{"report_id":"53d3ada4-2f4f-435f-9d3a-18074d959e65","version":6,"status":"done","tags":[],"date":"2025-12-07T18:14:33Z","url":{"schema":"http","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"title":"THAICIGAR | ขายบุหรี่ออนไลน์ ขายปลีก-ส่ง ของแท้ 100%","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T00:58:08.865803Z","times_seen":17716184,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-11T18:14:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thaicigar.com","ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-18","domain_rank":0,"first_seen":"2025-09-13T12:54:20.469546Z","last_seen":"2025-11-14T14:21:32.021479Z","alert_count":450,"request_count":90,"received_data":5228972,"sent_data":47884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slider Revolution:6.2.10","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:17.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:3.8.2","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WooCommerce:5.7.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"Contact Form 7:5.4.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Smart Slider 3","description":"Smart Slider 3 is a responsive, SEO optimised WordPress plugin.","website":"https://smartslider3.com","common_platform_enumeration":"","icon":"Smart Slider 3.svg","categories":["WordPress plugins"]},{"name":"MailChimp for WooCommerce:2.5.3","description":"MailChimp for WooCommerce gives you the ability to automatically sync customer purchase data to your MailChimp account.","website":"https://mailchimp.com/integrations/woocommerce","common_platform_enumeration":"","icon":"mailchimp.svg","categories":["WordPress plugins"]},{"name":"Redux Framework:4.3.1","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":12,"received_data":206064,"sent_data":6398,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":55472,"sent_data":726,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2025-12-01T10:30:11.121611Z","alert_count":0,"request_count":2,"received_data":885323,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/PopupConfig.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7a493f7e281b7a2c5fe182a44ba8367","sha1":"11c971b79a4c8ea2dd1b6b4d7b33192275054f44","sha256":"3fe8c79d67b21039a5d059ef40761950fb76e1d17933d61509f7eb3c68f5aeeb","sha512":"ad93df5a3fc14c672eaaea8a1aa96009df34380bf5db8cc85acf97f605d5d0807fcafc2adc668bb98e7d03d0d3df512ed80d9dde9f64c2353c4d58388c66d8c0","ssdeep":"96:aPWiAlsT5rQocpDpNyOEpTDfm9bDDsZuaiI6/PHhAaM3QLxE6bY6beSrfXQFSXYA:en2pDpkOKPSbXwiI6nNZLxE6bY6beSrV","tlshash":"23c155a4e168323d977be13a128f1b1c1e3a9560f10a593dbbb95ef914d43000d9fb7a","size":6010,"data":"","first_seen":"2023-03-07T01:42:32Z","last_seen":"2026-08-04T21:29:35.19522Z","times_seen":3557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"787fe4f547a6cb7f4ce4934641085910","sha1":"c2dee88d5bdfef214ce9c56f71a1df51cda0f328","sha256":"654aaebdea944313257827be97eb196a8218a2cdfc9ba399db23e2cd4c02bd79","sha512":"e55a14c83a65ded7853759bd3f7245e57d51062b5434d8d91bea41551f7b81ffe6da17bd7dd86029da2d30cb8a74ffc955b71b137530a19094fc2c3329cdad13","ssdeep":"","tlshash":"f711c295f74f6b4cc5ba74dc951684c8741984b392cb206e5e0347c4bac817d5029d0e","size":992,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T21:34:27.10656Z","times_seen":49606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-05T01:00:31.849703Z","times_seen":1004797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8772bfb2ec7dec5262a932766aa1669","sha1":"8440292e305868d90f6f15a3ea6975a3b9774f43","sha256":"c19c2ee1fc048012374a6d75c822daf9b7c0d4ebef7ab8df1ab22b229a00d012","sha512":"885113d89ace1483073df3c79dc42ed4ba17ff3896d76dbfe855287108dd0921089dddb9ad88c72f63570deb319ef39db3b27979ffd2966bd8b45c2219ffbdc0","ssdeep":"","tlshash":"c2b001f970a2993a4b8e620cb03dc3d87c385185