4b375b80a4a17987e985cd38c1fafb8e03297091d","ssdeep":"48:w8jzDoBvG0/9XBYGJZ/qB7Gm/wBYG00YBlGsAKBBNGOdgcTBwGId0wRKUkjWMN5E:w8boB9XHVqNwRYWKNgcTyWxWMr6v","tlshash":"c6911d873a60c55bd136b6b5cbff6a01ea12651f1140da02bd7d18b0cf76a91f216f1c","size":4622,"data":"","first_seen":"2025-03-08T12:11:10.702758Z","last_seen":"2026-04-11T21:52:42.910891Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/assets/js/script.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec11a0091e33b389e33564b276c59fb","sha1":"3e6727863dbb6733dfc7436df8958925df58db2b","sha256":"bd5adb71b35c3513ec5afbef85ac0f9a3d0902af9fdec06ea8bcd5a98f0053c3","sha512":"3f083bb968b754dccd6aff34a10da122a24d3fdf3c9336d7cb7d4597e01a1b168213478fd7944fff0db01c877a58393590ed0c24077d0623a6896a70d6056260","ssdeep":"","tlshash":"2b21f1a2d25815724133d33917496789fdb2445b6100c2253e6c488d3ff6d96a4f1ffa","size":1399,"data":"","first_seen":"2025-11-05T08:13:12.601982Z","last_seen":"2026-03-23T11:38:47.920171Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-12T12:57:59.786789Z","times_seen":300557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/linkbanner.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d9856d0c74cd6246b0b4417beffd9ac","sha1":"7a8694964aece074d4c665069b5632f59e2fd98d","sha256":"76068f30244340818b6b8126a1c93cf4c44743e03cc418c1d26d60d3ae9d75e1","sha512":"857bd81e6a616c2a1413d626c929eda7b28487c03b3bfc3b7dad932e9d40a5af007c5abe9d8b330ec07bd2dea5304e0a03f3b052b97ebd1d21066c07cf0976c3","ssdeep":"","tlshash":"8031f652ae3c8ab434e95dbc83b8a612f9dd758fcce041a7b1405c82af7c45c62ca34d","size":1548,"data":"","first_seen":"2025-05-05T19:50:06.76695Z","last_seen":"2026-04-11T21:52:42.9381Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2eae15103935aac1ecc9f59817b3740","sha1":"755a1b6cc960c20679845d2a94cd32d584fd9646","sha256":"f6f9e265da255ef56fc1deba51ee1ea5237a0d67e0cb7401b0c2c8d1cc580fb2","sha512":"5387373715ebf400ccf6533df5284aeb2d821e9a1628dc1c89de1fbba1175b1c85fe389afb329042edeffb694bee1f58e31a468c8591ed42407579bd89b45fa6","ssdeep":"","tlshash":"4801b553ee2941646b5499a4b23df55ab1cf604fcdcbc005f10dd4035f281e921da3cc","size":825,"data":"","first_seen":"2025-11-05T08:13:12.610625Z","last_seen":"2025-12-09T11:55:41.254527Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/banner_ncut.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"965b9660e06079694ebbedad591000ed","sha1":"fd4374d61ad4dc7f1baff4eaf54e69c0eb575ee1","sha256":"6ddba0e5467c996b7749af2cbdd30ede2599b69a2b72263fe5fdfa604fe4d97e","sha512":"a325f0402bbb715a3eeeb502b59c5e37b11c4213e6636e7c367b8458e699508794a36d6a40cae60301d15fd08e813dbfb9c2ec87d4239f7e6269d1594028f371","ssdeep":"192:9jlC6zX63Xv3O5qe8xUiIieJ+TyVFwCAA:9jlCiqe6UiIieJ+TyVFwCAA","tlshash":"a6028319b444516500bbb379af7b5a08fa7a001be3439e043ecc5ad15fb191825a7ffc","size":8426,"data":"","first_seen":"2025-10-11T21:48:07.451469Z","last_seen":"2026-03-23T11:38:47.969089Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CMJ2TFY4TW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a62c4a6002600500f2c1f0fc11ab96ea","sha1":"1857b9b289e11506da2c801f7e2b19886ec28e8c","sha256":"30fbe0e2584a849c346868ded29fabe260463956ffd01329d705878eefa1c6f8","sha512":"538d03ef15c7ad80d3c65acdb9e36812ac08f6fec3b1ca1b3ac61020b18f0a5e3ad8a630ea757650a8436f0f2558572567563964886d04f6fef9ac3d9c0582ca","ssdeep":"6144:bBEWF4XJN1tyXRnNaBOgpmbv7dQIYhzO+PK3sr:9/FWb2XRnNCGYhR","tlshash":"ff941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","size":428957,"data":"","first_seen":"2025-11-05T08:13:12.587953Z","last_seen":"2025-11-05T08:13:12.587953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/assets/imgs/banner_taixiu.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/assets/imgs/banner_taixiu.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnabc.online/themes/taixiu/assets/css/style.css?va68=051125081234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:29:31 GMT\r\netag: \"5d8ed-6322985465427\"\r\naccept-ranges: bytes\r\ncontent-length: 383213\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2FjMo955jzOXyEbxEvQspTYwpsbrlPtX533dgejBa9wsLuw1d3CoiS8AS2WB7ziXagqIcACPpyaS0okloNIyoer8OUHay078ub7SU7M%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae3483b641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 518, 8-bit colormap, non-interlaced","md5":"c04c009e4bdd4c8350ea0e9efddb8f69","sha1":"76bb70511382cd3df399a2213520220864225682","sha256":"347b8b62544347ae63d1f06e7522b3b9d77469d3fb16689cd3e0b4efd087ceba","sha512":"b41adb5a78c50a865ce80c67afe27ea0f28d9607e321a470a031d18e34f1c20eb29ce8cf0a477898c6192d62166428022efbd0bdca8f5bc339c2f9e0391fc61c","ssdeep":"6144:Ca6INX3bW4mRCXZwhdDBJY3JcxG6IgfRylLKfrujDajWcNArQ7XyrGFN36xrU+v:CaXNXL40XSZIZcE1uNC/adAoyrANKpUU","tlshash":"ac84235185330780ab2fdce6678adcdb4d499822755b9b8a734a6fe7c8f0c8e01c6d85","first_seen":"2025-11-05T08:13:12.575825Z","last_seen":"2025-11-18T18:04:59.038655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-CMJ2TFY4TW\u0026gtm=45je5b31v9197395536za200zd9197395536\u0026_p=1762330364156\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=597288281.1762330364\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115583767~115616986~115938465~115938468~116217636~116217638\u0026sid=1762330364\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdoctor-maths.com%2F\u0026dt=Top%2015%20game%20t%C3%A0i%20x%E1%BB%89u%20uy%20t%C3%ADn%20v%E1%BB%9Bi%20h%E1%BB%87%20th%E1%BB%91ng%20b%E1%BA%A3o%20m%E1%BA%ADt%20ti%C3%AAn%20ti%E1%BA%BFn\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1777","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-CMJ2TFY4TW\u0026gtm=45je5b31v9197395536za200zd9197395536\u0026_p=1762330364156\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=597288281.1762330364\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115583767~115616986~115938465~115938468~116217636~116217638\u0026sid=1762330364\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fdoctor-maths.com%2F\u0026dt=Top%2015%20game%20t%C3%A0i%20x%E1%BB%89u%20uy%20t%C3%ADn%20v%E1%BB%9Bi%20h%E1%BB%87%20th%E1%BB%91ng%20b%E1%BA%A3o%20m%E1%BA%ADt%20ti%C3%AAn%20ti%E1%BA%BFn\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1777 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://doctor-maths.com/\r\nOrigin: https://doctor-maths.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://doctor-maths.com\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:106:0\r\nreport-to: {\"group\":\"ascnsrsggc:106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:106:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":77,"dns":0,"connect":8,"send":0,"wait":17,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/hitclub.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/hitclub.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:32 GMT\r\netag: \"2aef-63229770e7c65\"\r\naccept-ranges: bytes\r\ncontent-length: 10991\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUxQsUdxw5gKMSI8ajgK7fNbussvpHmPerAjPKIK9kszz7SUi1SyPl2xd4lewwvachD9bdOvWvlzY4%2BBGH4TKxLvP2G%2BGDSHMz6W6K8%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae34d6bc91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 311 x 151, 8-bit colormap, non-interlaced","md5":"63089eb69fadb549e6bcf800ba2a6b03","sha1":"ef0769a35f01014cf9aa8c91a5336cb046ed8c8a","sha256":"c71e6c22915f2425059c632017a97b424a71c52fb4455157ca774efa09301f7d","sha512":"a187a11db29f89adffb76e9d0ac99ad45233b017e2088fe48827c29f30cb7b46f61a94a788b268eff02c01dea2f04e1e98b896f48be6b036e3de198dfa3a663f","ssdeep":"192:4lVujwkjAcMoHgdjeSa2oj6QLQklR5V6+qvS/5bRoWcjq/1NIB08di/o:4W5jbGeBQmR50+qqUWcjQ3Up","tlshash":"1e32cfeae76e347a668786b94df285d00780118815e6bdf5c4ab3cc2eb03d67e590484","first_seen":"2025-11-05T08:13:12.577519Z","last_seen":"2025-11-18T18:04:59.067595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/win79.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/win79.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:34 GMT\r\netag: \"1583-6322977238b0a\"\r\naccept-ranges: bytes\r\ncontent-length: 5507\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdNXv9dPGzQwDBXljecwrqkf26BvzaeddxFKHXT68m82lIqPNlGakG2pmoDWguZou9GI7nrvwQSYM3PgDgO%2FRbU%2F3VPG%2FVeamGatdug%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae34d6bcc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 131, 8-bit colormap, non-interlaced","md5":"00509b48772ec7bf7c542e8cfafa7bdb","sha1":"ba7e5f1c7f912ce9f322ad066b5e89301327e95a","sha256":"7ca3bbefd7374ff29f2c2efeef1ca4a1fba5bb9881d5c54a228e0e613fa785aa","sha512":"6901825d60b4497fc1d58e33da732879852d0bd2d71139251c770a5821d3b4b150b5e66b1948c81c16d272229731333ae02a1365f475f39f003bf730a3af23c6","ssdeep":"96:p2wAJpUqhyHARDN20dJneSi3nsBssRPWdb2U/TtTe0yH0ZZewSFv8S:p2ZJj5UebiXsBDBWMITt60mgcwgr","tlshash":"16b19ef4e10c0a7cd8bb2be9a86fa4b91aa3e4080e14d5c05040d5774660b9ee173c9b","first_seen":"2025-11-05T08:13:12.578591Z","last_seen":"2025-11-18T18:04:59.059033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/public/slot.gif?i=4","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doctor-maths.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:53:21 GMT","end":"Sat, 24 Jan 2026 16:52:03 GMT"},"fingerprint":{"sha1":"13:4D:7A:E5:5D:5E:0D:BF:9F:D8:D2:B5:7D:BB:3B:CE:BA:D8:24:BD","sha256":"17:10:0F:88:BB:8E:0F:D3:0D:70:DC:E8:65:81:D1:87:F1:B0:C4:1B:61:01:03:E1:66:BD:78:7B:E7:E1:2F:8E"}}},"request":{"raw":"GET /public/slot.gif?i=4 HTTP/1.1\r\nHost: doctor-maths.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 142244\r\nlast-modified: Fri, 29 Aug 2025 08:59:08 GMT\r\netag: \"22ba4-63d7d3c1a3242\"\r\nage: 9\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuB1LMiPkxn8B3pbvcNGlA2uvZrIVZdgB5Kzou7dMy2HsVFL74sawA02kUp14lXyzuQo8jiaRSzFStJ4hmn95kyKkjOeBscRJn3aiZqMosI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 999ae348abcb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142244,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 510 x 510","md5":"db294a9c206218ee8577139c05dc9b37","sha1":"44afdabd5d23ddc6b64388c821a5138d1f0726f7","sha256":"0c7713323b8cda05713457ee5c3716755bd1703d81791a550ff0396860e1660d","sha512":"cb6cae6d2c27eea6ba2d6aed76a5e3ceceaa00e41dbfe49f900db1b29fb515c6a7df33d9dc71d1b1723d94c9f33b1979066d8bcfae379d054749253727c4d49a","ssdeep":"3072:7Z8r/J4WL6Ued9yJfoIILSaLeCMZ8pDls28hbqlpL5wBplEWVg:7G/JKV9yOIILSaLef32mqlpL5okWe","tlshash":"00d3128a8476ee909004c1cbb4fb9e6eb73c31e085d2bf34b1d35416a53876bf6117a9","first_seen":"2025-10-11T21:48:07.454871Z","last_seen":"2026-04-11T21:52:42.932614Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":673,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/public/daily.png","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doctor-maths.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:53:21 GMT","end":"Sat, 24 Jan 2026 16:52:03 GMT"},"fingerprint":{"sha1":"13:4D:7A:E5:5D:5E:0D:BF:9F:D8:D2:B5:7D:BB:3B:CE:BA:D8:24:BD","sha256":"17:10:0F:88:BB:8E:0F:D3:0D:70:DC:E8:65:81:D1:87:F1:B0:C4:1B:61:01:03:E1:66:BD:78:7B:E7:E1:2F:8E"}}},"request":{"raw":"GET /public/daily.png HTTP/1.1\r\nHost: doctor-maths.