ba433841d4bd609a0675ec3a801eea","size":96,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-05T01:02:17.801899Z","times_seen":55736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80eb606ae631d7760a47050a336e9c98","sha1":"1895e077ab430f3e2c09d04f1a0e15f56354e524","sha256":"59d41b81261f9b0e9cd5f2ea1cc02c32e9f3b548efc7a2534b98e47e517fda35","sha512":"8dbbde53865c63a6db1ef49a02ca6ccb076f92bb0470e418e047a375e64101addf3d9dc3b13e34b6b9a49806e8ee6a8b245cfbdf975411f1ed399d9f0bf7f1ad","ssdeep":"","tlshash":"3ee05b2c06d318204a6bf565176f73503d369013254946833a5cab564f5441543bdf9a","size":339,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-02T23:52:51.577349Z","times_seen":5139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2bce9372ec4d4ea2c6a37a1992af55b","sha1":"f59a8315b4f6634c6c18e071cf97337b83b25e11","sha256":"feb1be09c80796928cef37cb5d4a549163451c44fbdf0548becce14c75bdb8b4","sha512":"e7c514fb5af815343a3a1e525caba999f7ee8fefdf071206fde3222e175ec01e7236ffe03131e64105ced2c8dd4db1e2a2f2fa80a11e81dc9314e00160fe17ab","ssdeep":"","tlshash":"9ef07d6b14252821539f20d6b59995a36fd311f093a5de0a909ec21d26d038781af1af","size":620,"data":"","first_seen":"2025-12-07T18:14:45.581799Z","last_seen":"2025-12-07T18:14:45.581799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51af5d767f0300f23ecec6298b707395","sha1":"5eb2d3d937fe0392a974937125d0420666b9396c","sha256":"9c7c023f91428234ca0ea4df1199758686f4dcd04da96ba63571788fb3389c0b","sha512":"aef8aec7a48ba11df71b68853fec6d8d619f68c7460851fe116fc578d0226abdb701d23be630bfddcccd51561b01ef23045e6a320a7e5a555aaaa7a7b388bc06","ssdeep":"","tlshash":"cb51341fb060cda119f2287e613a718522325965b6098b30b025d8e42fece4b1b73ece","size":2938,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-04T22:00:06.099316Z","times_seen":4487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d00833e3bc742fe6110bd6bd99b8a663","sha1":"c096ee7a360c1bec12c24a80ed1378b480e13200","sha256":"362e5cf9bab265a1e10d24429775b3008a906c5547029017c73718270c31f513","sha512":"8cc555164c5faf8721ad46c02e28314e5e94214b395bce3d7ef8897f943d6e685ac1f11a86d3f50981179a96bc18b4ca35054e34114dff98a6f6c2336362f2c4","ssdeep":"192:O2B8z8oChGATfGkBOsESCg55a4jyvrOJTxBnoMS9XbK1CNU2:TBB955a4w8Bo","tlshash":"fb121f096bf618a971a330357faf5635307229071c5adc48bd0cb1989f28c357b7daae","size":9630,"data":"","first_seen":"2023-03-07T01:39:40Z","last_seen":"2026-08-03T20:52:33.366092Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e06538f036b4aa656536920e39dc1e9","sha1":"668222a778cc9b24d9b6dbcd2f26d7dd3e6d9897","sha256":"a1ca17763c6f1df520727d1965a0cd3d96e94a9f2f5cfdd778cf4d5c9cc64c79","sha512":"0cb3a5404560263bbb8bc7be43e62bd6e09e5ff48b0092b569049ffc53148138cc02ebd8e46d656bcf2f2123c421a18b5b696316ff98c3687f8c1fe7c4be11d0","ssdeep":"96:P8fuDZdngXIF6ibg514fJR8LmrK1WyptgX+UzPoep:UfuDngWA1kRcmG1W0tgX+uPoep","tlshash":"94b1881c73443c7681d09179296ba70c83aa425cf511c05d7aa8e9ecc879dca3b67ff5","size":5160,"data":"","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-07-19T14:48:24.836605Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro-ajax.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aadce03181c310e1d3266cc18ce0cb1a","sha1":"2238472d960683a7fccee9f7787a3d534210079b","sha256":"42dbbabc282f12f76fca32ffc0f7c1bdcde2184ffe3c7afdd72ce7feb59b53ad","sha512":"ca905ca6d3d5d277c97e493a329491b3842bebe4ea7c478964aec822d607a949f0a1bba2f31a3df681bc8e426da1c5db1abb11d8472b7e17573acf9616a4d33b","ssdeep":"","tlshash":"df618b06b4fa1ea7193b7cff0abb1848272710576446da24bd4e2b884f15d94f89364e","size":3377,"data":"","first_seen":"2023-05-25T09:44:24Z","last_seen":"2026-07-14T03:54:43.894164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0a6d8547c66b0d7b0172466558d1208","sha1":"ff93916519c7b9483251f609e4d29f38c30a66e3","sha256":"3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