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 228017\r\nlast-modified: Tue, 12 Aug 2025 07:28:36 GMT\r\netag: \"37ab1-63c25fd03023a\"\r\nage: 9\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QW%2B8OA5lE0eHJvT3qKLz%2BBQ2gqn4yV9uaFEuW5cFvGre7NmFxx7fuYCjzGDmlgP1z%2FbZprARPq%2Fc0sLLESHNIdnPOv1%2BWwvw47MmwTqhIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 999ae348abce0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 510 x 510, 8-bit/color RGBA, non-interlaced","md5":"5621c6655c92a428450a0d9ef41cdbd7","sha1":"a67ba7c462be9312560e328f82fdb8fda3d758df","sha256":"381ef5ed3c3b232907546d2f32e3f088b0786f9d7e39605aa35d055e37f1a393","sha512":"3febeace3816f1400afcbf3ebb9019ccaf84fd164121e36d2ac455cf9efb42642129bc0aca9383c640b5891aadad62e229b07f0a6cdd81e0c2ade439ad6a72d2","ssdeep":"6144:wJhKNdPz6zCDemWiOvys5NU/DJTcU29Rx2:wmNdOmemWLyi0JTcPg","tlshash":"ec24239cdfbf9340b5a540c2731e8a2d7d7b0720ce5a54591a16ae899321fb9d03f23e","first_seen":"2025-10-11T21:48:07.457114Z","last_seen":"2026-04-11T21:52:42.925291Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":815,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/nhacaiuytin/icon.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/nhacaiuytin/icon.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nlast-modified: Sat, 05 Apr 2025 23:54:18 GMT\r\netag: \"7aa-63210b89adb86\"\r\ncontent-length: 1962\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaSVSSffxwSN9hPqHTYH%2BZFEX75HuMKJqdwvqkBSjAG2CrUQiZRMJVN4v49ypU4cZAQOHw93S9ipG8zYEtJnhyHDvmP5uGLP%2FVsYscc%3D\"}]}\r\ncf-ray: 999ae34c0baa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"c79c55a3b35c28f243e786cf63057df7","sha1":"06c5e44b945009f53de5eae8d315da3695a6bf45","sha256":"7cb6e8bcd5fb7294b7fc36804979e779cc39810e219bddcf60f5d5bd7e22d75a","sha512":"15f19e9d5c771e208e340157298fe2d3e5d0a521125f0120399f294508beb820100ce1635f012e99683f0cfa1d3e423739031c2e49508814b34ecea2cb9f9826","ssdeep":"","tlshash":"e9412c1468f567d0afdc5633484235f1d1e8e2b802d6cfa43d1753fd4b4b3895c8a215","first_seen":"2025-03-08T12:11:10.681025Z","last_seen":"2026-04-11T21:52:42.93137Z","times_seen":22,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/assets/imgs/logo_taixiu.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/assets/imgs/logo_taixiu.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 28323\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:29:33 GMT\r\netag: \"6ea3-63229856a186e\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Zx3itFEL5i8VEBe72bH5t3nhcYkQVbC7bxSXoPKgp3MdJGa3M46mAjAvwdYE9l%2Bl8rvhMFCDGYJfESX3A5K5%2B%2BuyZuffuAezRcc7rA%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 999ae34629980daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 73, 8-bit/color RGBA, non-interlaced","md5":"b43187e5fc3e79c10e80c5eacd6603b7","sha1":"62acd978202dbb61d002620c15f4a23ed8b37dd8","sha256":"c831ce769a852c07845de83ed114f9154655dc4e8716581d40be214902a6f3cc","sha512":"90a382a9f078e03ba3b24bc58ec52023869f471da19a836612db3a11ae8318fb6c3782174210df14b9004af2ce74f5d243eff4bcfed862c60872af21e1827a51","ssdeep":"384:RsnbjV9j48h51i4HwD9BwdZY8swAQEesEm2eje6nPCC6h8FwZdq432saQQ4oG67L:GvVHeD9CdUwAqpm5PP9jw2JAO3tZ","tlshash":"c3d2e14337e49499f51c8c33886e29279c3e58a9bfd5b0891ec4e1739c94c94eb1c9eb","first_seen":"2025-11-05T08:13:12.582309Z","last_seen":"2025-11-18T18:04:59.061916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":191,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/game-img-1.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/game-img-1.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:32 GMT\r\netag: \"48a5-6322977090dc4\"\r\naccept-ranges: bytes\r\ncontent-length: 18597\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONB7cKPI51UUihyyXw6jlIlKc7mY3Bnso2kFZMWzw7dvobWi%2FCHZZ8gy2iHGL5pbplbBDe8%2F3Q7LmEkhSNljt4Aj%2BLCgtdfC4pDExy4%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae34d5bc51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 377 x 183, 8-bit colormap, non-interlaced","md5":"354181033eb1ad90b90d907755023c62","sha1":"19825994cfa0b640242ab6bedd40b36e77618546","sha256":"a811d6ca69e1623b8c58793f929f182e45076e82d0fe0d69317e9e7ccb6e6a24","sha512":"e5729facc9b9ab98c8fa0373bfcdf3f940efa0524890afc548402c9a249240614d2899a76a40460d741d54d4d2eb63ebe22ffeb02ecf910b8ed8485520a9a876","ssdeep":"384:iqHNeyt87zGiB//UYE3NG0kohvLFtBopvP4IN2ZloYyHpn84pYxsKW:Jht87bFU7/ThopvP4INsloHpn84pYxsR","tlshash":"2f82d1d79717aca040c0f3b4edb94b44dbbe51ad514a2d8928be4fb01c0814edf83b5a","first_seen":"2025-11-05T08:13:12.583361Z","last_seen":"2025-11-18T18:04:59.073449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/rikvip.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/rikvip.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:33 GMT\r\netag: \"3a0b-63229771b7c88\"\r\naccept-ranges: bytes\r\ncontent-length: 14859\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9T%2FzYmHOqxy0qR5pKLMWClm9zVzXRi7RUtGISWAnxbGyg8o5pQNISP1duQ2LLV8KUV7%2FnCABnLJ1ODfNzpQVIsUHuhouTz4hjuVXzo%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae34d5bc81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 152, 8-bit colormap, non-interlaced","md5":"203040050974b715d86af52b371f1381","sha1":"2cc8743892a0f85b3e10af2ffdeaf4c9c5f1a4ed","sha256":"efb13db79264062b947ed603b9e86fc77c736dacdd9e70f5045251e2ffd78454","sha512":"d55c46a5f708434f56fcf9322bdc5d0db35a1d61ca51390cb15487b3ce1c16f1b2a02be7ad8751766e4e1d3a154c27f4e4f0ca801ec401d40af92ada37f5a822","ssdeep":"384:b5Rx/41Z/60+bRajfAjUnZMhD6V2yo4pTsJ2rFvrh7XTYOZh:nC1ZPWRacjUZ2Dk26pTEUNrhjTnZh","tlshash":"8762c073285c0431d99aa834ce399dfb384581a5254768588f6af6f9c459ffc20273db","first_seen":"2025-11-05T08:13:12.58439Z","last_seen":"2025-11-18T18:04:59.057533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/gemwin.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/gemwin.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nlast-modified: Mon, 07 Apr 2025 05:25:32 GMT\r\netag: \"28c5-63229770bbd44\"\r\ncontent-length: 10437\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\nx-cache-hits: 2\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6ultWz7cNwYGDxTGpEjnrXdZYDUcdGz0tVqAV0%2FHyRgzVBoGiZ6WoeMXw9vHQemiuTgyA3mrIygKtOzOGg0FlkkxgF%2FBdlQinr0bP8%3D\"}]}\r\ncf-ray: 999ae34d6bcb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 283 x 137, 8-bit colormap, non-interlaced","md5":"34c0d74a79dc2a27439543df5c1b87ad","sha1":"b1c96f2e7ce0ce785cd776b96f0b15e9aaaacc81","sha256":"2924a7f2e1096924e77d29cf12c715b98e33e32f40ae8cd41cad1a8cc0154847","sha512":"6f611c4caefa63572d39e95e568ceb683e96d45d80068641a125d9bed21443ad6ce3a4bff19dc6fbaae3d1b49d27666018b7d25fe6aadc31f73538c04cf713bf","ssdeep":"192:KHng/t4ZcJdAiwHYqGoPsXAQe8b/XYSVkF7WY+hm7os5EI4Eouw0scWLXc:+nYTZfOKw7xf2GotQWLs","tlshash":"5d22b059b2a579871f2e3f51a643f92b01387d7988ce8780eb5ce8c8d6b842370d509d","first_seen":"2025-11-05T08:13:12.585445Z","last_seen":"2025-11-18T18:04:59.034565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/assets/css/style.css?va68=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/assets/css/style.css?va68=051125081234 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 4125\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:29:31 GMT\r\netag: \"5943-6322985460607-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wOtK3sLJ98MFE8EWomZ%2FlB7SfypyPPqJMvIfJsVUrC7IjAmXpKTrqcUdsoNNbd3CNFt4gJV%2B9ywDw8xSgI%2FLEDjE%2BMw7vzEge9U0GOo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 999ae34639be0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22851,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"b4f72ad76dcb16e6f199a063f59ba5b1","sha1":"dd686f4c66ba6f466c5950e25ff51eb40adafa7e","sha256":"eb966fac3e1152a567908e81a549e611c06b6c74fb6ce286c4c114835711a4f3","sha512":"6614c0ed2e488b4430a945ab181d3c805ed7e293a504db67d1cec4ac576ac75d03d8bae2abb3424c366bed68cc15c7ba590e931b1fdee59c527f1f1a7d4d6389","ssdeep":"192:0Hg9CuVHni6Kn+mHt3Wiu28x/kMG5EG5uL4ryzBKa07KLHIWtKK+DlZV+H3x19Zr:uUA9iYKLIWY9lZQLjGqSk","tlshash":"7ca2638c961272456637da39efd24208f7e1c097cf075368bae99185abc52b82271fcc","first_seen":"2025-11-05T08:13:12.586684Z","last_seen":"2025-11-18T18:04:59.060533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":89,"dns":33,"connect":3,"send":0,"wait":194,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CMJ2TFY4TW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:40 GMT","end":"Mon, 05 Jan 2026 08:37:39 GMT"},"fingerprint":{"sha1":"A0:B4:2E:82:A1:27:01:D4:2F:43:C6:5A:4C:76:BD:AA:46:E7:DF:A1","sha256":"EE:18:CE:69:D5:34:E0:87:E6:41:61:C2:8F:06:9E:82:E4:85:2F:5E:5E:4B:99:79:9B:C2:6B:E3:A6:EC:EA:A9"}}},"request":{"raw":"GET /gtag/js?id=G-CMJ2TFY4TW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 05 Nov 2025 08:12:43 GMT\r\nexpires: Wed, 05 Nov 2025 08:12:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142633\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428957,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a62c4a6002600500f2c1f0fc11ab96ea","sha1":"1857b9b289e11506da2c801f7e2b19886ec28e8c","sha256":"30fbe0e2584a849c346868ded29fabe260463956ffd01329d705878eefa1c6f8","sha512":"538d03ef15c7ad80d3c65acdb9e36812ac08f6fec3b1ca1b3ac61020b18f0a5e3ad8a630ea757650a8436f0f2558572567563964886d04f6fef9ac3d9c0582ca","ssdeep":"6144:bBEWF4XJN1tyXRnNaBOgpmbv7dQIYhzO+PK3sr:9/FWb2XRnNCGYhR","tlshash":"ff941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","first_seen":"2025-11-05T08:13:12.587953Z","last_seen":"2025-11-05T08:13:12.587953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":153,"dns":1,"connect":14,"send":0,"wait":47,"receive":58,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/nhacaiuytin/icon.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/nhacaiuytin/icon.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nlast-modified: Sat, 05 Apr 2025 23:54:18 GMT\r\netag: \"7aa-63210b89adb86\"\r\ncontent-length: 1962\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXeEDqfie87arB9OgdDuvi22RpFE4tXGDvX1bHl4StX2vEF%2BRkJntD8sMwpJGKPkliV78h8%2FKaTEihnflgks%2FldqQLUTpD4K8RNAATY%3D\"}]}\r\ncf-ray: 999ae34c0bab1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"c79c55a3b35c28f243e786cf63057df7","sha1":"06c5e44b945009f53de5eae8d315da3695a6bf45","sha256":"7cb6e8bcd5fb7294b7fc36804979e779cc39810e219bddcf60f5d5bd7e22d75a","sha512":"15f19e9d5c771e208e340157298fe2d3e5d0a521125f0120399f294508beb820100ce1635f012e99683f0cfa1d3e423739031c2e49508814b34ecea2cb9f9826","ssdeep":"","tlshash":"e9412c1468f567d0afdc5633484235f1d1e8e2b802d6cfa43d1753fd4b4b3895c8a215","first_seen":"2025-03-08T12:11:10.681025Z","last_seen":"2026-04-11T21:52:42.93137Z","times_seen":22,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/percent-icon.svg","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/percent-icon.svg HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGC2aSM2Qd%2FNH1k6vGiEX2DJKuYvfPtBy%2BEI92dMCXKK2uAsn78kQDhXw8pfnHd1phSsiA%2BvEKSi7K9bW3IrASwgSR2uWvSsPtjsMsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\netag: W/\"591f-6322977168ae7\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 999ae34d5bc71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f626122f77cdaa6fa9a8b8edf0f9fc40","sha1":"d2f14e274c8bc8b5d3f16c5b3560a91a91b7a18c","sha256":"3f70517c540abfca1488908d39ddcf332ef25d20296a7750869bc71a64208ad9","sha512":"d69e135f5bfdc3f57f81828dbb06bbf883fa22deb236f34f68473250cabe6125cff013c0e8e3d61b6bd5ab3ae6f1e02dac05eddacd725fd5cef641a65c3a0ffc","ssdeep":"384:1RrMflIN6meV0VeGH+qYxeuowYiQSDPB7ho7YCM0xkvUkY6vp36NgM:TIfahDeqYxFkgZzh0xkD96yM","tlshash":"b8a2e04c2c7068db04091366a3a2e8f78e3575998855636ff5e9337a218b2f01f723ca","first_seen":"2025-11-05T08:13:12.589011Z","last_seen":"2025-11-18T18:04:59.053014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doctor-maths.