612","sha512":"48bb25b08bfcc9944cd1fc3bd039ea41d1a870f488971839f2891b91710f3ff9eb0b523aa7ab888bf9968bbbca41a48761405abbafc6c6d24927c078049545b8","ssdeep":"","tlshash":"4f31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13431867815bfb3","size":1834,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-04T22:00:06.140844Z","times_seen":52665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b72c1cbb1530a011a27bd9800f26765a","sha1":"27b825c5d8255f33b8427a059d4545ebd65e1746","sha256":"a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8","sha512":"63febb24bdb65c39acc8d355dc5b20d3a1ad94afc347ab2936c543d8b7a911c2f6d2c1c0146707cdb29bea85a8f34e7fb6e76aaee4bc0bea212ea58835a58025","ssdeep":"","tlshash":"8941ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","size":2139,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-04T22:00:06.084486Z","times_seen":51469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"75b9f4ce04a0c1b8892677cf41a97ab3","sha1":"7e2f1afb8bb1174672a612b9652ba874ad97b990","sha256":"a8bb7d66cddd163397ad3eb39b30b68825b01f6128e3d781ce60efd45072df32","sha512":"6c337ab7d64bd2ba690cc4e30e297c1d8a59095db5153fe4c0117cc81b1f516392778b1ec918d80a1b8df6ff6de3d75ee1bbda4f547ad3a0398d10c3877bb496","ssdeep":"","tlshash":"cf31d71a57f8599a30f321317ee7a33566a362470c25ec80f90c62584f6cd653b7f92e","size":1583,"data":"","first_seen":"2023-04-14T10:46:07Z","last_seen":"2026-08-03T20:52:33.3921Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6656887c1df00322d39d93b2ae52b828","sha1":"82165e2dc1f7560372c4482ef6ae946ac8b26b2f","sha256":"3ababd4ac81a9611652135a2556a72951181628ea416c00703a39c56e0f56094","sha512":"2a7d82a02d8e8b506dd0bc1119523c781b475b1aaa57123195b658073fb625e0fc8342f6e28d510538a14169358d9b8a609b66e1878c0982953dda2fe99962f4","ssdeep":"","tlshash":"0b116d361445994447ea03c0f51c2e2adb9f3232a7c4fdcb95de449d14d1a6d13a322b","size":1050,"data":"","first_seen":"2025-12-07T18:14:45.583161Z","last_seen":"2025-12-07T18:14:45.583161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.1.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"502ca2250b797193ecc051d0c323cbdd","sha1":"3ba0ac15dad090633ddd4ac81472360692ad8bee","sha256":"93a3315f4ee582595965f888b1381ac13f8fecb6b53df998495fbb4e759a5b1e","sha512":"9f4ff790e8d0ba3ca47a08c24f191c6cd83b33093e1aba670c24c13c1ead6724cd9a6c95c5b20a09bf0198e17a4b35485960f8d0185db315258c6948ce3a0877","ssdeep":"768:MmCbv6/wXnKcgL/Fcz1RkWsNeSNi+0yL2R5XG76:MLv6oXuLNq12teSQ5G76","tlshash":"38b2a76dba2d60561af3227390a75a0671325df9e24f5820903ad4fc3fb4ec54137faa","size":24731,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-02T20:41:58.516695Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/device.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42d2a84f8934933796892821e3b90391","sha1":"06aaac64bfbf121dc2bf9e28b6c404e3c52fd27f","sha256":"4f164ac673a1beee85461fe53f89f12d69c2ed5a6adff3d4d69f762c6f766411","sha512":"9cf0f42a58b82c5b6cd4d4d37e30889fe8801de0c3f9e3353195bf420ad1408e2838dd3fedf37115fed8ea376dc9b1c3b88f057a9e288e3f913ff6771e1eadbf","ssdeep":"","tlshash":"6251ff44087a187a5d302f72918f2fe71362a64c694ba5a7d2826d48fce2f53206bdf1","size":3061,"data":"","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-08-01T06:07:00.377586Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/waypoints.