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:53:21 GMT","end":"Sat, 24 Jan 2026 16:52:03 GMT"},"fingerprint":{"sha1":"13:4D:7A:E5:5D:5E:0D:BF:9F:D8:D2:B5:7D:BB:3B:CE:BA:D8:24:BD","sha256":"17:10:0F:88:BB:8E:0F:D3:0D:70:DC:E8:65:81:D1:87:F1:B0:C4:1B:61:01:03:E1:66:BD:78:7B:E7:E1:2F:8E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: doctor-maths.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:43 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 05 Nov 2025 09:00:43 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J92dp5VhDBP6d2OSAOlCrBzxEy%2B0SYN%2BID7oIkNn%2B7WsUBGuuIgGgQ83EpRxY6f15cVItAGtUwAgitFbmoJs7zCcOizFIvVpiSs57rMEj4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 999ae345ac6a0731-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-12T12:57:59.786789Z","times_seen":300557,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"test.topthethao.tv/api.php?url=%2Fbrand%2Ftaixiu%2Fdoctor-maths.com%2F","fqdn":"test.topthethao.tv","domain":"topthethao.tv","tld":"tv"},"ip":{"addr":"104.21.78.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topthethao.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 03:30:51 GMT","end":"Wed, 10 Dec 2025 04:26:44 GMT"},"fingerprint":{"sha1":"D6:F0:2A:86:20:0C:09:E8:2C:97:A8:79:C8:20:18:8E:00:19:A5:F0","sha256":"8B:2D:4B:BB:68:95:8E:D9:EB:E5:FD:6B:42:9E:DE:C1:CD:30:B2:84:95:B9:0F:00:62:20:3A:57:E5:02:BB:34"}}},"request":{"raw":"GET /api.php?url=%2Fbrand%2Ftaixiu%2Fdoctor-maths.com%2F HTTP/1.1\r\nHost: test.topthethao.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://doctor-maths.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNiS4m9XjvajCXG41DhfJzUv8s3bWlH0QpQ1%2Fj0Jik4ar90%2BGgLoYtgav1bLeMN84Zz5upwCjkgrMgsxzSyX1Al0AKWDYTdwKKIwY6j%2BoU8%3D\"}]}\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 999ae3490ad47127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41668,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"c37ab12a343e8f101d954de125d4d956","sha1":"bf7a0337307d6f91c102a83b39fab1d5442aec55","sha256":"92cb266be42be175a85fd9dcc430f591c683788328a31040508b4a8b35a83dae","sha512":"019951b8e952ec7e9ac3b0a53bcf24850f6f1c6b68c9c81e81dabc21290cc4f725ab55bb67185920c6f3dfb9074d70eaedb4d2ebc8b4b259b10c10159d3b5fee","ssdeep":"384:chjWModdi0sKinbyrVflwTZGBm82RNZ1VGQ:cRWMCtinbyrVflwTZGBm82RNZ1VGQ","tlshash":"0d13e2e6a0e65a92118fc1e0ed2da5591f72e437face104df5ac1188bf95dc1ac43bc8","first_seen":"2025-11-05T08:13:12.590705Z","last_seen":"2025-11-18T18:04:59.080036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":49,"dns":30,"connect":1,"send":0,"wait":589,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/banner/728x90.gif?r=6","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/banner/728x90.gif?r=6 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 06:49:12 GMT\r\netag: \"6a247-641e1f28885c6\"\r\naccept-ranges: bytes\r\ncontent-length: 434759\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2Bh5Ok60lDrNw1KyFZskeQ%2BFdfqk5O%2FPb%2F%2BFMLd5L%2B0eyh6s4z8GRk8bxJwcq6jHa4COoSmRn%2F5OqeVs9PX451oeyyOM65NWnZWZ2aI%3D\"}]}\r\ncontent-type: image/gif\r\nage: 3710\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae348bb711525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434759,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"c86da34ada6f061441ed74e606649a2a","sha1":"a0fe2a17bc7af1b574f9ee438b26fbd921fca760","sha256":"3a6470af4420ddf87820508ab604c07337a0398744f96fd6c8ad58be4cf45ae3","sha512":"61e085628893dd59d8bf61e315ace5d60e4d1aeb16e60b5dcfca95fa3c71fdc9b8b79e4dd824325769ec24045c65a4ba94a7f8c746d4462c67e32afd923a407f","ssdeep":"12288:fqr0SREwREUMbC/GAtGGAtGY8WjmoumJR:fm0ft5C/GAMGAMLWjRum/","tlshash":"2a9423a9cb569f0e5685f17715720c234c093cfbfc954b5aff42c9ba281b29a19ec0b1","first_seen":"2025-10-25T14:23:55.106939Z","last_seen":"2026-03-07T22:27:34.231117Z","times_seen":154,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/vip79.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/vip79.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nlast-modified: Mon, 07 Apr 2025 05:25:33 GMT\r\netag: \"1f0b-6322977215889\"\r\ncontent-length: 7947\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJPJQ4thFw%2BHdXpW1Tmoq%2FlsfjBAs2H6EEmzneUMlj2QFaANWsOm4Ddam8QbeX2sW9NcMa2g0N05PxFxtNq%2BBpQAEGWLPEakkxermJw%3D\"}]}\r\ncf-ray: 999ae34d6bcd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 283 x 137, 8-bit colormap, non-interlaced","md5":"f28e731a97cf2cd2a5bb54598825542e","sha1":"4e765a9c44a5e3b460013bc6330a962dc58d2dd9","sha256":"297ba99233cb1e2e5a9628409bdc9ab3b05510064b6369bab66aed2b44ed629e","sha512":"b5f600f7afdae1cfadedf350394f8e7dd68d620238d43350251dc24ec39027b8217229b8ba14dd43b8d1bb51e6b5872fbdc840f3da084d7a05bf1c132b7b07ce","ssdeep":"192:KxlNXPMGQk4kY77l0+gAAOcQQ76k8ANYEN51XemksfrTiwlyCylnUGLsM:qlhXKkYvaFAcQQ7JN1NDXemkCa0yCylf","tlshash":"aff1afa5128c90d9b1f036c0b3ad8cd2fbb59dbd15bda613340d3904db7a8160b3e682","first_seen":"2025-11-05T08:13:12.59243Z","last_seen":"2025-11-18T18:04:59.054411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/cubic-icon.svg","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/cubic-icon.svg HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNR%2Fgi96R6ayt4%2BcSceaEc1veVezw0SIFVXjOKZgm%2B8Z1BmIBDnjZZITJ%2BScrLVt9G0xTvR9skOWCY1%2F0VdKCmhIFPD2Sh0Ddwp5C1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\netag: W/\"c5df-63229770091e2\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 999ae34d5bc41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0993bf9509d0f816b0fb520d6eff9721","sha1":"4045b3bb3d0c38bc922781e4ae04dce9cd50f069","sha256":"c0d55c68e34c1986eae32b9e76eef4ba47748dfba4f1e1b457a2d3db2fae2d97","sha512":"81bf82fa5042a6a94aade27db1a3f6cf826f455761d3792d742621be319c36c52eed5264347ae7c11d335311c11e52d5fdd40b5478665012cf3b04caa3ef6d0b","ssdeep":"1536:S/VcGGvT+qFoHCvyXHmlJgb32GYLDcvnf:SZK0wgiLDc/f","tlshash":"d233f2365838800e3384997e345175232ef67936d47d29d3e2c099a3af1e9f229bdb58","first_seen":"2025-11-05T08:13:12.593572Z","last_seen":"2025-11-18T18:04:59.05616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/banner/300x300.gif?r=6","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:44.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/banner/300x300.gif?r=6 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Oct 2025 06:49:12 GMT\r\netag: \"8477a-641e1f2851ac5\"\r\naccept-ranges: bytes\r\ncontent-length: 542586\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYQYNrmXTPbSG4clmDlLI72tTA2HtzfFsyNZ2wikHVHueSQQeT%2BsB2sL3N0TebSD%2FZ22Dkxah4PMjrt5QqYqD7CCqByZFrlmwIgGB0U%3D\"}]}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae348bb701525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542586,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 300","md5":"8067a3dd65c1430da37740a6a1f83f19","sha1":"b2f64b24ef92bfd33ea20b3c3ed07335e877c998","sha256":"eba181dbb1890e6a70ce06eb9fcb0b25331caa1e5883b9285e7c1aaefe7f2887","sha512":"97f80b1acfdcde2ce2d8f5493454fbc9b934546055dc7564615f9272e12dffe93710003b7144c867285108f51a73f7162923d02c9af6902dd2af433ddb62c525","ssdeep":"12288:wbFJn4n4pe//eRb/eRbc7lgd+tVd+tVv8OB6a9pQjAO:wbFJ44pe//Yb/Yb6bGDpQjAO","tlshash":"90b4120b959ec957ad0e2123c74abe4e2de8156d977d12e3f9a02503cbc4fde8297234","first_seen":"2025-11-02T01:56:56.450859Z","last_seen":"2026-01-11T12:53:28.541967Z","times_seen":11,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/cacuocbongda/assets/imgs/top-1-png.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/cacuocbongda/assets/imgs/top-1-png.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nlast-modified: Mon, 07 Apr 2025 05:26:27 GMT\r\netag: \"ed5-632297a577dfc\"\r\ncontent-length: 3797\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4TIsj1GoLC8oBB6fGDDmP17sNN0qg9Gev9n%2B2uFp6eCYaCG8cEJsfo3%2FBguSyktYEYTMbRSFMPJJ8RMagJOkXCtKNciiYhvO%2FYRzkw%3D\"}]}\r\ncf-ray: 999ae34d4bc31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3797,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 78, 8-bit colormap, non-interlaced","md5":"a05a3a0bd1d0b563205fbb30f01ac9e4","sha1":"7cf783f17587ab0737f471f4ae265c03fd00d9c7","sha256":"130c66324216f4a2faa8f8bdb3054d828520d96ea41f8ad6bc425b7c26c3d711","sha512":"34c4f789b6501ff0b90b3b1137435f263dbc6ffbef06768dba6a7783335e9ba9550b9d17755a24d8803bb7fae9318e6274c1648ac1c75e2f063e77125450bdac","ssdeep":"","tlshash":"62716b11617f7508003a9f7b5f4b67032a734e6841f067f6e8c613362d8740bc1c422e","first_seen":"2025-11-05T08:13:12.5996Z","last_seen":"2026-03-23T11:38:47.95354Z","times_seen":5,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/imgs/789club.png","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/imgs/789club.png HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:25:30 GMT\r\netag: \"2a01-6322976e7ba7c\"\r\naccept-ranges: bytes\r\ncontent-length: 10753\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FZWlAf%2BDsy%2Fyq%2BONk%2FT9mTA2L5eMbwl3GirnxtdYwyLh2WLoXv%2FaigCpUmaJJO9jrsaq32D%2BWtvnx68nifEOxpEMbrDwtGR%2F%2BROsQ0%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 999ae34d6bca1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10753,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 287 x 139, 8-bit colormap, non-interlaced","md5":"a1e602edc0844099e2f327d30bdf16ef","sha1":"72b9d25f3c70c267605babbb47eadf91d0caa6c5","sha256":"eab8fdb7bcfc7244e802067cac5b994a780be4b2cfa8ea94d3188e6f3c48635d","sha512":"f84197a8f261e3a207cb5a0e90cb10adaeaefce2632543819f98b4d414069d26d7e09a0dbacc433e28808b4cf765bc8375c8894379642407ab076c2b867ea5a8","ssdeep":"192:X7giz7vxsySBrzl9VPYCvqFWhVy/Z1iatI2CSKsGPYROE7HVi2SpB:XBJsySk1W4tI2FhROE71IpB","tlshash":"ee22d0dee66c49ddeb7a141859fdc3ade421c814ea5d1e44b00a9087670d9910871aff","first_seen":"2025-11-05T08:13:12.600676Z","last_seen":"2025-11-18T18:04:59.046147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everythingwithpodcasting.com/","fqdn":"everythingwithpodcasting.com","domain":"everythingwithpodcasting.com","tld":"com"},"ip":{"addr":"104.21.40.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T08:12:42.