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cef05fde1a566e0d27b7a1a01299220e","sha1":"a4e0c3e1ac4a320cf0ca5b0267fd897640dae954","sha256":"173a42f3468eebc25191bc4aaa1e86fb422b56337682ce4b38bd2ca4229b8543","sha512":"e6a68e0d32c9f818bb079bdfca0075547aa2c7e45ba57ff4034ba60800864fb9bee825d173a959517b1de1106e4213e31d8d7c3faec6ec31c13dec3aa908cf01","ssdeep":"96:T1leyZ6dnD0GTfXPv/P/4HtxEDvtGCFj2HF5bsshaTa/dOEVXdODJdldURJq4Z:TeD0ufv/oHtCV952H3Nha2IESDoRg4Z","tlshash":"93f111c97893b4226bafa174d53f420ba23b5d9a75088834b0d494d43db4a3db677f28","size":7511,"data":"","first_seen":"2023-03-07T01:32:50Z","last_seen":"2026-08-04T05:24:30.962319Z","times_seen":1262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9402cf5ee94544d01f5b9399275eec96","sha1":"ad3dba8aae72f2e602e3af75058b355adf854f66","sha256":"2e0bf876c7c9808336e3bb2823e62fe417b63133bae86bbc0aca41293f16107e","sha512":"46f6b8e158e36c9ec8e1e99890ba08068668e0e137c6125ccde8daf8ce3a5d17ed59130010c4094cf6c9db6ef4b0908f9fe51e3937bb9456aaa93cf1fb514145","ssdeep":"192:0UtMAzzrjW2qgHytcVkMeIL3enEXPEQXcjPEQ5Gypk8+kQwuh7up7xb0oZr4luMC:0XAzL/TFGnE6LklklbVr4luZ","tlshash":"6c522288e6915d6663cf46b7562f880987ba025cf019c13ef5fce9e988e6d0523273f4","size":13955,"data":"","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-07-19T14:48:24.832281Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77eb037c0420e72132a8312e5a3a0a64","sha1":"036bf92b7e731cd4b5f8cb5224c0e8a30bf014b6","sha256":"cd95d68d7434f7d0dd4dc561e5767d20465882d1fe23c15ef03bedec607459fe","sha512":"fb64d8a29c22e7c19a022708f518c71b9449598d035432ce91a4add9a039f177bef31e74611a92906fa2eab1f4defff0fe38e3aa07b8f9efbee4d14ba086b8ed","ssdeep":"","tlshash":"19d05e58528add9362da2ed8611970e6b1e22103eaa99895aaccfc5c1f11980ca4419f","size":256,"data":"","first_seen":"2025-11-01T01:33:40.525103Z","last_seen":"2025-12-07T18:14:45.584322Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-05T00:28:34.741091Z","times_seen":15093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b57959edec051ef9a3665551c261f32","sha1":"304a934ee92f10bbb13961da844c87e478417898","sha256":"8fd277ac5256890cbe0b50f0a4eb7122b4399bf7e2791740e20aac0b872e1805","sha512":"870c8e4715537f7d68328772251ae8b8b97b7640c525238584ffab258087d690a914b745a3606cb37f0897d94d7527e0514af2aeb393f177811757dbba786bb3","ssdeep":"","tlshash":"fde0c2687484e07b28a6a460347766066473151af4510e5cb029bacf8ce9e4e0107ca8","size":295,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-08-04T06:04:26.36917Z","times_seen":1263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff5dd2c40477948b3e3d4240dd6219f8","sha1":"74bfda957b5d008f402d32c87b1e7246b3a424cc","sha256":"8a36c815d2651e1bab0b8a581705e39bda1b96f6958cdbe8b1d33a7153c6b4eb","sha512":"5da53e07d19bb958d3893dc9dc7cbbadb9be3904d908eb7411f53dc51050c2a843ccf34c6544ba544b6db8a669e5030ceb42cddfce4c73cda99b7264e7bf51ce","ssdeep":"","tlshash":"935165258b0739edd65b8287e8775607c2bd06009f835ab6f7da094c819d24c221bbdb","size":2811,"data":"","first_seen":"2025-12-07T18:14:45.587441Z","last_seen":"2025-12-07T18:14:45.587441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"157f18464a93eab7fb62a7f3e618ac2c","sha1":"f47727e80d529d6e4941fea32f2e8a8ee5008b8a","sha256":"9ed8f2a0e573467348e64fb1945eeac1698f32af9e9c723153eb7142d6a43306","sha512":"a67c0a6cf4d918f0da5aa01d1b8c06c0a34f5434eb0a8ca580f678fd7e4c38ed21da3dae533d67d40702fce6a25674f7c95c7afff841b2388640b9de2ffbc7ae","ssdeep":"384:bdMv8k2UvYmbIatJcY36FLfsCnieEbf+bCSSOf9jPg7g7gNHwcbdU6hIcb8Ux:g8cX90FpV6dbdUCv","tlshash":"3362e005315421b022fee1eb1e5a645d1131a93e850581adb5e6d4ec1efeecc22e3f6f","size":14927,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-05T01:02:17.795552Z","times_seen":35726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f89a462610b019c68e5beed37bc33e5","sha1":"479a60673fb8d7546fc9fc74d9859ff08da2727c","sha256":"cd81262d55bfdcbd21178b14fd7127ec6be5d2d04904ca531282809b324db738","sha512":"25c6b5cb35cc5da6afe4e0a4dc6fd7004fef03d07a248510d17d88134fe9875d4d8660d6019aa0a47e36c31373062e94e8e99cd4f960fdfc5fad7f447ea27233","ssdeep":"","tlshash":"421100c9694296222b17a1fa713fb85036b8902b9513d4c4f84ec6942fa5e589c1bcfe","size":969,"data":"","first_seen":"2025-11-01T01:33:40.528344Z","last_seen":"2025-12-07T18:14:45.588272Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8c40bf7c92768058d743847cccdb147","sha1":"4fbbbcb2dda4d05e2e58bf43330c559b4165fc0b","sha256":"7872ff233c7b2bfa962f491d0575e71f0b0b487bc63899ff4c72c7c9d5197688","sha512":"83bcb73fce5bffd29549aa2521980264568c23c98d508b254127f3bb9c69c9c2fdf3d6d541f2edf24dc73e1414e8a9fab6dafd4cc25d3cbaf6a73b7917c50d26","ssdeep":"","tlshash":"eec08c2b770c08e4120b38c00f9f22d53838e18876513c108caca805d490c8a2c02f8c","size":152,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-04T23:06:23.659709Z","times_seen":147687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.magnific-popup.