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"everythingwithpodcasting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 02:11:35 GMT","end":"Tue, 03 Feb 2026 03:10:01 GMT"},"fingerprint":{"sha1":"4F:DF:42:34:E6:A9:B1:2F:7B:A0:82:6A:70:1E:E7:63:27:FE:0B:67","sha256":"E2:62:3D:3A:46:74:CD:DA:5D:02:18:E7:E5:6B:20:B0:5E:D5:BF:34:1C:14:B3:85:AA:24:A6:19:FA:2C:31:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: everythingwithpodcasting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 05 Nov 2025 08:12:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://doctor-maths.com/\r\nage: 10\r\nx-cache: HIT\r\nx-cache-hits: 12\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqTygr1k4ZpHI1rPd68E7Uwvo5gZOHEY68ADRCA%2FRYJxb5d7fyhKrxXLMVI169tidH0xnnYMhrM%2B8ygmx%2BlorK5upN%2BXEs7ayjYaIAXvaL8699Yk4eMxHJTE\"}]}\r\nserver: cloudflare\r\ncf-ray: 999ae33ec9590afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55618,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T12:55:59.554947Z","times_seen":13662418,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":47,"dns":28,"connect":1,"send":0,"wait":436,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/themes/taixiu/assets/js/script.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /themes/taixiu/assets/js/script.js?rand=051125081234 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 514\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Apr 2025 05:29:35 GMT\r\netag: \"577-63229858531f3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pj0U5XgXM8B1CNOBOMcLC1MuDrQ3x%2FnVzTHVoNPrYOzCunFaZKJ8sevd2FkRSdidiyVDV%2FAwry2awT98j5lp%2B3ooEs6hdi3ARcotiw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 999ae346298f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"dec11a0091e33b389e33564b276c59fb","sha1":"3e6727863dbb6733dfc7436df8958925df58db2b","sha256":"bd5adb71b35c3513ec5afbef85ac0f9a3d0902af9fdec06ea8bcd5a98f0053c3","sha512":"3f083bb968b754dccd6aff34a10da122a24d3fdf3c9336d7cb7d4597e01a1b168213478fd7944fff0db01c877a58393590ed0c24077d0623a6896a70d6056260","ssdeep":"","tlshash":"2b21f1a2d25815724133d33917496789fdb2445b6100c2253e6c488d3ff6d96a4f1ffa","first_seen":"2025-11-05T08:13:12.601982Z","last_seen":"2026-03-23T11:38:47.920171Z","times_seen":5,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":68,"dns":36,"connect":1,"send":0,"wait":195,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/public/toplist/brand/vsbet.jpg?r=1","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:45.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doctor-maths.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:53:21 GMT","end":"Sat, 24 Jan 2026 16:52:03 GMT"},"fingerprint":{"sha1":"13:4D:7A:E5:5D:5E:0D:BF:9F:D8:D2:B5:7D:BB:3B:CE:BA:D8:24:BD","sha256":"17:10:0F:88:BB:8E:0F:D3:0D:70:DC:E8:65:81:D1:87:F1:B0:C4:1B:61:01:03:E1:66:BD:78:7B:E7:E1:2F:8E"}}},"request":{"raw":"GET /public/toplist/brand/vsbet.jpg?r=1 HTTP/1.1\r\nHost: doctor-maths.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nCookie: _ga_CMJ2TFY4TW=GS2.1.s1762330364$o1$g0$t1762330364$j60$l0$h0; _ga=GA1.1.597288281.1762330364\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38133\r\nlast-modified: Sun, 06 Apr 2025 02:37:51 GMT\r\netag: \"94f5-63213018aa332\"\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jP4vRiymueYbRcaEPcvBUgjcIyQP11%2Bqjtmo2483K6qLp0QJzoub83jgQ6b5%2Fs3feyEkYHZ3knQArS4KHK05zjwDWyTCZgu%2BrLJzCXx5mlM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 999ae34d4e1f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38133,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=512, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=512], progressive, precision 8, 300x250, components 3","md5":"0e4f29383ea902c7ec1e9fa30e735d4d","sha1":"c0a16ec8942caaf5cc198942824f581e3be57d41","sha256":"1b32dfd795dd77c7a802ca0319573fac84fa84b81cf68abe94da0c774baa65a3","sha512":"3d9f26f685b4d706efc3f496ceeb412c7399417cbcf5704a6208cbe81c13adb10a7909f83a8047d6f1ec1e4b5c77751733f42e0fe8e6aff2b3900ce935ef6804","ssdeep":"768:lihBvvB7SihBvvkuxwGGqrs7ovtOREwowdB+XmeJNL191tQE7DRTH:lihGih+Hq47ovtORawdB2pzbQyRTH","tlshash":"cf03c01bbf17ed12fad0833814eacb9272215f50cf938641784c7f9dbba1b92581d606","first_seen":"2025-03-08T12:11:10.694624Z","last_seen":"2026-04-11T21:52:42.904854Z","times_seen":31,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"doctor-maths.com/","fqdn":"doctor-maths.com","domain":"doctor-maths.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-05T08:12:43.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doctor-maths.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:53:21 GMT","end":"Sat, 24 Jan 2026 16:52:03 GMT"},"fingerprint":{"sha1":"13:4D:7A:E5:5D:5E:0D:BF:9F:D8:D2:B5:7D:BB:3B:CE:BA:D8:24:BD","sha256":"17:10:0F:88:BB:8E:0F:D3:0D:70:DC:E8:65:81:D1:87:F1:B0:C4:1B:61:01:03:E1:66:BD:78:7B:E7:E1:2F:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: doctor-maths.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: DENY\r\nseo-tool: DK AUTO\r\npragma: public\r\ncache-control: max-age=1, public\r\nexpires: Wed, 05 Nov 2025 08:12:34 GMT\r\nlast-modified: Wed, 05 Nov 2025 08:12:33 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrkhnxTICIm6tVxOb%2FolWET8tGJz7ideXkmYB%2Bpu%2F9ThgOO8zEsPseQEIVOnTAleZqZg0r5FFG2%2FoeNd0xQwRIOq3QAalcz38yx7oTD6N4A%3D\"}]}\r\nage: 9\r\nx-cache: HIT\r\nx-cache-hits: 15\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 999ae341e8975ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55618,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (504), with CRLF, LF line terminators","md5":"d7a23348d28c79097aa8e572ddd108ea","sha1":"f469a5aef218af7fc6363140899efe03bf7ed163","sha256":"f068f74644ea01dce95e6a4f1993f58de64c9ae726698fcad0b7047ad001e191","sha512":"c97dc4bf0a1149190c04157d81b015a2d5b55a12206463c16e471bbcd88829fe1d6bf2331eb22dfe398bc874a451e4cb6110ebd00b17c5f2a650d7c4e7cd207a","ssdeep":"768:/oNI3yBOOEEnunWKjfG0DoxjxGE1XGGlbpWb9MVFSch1DlgsAp7eIqvCd:0OO9utjfGYCjxGMXGCakSczI","tlshash":"0143971226e8311a4049053e90e979189fcbfc1fa780ef50b9fd94b7af115a59b327ce","first_seen":"2025-11-05T08:13:12.60419Z","last_seen":"2025-11-05T08:13:12.60419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":58,"dns":40,"connect":1,"send":0,"wait":428,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/banner_ncut.