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b677df6de6084cf0e4234b631294271","sha1":"156e57657e9c9990494abd162bb6892dc90de5af","sha256":"9936720a77866034451995484e2900ccb899f4e58f7fba49ead5d1fab6b569de","sha512":"ce6ba44a2aa8ca836f4d7796ac7ade80a1fb68a1c8271f52cdf411521d46f024840f7e73bdb2d03ad86081fbb6098d5cae818c9df71b67fccf4e88c94de8d220","ssdeep":"384:iPhVSXQ2G2XAQYqVxRQnsgiHCLEtA5Tn5h5/w6l8aZwH8tTfHXasdS:iPcsssQEn5h5o1qkyfqsdS","tlshash":"ae920864f2b2b26393a335b8646f700935729953ed0ac855b55a88d86efcdc89027f3c","size":20948,"data":"","first_seen":"2023-03-07T12:02:23Z","last_seen":"2026-08-01T00:58:03.688101Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.nanoscroller.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c35d62f5f8e9a6e12ca2eae209205f7","sha1":"ae7cc8effa2cd039275a9ba3f195d08aaec0bc67","sha256":"2ed15453fa6f5887d785a7e67d8a9414258add477682358cfa158063e18d57b5","sha512":"0f6c109d1975d85b34be55bbe3ebde173e47f6d5753f00e5a9410a124690093df77efae3af6754e99da86b2cbfc1fcdb129c7d188cd7ff21507e1cd97609b07a","ssdeep":"192:X2tJ7sWP2UHeF5S2/4x/ebFfxqfmmY5Tmpt:Xm+uf2bFNBm7","tlshash":"902273597314211142cee191d16f4e85e379a0a6f24b84adf8bdadfc7da0b2831b2778","size":10295,"data":"","first_seen":"2023-03-07T12:02:23Z","last_seen":"2026-08-01T22:37:27.875169Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cc87a578cb0c773e26544c4c0b508b44","sha1":"12d38f39566b9e50bf6e74792ab1794798345bfa","sha256":"7183a348a0201cc8e84da400ce9f4efc6b416fccc8c834df5907a9888bc38a1f","sha512":"34c2f84ad74b1b863f22a0417f26cf9340f2b6c780ef96384491a1c52879345c9a1a9b497a3ade87213e1f1bfd8b0995b18b3a6e6ff4dde24a17b08f299fee51","ssdeep":"","tlshash":"a760000c30000cc030c00c03000000f0000003030033cc0c0f0330c0030c00cc003030","size":13,"data":"","first_seen":"2023-03-07T01:42:33Z","last_seen":"2026-08-04T21:29:35.27441Z","times_seen":2667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e96f622673104a3fb67ab56f849c073","sha1":"f4c17ae4709cad9bc997357581f4e30fc4bbee2c","sha256":"b49498d1142de7f2e16afc2cd4250d2ba30c5df4de5d291f51d7cf69727efdbe","sha512":"ea3ab01ae8918a226bb998625c58efbee1a6ed2e8d36dbd69f0f91b9d0c373925d240d7f0388a9dca0d4bbc275984636957d553dcc0e1c88923915d8c168688a","ssdeep":"192:x9RHfGTArT7TMcPvR52AA1uKigDDptgM3sP9+HxlP722DDNrDc:x9RGTArf4cPr2AYhR9th3sPcRF72YpA","tlshash":"a212c86831f3605790b3b1506cf7d78e73b6257d548399c0d0ace46929aceba1226f19","size":9545,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-04T22:00:06.11937Z","times_seen":2799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-05T00:55:11.76231Z","times_seen":201870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93bd6b7a85a5922edb04dabfeb27e919","sha1":"ec5b8a88279e0d1cdf003d4d06f2e2e0b7ba62fc","sha256":"48e8f3e8454763ca5d315d18e893c5c4c5755f035a52843ea0c8cdb8774cc3f2","sha512":"1a53d9c443010f8dc9e03c2c05b19f22770637b301684d091d6d646ec97c25ab9073956c93a475994dfbee2c9809162a6dc0a9ee2ae894b66fd40682781638c5","ssdeep":"384:xg9BBsWzesl9C21Ab6wQwqaAVtx34zPPoEmMvyH2ImzeUs9l+f9LXTIfBtirFw5Z:xg97eSAb6wQwESh1dzVEl+f9LDA4hFsv","tlshash":"9b03a7c9b74570bb0393a17a823f030b63369454b40a456c7478d8ea5db9e4d23bbf79","size":40283,"data":"","first_seen":"2023-03-08T15:15:31Z","last_seen":"2026-03-21T15:58:54.321072Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e3bc204efa2036899212b397aaff915","sha1":"5f30ac915ffee429d6a3363aba93812b3b123218","sha256":"0acd55b28bafd078195f0018dc71dc371fec1838d70e7029e82b87a5446c53c7","sha512":"695c27d46bdb027e0efce0270abfad894dce5daceff66e1865fb81fb06004b2484302e48dad9241e2800372465cab7ab1d0978eb857d3bb75a0246dc7f786b58","ssdeep":"","tlshash":"4d31320ab019dd630be309e7f5125f87a8ac45b266d29d6098ee852c7fd96c0c13201e","size":1461,"data":"","first_seen":"2025-12-07T18:14:45.590184Z","last_seen":"2025-12-07T18:14:45.590184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.1.6.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e006cdf323827cba54415527d84f321","sha1":"64cd52e592cab7a10f86c7b80ac06e7f141735f0","sha256":"caae854769a9780915c2522ec0e118160e6287a63bed5cd72a005b3c4bd0cf16","sha512":"b9e617d568268786fa8ae21e9fbd597664d241d776a5400959a9912809205f2c4b026caae834a0a34f1b5cecd67768207048631e63ccebd166bfe869b04c70e0","ssdeep":"768:mp9SRIsUiST5DUiZNRLm7qgdqgxAkI8Qy0lynMKwHyH9JZl+/JbvV7iySX1scjmx:+SRIsGyNNAzHy9AxvVLJc76QFfa2NKJ","tlshash":"8523db7936dc90b945dd53ad3abbeb8cf4603462d40ddca4c1b1cc2411e4dca4daabb6","size":47365,"data":"","first_seen":"2023-03-07T12:05:42Z","last_seen":"2026-08-02T09:59:15.163233Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70f77f9b56de53b5c295ab2227d2c17c","sha1":"c9e41fb9fb766935553ad49d66c457b77d792fcd","sha256":"64f80faad6937747f88ba8741af0f122b603718d1d67f33feae65def9c0780e9","sha512":"5e87a3d32cffb68e3333d6fc6fc5c83183d19a1305df11d01d3bf5d47b69ed97f598fcb81751393754c645f0eabb72db0b88620c6d7995ec4855015103a02270","ssdeep":"","tlshash":"5cb02b1501c19d4030b5c3d9531c7120ba4110038816a70795cc41441fe5068c140247","size":127,"data":"","first_seen":"2025-11-01T01:33:40.53322Z","last_seen":"2025-12-07T18:14:45.590969Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T00:40:41.820249Z","times_seen":738150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"657e963e71adb109f4fd0b09a50d1abc","sha1":"9a22e02f0a82510919c002a8e626d8dd891580d1","sha256":"11079a0c403ce98f56ec7f15f7fcafdf4dd96b2eafd52ed9dfb2f14348d49dfd","sha512":"44d73b60368d11a87d34a12198373dfafd9302fb89aa5e1dc362dfc1ff23d3b289cd4585e5d40e3f68c7d13419170cf0e440f8b722be8552f91776107fffb6ef","ssdeep":"","tlshash":"93b0120198c55ec7a1e51ee8793cb1b38be23213ae309c4216cde1491fe6146cacd31b","size":107,"data":"","first_seen":"2025-11-01T01:33:40.534823Z","last_seen":"2025-12-07T18:14:45.592302Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/Popup.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aad76345b176f2bdea7082ce27717aba","sha1":"1f3c44bf0b8169741bc5b3e71e83e05d07b59338","sha256":"113500b83a965388babfdb15b9740741f750db1890f6fa3677cf1bcaddd96089","sha512":"032c021f68b64b7ee9a8f6ffbf21313949074ae63c6fdaff9b7d14ecc6a5c092cf3680955db25766cadff3e26f47f24c8c57a22621c894267970b96cbdcb1150","ssdeep":"768:ysEyFJzkzQfBZx5XebLRfXgNyOaAnhRgyuNJG+4JDzy5pKvy5pKOtZFlusDt6Iu:ysEeJzkzQfBZx5XenR6yO/nhRgyuNIdn","tlshash":"3b03d7b592913153c6ef8157a2cf2b1c3d27d860934aac4ab658a0de77d0f45306bb3e","size":38940,"data":"","first_seen":"2023-07-12T23:47:38Z","last_seen":"2026-08-04T21:29:35.187494Z","times_seen":3186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/plugins/jquery.form-validator.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fefc39ddb4e99c2622b0a7e6f35cdfd","sha1":"011c2b3bc4be53c470b67eb623042623b76925dd","sha256":"ecc9511f3ee3ae647019b84d09de698dbc0ec5f7fc59668f877ba62a18ac1a74","sha512":"4662291f086038acf1ac1633460c5a3db55912df1b665ea3e39559c8f2a74378db87776ad760a80266a6ee682a145f9086cfa06f0b631214b573c75d05e1f0ae","ssdeep":"768:oh78/mIrHOprt3p+R4i6aM/x11g6K6DOMIKl2O4EORXGashy:ojIr6rxzaW11pK6qMH4EmXpR","tlshash":"5803e888b661292b6e6732fb24cf900b91f50c64b5453870e689e0e51ef8fc416b7f1d","size":38390,"data":"","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