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/house/banner_ncut.js?rand=051125081234 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2293\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 09:24:45 GMT\r\netag: \"20ea-63e32a447c709-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ihrt%2BgWkW7b36cRDpmCGVOKWc4h%2B2rBlqzG7JFa2j7q94rqou6%2FFQ1OyQaylHNwVgtDBCO8%2BmapvUKS8UrGCEgq4g6WorAf0nrYSrv0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 999ae34639a90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8426,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"965b9660e06079694ebbedad591000ed","sha1":"fd4374d61ad4dc7f1baff4eaf54e69c0eb575ee1","sha256":"6ddba0e5467c996b7749af2cbdd30ede2599b69a2b72263fe5fdfa604fe4d97e","sha512":"a325f0402bbb715a3eeeb502b59c5e37b11c4213e6636e7c367b8458e699508794a36d6a40cae60301d15fd08e813dbfb9c2ec87d4239f7e6269d1594028f371","ssdeep":"192:9jlC6zX63Xv3O5qe8xUiIieJ+TyVFwCAA:9jlCiqe6UiIieJ+TyVFwCAA","tlshash":"a6028319b444516500bbb379af7b5a08fa7a001be3439e043ecc5ad15fb191825a7ffc","first_seen":"2025-10-11T21:48:07.451469Z","last_seen":"2026-03-23T11:38:47.969089Z","times_seen":10,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":76,"dns":29,"connect":3,"send":0,"wait":235,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 999ae345ba4556c0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 727202\r\nexpires: Mon, 26 Oct 2026 08:12:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0GgLTlTHJIeXr0Bu0ndQmg73oqY9dlM9fD4r66kgczJPfrr0K7OE2In1z9JMiJCQcP9GQBzDcQ2%2B1jNEyRSaR9agAZSdf56hwwml0D3PsVYVmnC7AZTcIz2zTRCKJ%2FB0cYtY8Ysb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-12T13:06:31.756258Z","times_seen":139338,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":13,"receive":4,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/linkbanner.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/house/linkbanner.js?rand=051125081234 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 412\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 09:24:45 GMT\r\netag: \"60c-63e32a44a18c9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3i58nMCgaA4cQC4uTgLoyBmeSMzcFHWYBDDV2RJPFqYE5uVRQ%2Fdq0VJQGLzS8QtpiWJBOXLJMFu28mXM%2BzmJJVKp%2BKzJKfa3z7QQlM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 999ae34639a70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1548,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0d9856d0c74cd6246b0b4417beffd9ac","sha1":"7a8694964aece074d4c665069b5632f59e2fd98d","sha256":"76068f30244340818b6b8126a1c93cf4c44743e03cc418c1d26d60d3ae9d75e1","sha512":"857bd81e6a616c2a1413d626c929eda7b28487c03b3bfc3b7dad932e9d40a5af007c5abe9d8b330ec07bd2dea5304e0a03f3b052b97ebd1d21066c07cf0976c3","ssdeep":"","tlshash":"8031f652ae3c8ab434e95dbc83b8a612f9dd758fcce041a7b1405c82af7c45c62ca34d","first_seen":"2025-05-05T19:50:06.76695Z","last_seen":"2026-04-11T21:52:42.9381Z","times_seen":132,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":76,"dns":29,"connect":3,"send":0,"wait":214,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnabc.online/public/house/loadtemplate.js?rand=051125081234","fqdn":"cdnabc.online","domain":"cdnabc.online","tld":"online"},"ip":{"addr":"104.21.89.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://doctor-maths.com/","date":"2025-11-05T08:12:43.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnabc.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 13:20:41 GMT","end":"Fri, 26 Dec 2025 14:16:58 GMT"},"fingerprint":{"sha1":"E3:E1:2A:2C:9B:C1:22:41:AB:FD:12:B0:1D:09:CB:51:7A:BF:C6:58","sha256":"9B:BC:7D:32:6C:F8:31:53:3A:93:A3:E0:9A:5E:2A:32:F8:30:AB:45:5B:1D:AB:03:94:D8:99:65:64:85:66:95"}}},"request":{"raw":"GET /public/house/loadtemplate.js?rand=051125081234 HTTP/1.1\r\nHost: cdnabc.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://doctor-maths.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 05 Nov 2025 08:12:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 736\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 09:24:46 GMT\r\netag: \"120e-63e32a44c6a89-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wuHnj%2BxWpy0cVXVxSBcHYX%2Fd2CcZmIsf3JxSKhLwEAzGJf%2F3J5BxJsWSeXsqltxVvcOzwCZ3On1NjD03e1VAoElMjtbT4EuykaOKHs%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 999ae34639b70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"194d2a990e85774b437c1c3121a40921","sha1":"cdd8ebe3751703d0f584c588765201e78d488d12","sha256":"ea5481279515b7c81f0c6c88cca959153850e80f66260f522026371e84256828","sha512":"40c7dc36111ea878d85214bfcd30b7ba42c5998421aab1b8415126dc3faea1660411a7e064424fb3722d24f4b375b80a4a17987e985cd38c1fafb8e03297091d","ssdeep":"48:w8jzDoBvG0/9XBYGJZ/qB7Gm/wBYG00YBlGsAKBBNGOdgcTBwGId0wRKUkjWMN5E:w8boB9XHVqNwRYWKNgcTyWxWMr6v","tlshash":"c6911d873a60c55bd136b6b5cbff6a01ea12651f1140da02bd7d18b0cf76a91f216f1c","first_seen":"2025-03-08T12:11:10.702758Z","last_seen":"2026-04-11T21:52:42.910891Z","times_seen":22,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":79,"dns":29,"connect":3,"send":0,"wait":231,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