T14:04:39.380442Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f82b089cf163a5417b3edb4687151f7","sha1":"28436f92ab540ff08b12fdefddc7da67ba0f04f7","sha256":"5ba9af6f12e99663f8f04285ef3d4ffd4cdbca820bccbc2dda9c40f805b5a850","sha512":"d45b8b35fd4abf2616489c4a34fd2e6bc613d2b700832b7b3caf2bb23eab3321cd69963553c559bef98d0511ce387b2e3eb017886bff2c78a19359f25d697a91","ssdeep":"","tlshash":"87c08c0440854d8322e83cd87214345322e11206ba200c022b8cec581e26841cc4424b","size":135,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-07-28T23:52:31.725868Z","times_seen":73659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"463cf6ebc00dd2045999aadbcb73a74a","sha1":"52185ae4be6f23dc20aaa58b86c1f98db3f840d9","sha256":"9be6923457d76debf4c512fac0a2173aaa94748868d26566515ce2a4156d083d","sha512":"d5db18b3e820602dfd58411be979b943c78ea4b819440177f2f4b324f211d9fb2f773e6ecd6b6ba6c8d5e08652b097bee6f0a3b804cd8e7280ab72e1917c919b","ssdeep":"384:leVk5QRqhaFKTWKWaTOqU5SEhy6ya0FmDj5OhSu0LSah4A5Pz:leVk5RhaFKTWKWauSEE6ya0FmDj51u0B","tlshash":"ae92c968b91070f552b7373bf13b3b1ab233383a944651206415d8787abed4f222af9d","size":20597,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-08-03T06:59:25.214382Z","times_seen":1398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-05T00:48:15.866275Z","times_seen":374749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2547ecad80f55dfb7e8c309fa2d1183","sha1":"1612b89d843afbd5e88c03519f4412e255acaca7","sha256":"585acbea9aead9791a344ffb33ee9dab85422d1f462f4a74566f0f34f6dc3e22","sha512":"094c59ad1cc908ea880ec17584d81c77603ca769d11c1ca1115fac3bd1ecebbfb5316fcb281eb8adbf0f6f47a33a943c103241bb2b146d19a11fb74b9020aeec","ssdeep":"","tlshash":"bbe0c20b89a449d715e578d52251b27771e11215f6d80d427388fca50a62e41d8a0a7f","size":294,"data":"","first_seen":"2025-12-07T18:14:45.594035Z","last_seen":"2025-12-07T18:14:45.594035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/flexible-shipping/vendor_prefixed/wpdesk/wp-wpdesk-fs-table-rate/assets/js/notices.js?ver=4.8.4.267","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9df528c61024f6673bcc59adff12450f","sha1":"804984923d588e9055377084ded1b1f6eebfdfe8","sha256":"3facde26fdca38bf10fc3d2102db90b9ac33899e1d9bf84c43c82ceba903e345","sha512":"88e7ad6d564863aa7d7346ff12a55f469ef66c8f26922312499b466b4d3e95812ea9b8882d4c79f7f2ae426e7b5117b5c88761cb9de1a89f37b0a31483cd7286","ssdeep":"","tlshash":"2321433870aa50f4947f7a2efb3fea54386b18937406e655381e2db01f2201946f1ab2","size":1435,"data":"","first_seen":"2023-03-07T12:10:16Z","last_seen":"2026-07-26T15:54:43.263632Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.tooltips.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"958fec7596cab8311f62095cec3bef92","sha1":"17575f03daec844735418177759a61761f9399b0","sha256":"c3d480b53ea6bd1f32389597b5ae39801a48e3e3f7960a009f53942a6bbe3a35","sha512":"1e7696ba9e9701f4228e3a8d278579f49b030282a61ebd04ef80a722be6d71bcbaa268b8242cfcb8192b948f4247fd48a2d43affcd9a4143b9e37850bd2e713e","ssdeep":"192:0PqKHunO93jhA3hLCl8SH/1fvvdO7pVHK:ANjhqCl8Sf1fvFO1RK","tlshash":"a802970ab2723a21839f91e1111b010d3235967efe82907d3968dbf56d71c85b267f7b","size":8940,"data":"","first_seen":"2023-03-07T12:39:46Z","last_seen":"2026-07-29T06:51:47.565511Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-08-05T00:44:48.956842Z","times_seen":117939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5822b0d47e7ee0245539963247121d12","sha1":"ed8f86633a8cb26ccb5a1ac613e672434d64e4c4","sha256":"820a28254481164b1a9ab8b2e2a52951132bade2f33a4f5989cc0c5b5d84398e","sha512":"55c33fb4939a516e49a928dfc49876956167ea2abc2fee6f586e9d0f0ba08ad770242d9c87b393ec4014a56c38fc741569e4cfbaa94bf054b31ee7ae4b62388b","ssdeep":"","tlshash":"dad0230153d50dc662c117d0747465339dd331015d31dd420b8dd84c0dd1705975831f","size":203,"data":"","first_seen":"2025-12-07T18:14:45.594825Z","last_seen":"2025-12-07T18:14:45.594825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/functions.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe4f41042a392aaf98c6254d2cd0b978","sha1":"6fce5fcb41bafb93b1e01766e610459485846414","sha256":"a8bfd7e6cda15ecf2cf7515e90ba6fed0c2481cbde709f1d8ee2f79f564d2659","sha512":"304bf32b8c62fd3a1ef473828fddc865461a8e43c139acd2b11dcc6b5059161c6c41c77b8fd28f50d8c86ef55457e1d37953eec774c355149237c68a7e7201bf","ssdeep":"1536:kiYI4mAEGUQ/XDise9fJ5GszBkBq3PmQCyuHiV0PLMNHLRBEJnHugbrS0elFpRT/:h45EpGszBkBgKTMGIiS0erpRTB2fB9jW","tlshash":"6b93c898f43264ba09bf6d64505fe54534723b36ce35806364bea4b88d7cd893232e7e","size":94115,"data":"","first_seen":"2023-03-07T15:08:35Z","last_seen":"2026-03-12T09:51:30.764428Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-05T00:58:58.187035Z","times_seen":346710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0.6","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eca6ed028850aa07d5f4a003fd7079e","sha1":"1f02b8c5485108373bdd14a96bb1fe22d72e157b","sha256":"9556bca5ad5eb24439887d7339fcb687088776bbaa995553aa489c9607cf9e19","sha512":"6328977461a8c077169132ed6071bd785496b58a91881d169753784ef916ad88eb3b7fcfcae1389933bd2bb32e45cf685c38682817102be4eb0ac3749321b9f0","ssdeep":"1536:tjaxl8yra469QduD5VFg2WKl+2qCd+m0SNpINVp7Nu1HfwvoOdV3LU6AKSx:N469QstWKALm0SbI7u5WogbpI","tlshash":"7fc33cd87151b432029766a6453f0a0ff23b9d15740b456cf328e4c87e3c9a991bbfba","size":119386,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-08-05T00:28:34.67897Z","times_seen":4998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ad9165b167d54947b37f4b9de75ab39","sha1":"4c02f66fd8c26141450e310d6786f50f99913dd4","sha256":"eea0b9621509f98be77c5af1e9b5c952a675bda2b27c419876364017069e0c19","sha512":"dae93e3fe93a1e04d65bf1a64dbe7ab4f58938363c9b0d519ddcaa4608c0beb4dab995db8b115e174d8f2b2a539f5dadb0b60d79d96110477cbef6b172c1af9c","ssdeep":"384:4v6d5sHteQkJmVUrITdnMrQk2Y18e2pZN5+:6Es8QkJmmrq79YCe2pZN5+","tlshash":"5f42e9943a6579b307b362f280ef2342b2b6385ee44bc6519650cde45c78ccb61a2f27","size":12987,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-08-04T21:03:07.91822Z","times_seen":2904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/owl.carousel.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"810cd9ed28e9ce225c327bc93556f301","sha1":"c8c24cab1f282aa018cd0ec25f0cdb66252a54b4","sha256":"cf41260189e7fb3d15d418e575d3aa655cbf705766e4081f7ff66685ec0c38c8","sha512":"38c2693f9c6de614902f54b45ef4a75525154a521f91a85c16d3d61ff1ce034c1357a0dc91c6a70c50d0e45cea879695007475926b0f8f509f788531c73ce313","ssdeep":"768:OBA7PKMFA0P7MKNORmnLGhep2lcwJeL+C2bQdc7fCORUQuFBt33:+A2MFnhMxAcrQDV","tlshash":"2c137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42785,"data":"","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-07-31T18:58:54.280689Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"75b9f4ce04a0c1b8892677cf41a97ab3","sha1":"7e2f1afb8bb1174672a612b9652ba874ad97b990","sha256":"a8bb7d66cddd163397ad3eb39b30b68825b01f6128e3d781ce60efd45072df32","sha512":"6c337ab7d64bd2ba690cc4e30e297c1d8a59095db5153fe4c0117cc81b1f516392778b1ec918d80a1b8df6ff6de3d75ee1bbda4f547ad3a0398d10c3877bb496","ssdeep":"","tlshash":"cf31d71a57f8599a30f321317ee7a33566a362470c25ec80f90c62584f6cd653b7f92e","size":1583,"data":"","first_seen":"2023-04-14T10:46:07Z","last_seen":"2026-08-03T20:52:33.3921Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45fdefb040065cd33462f64aa2beb4eb","sha1":"93972bd08645b876a058e97ddd70efa20d3d09ca","sha256":"b65f1c922082e444c839c066f1f9aba1e0bbdc477c4bf028601c7263fabd8efb","sha512":"d982d1f1a35803f7d290f203e93610f0e62cde9cf0f7ec9a4d4868d93435ab40362b10b20f150813ec8f7d04b22b703fea599b5a2fe87b2bd37086980cac3b33","ssdeep":"","tlshash":"6221fd98bf5478b203e5e27931bfa705a77921b8f0c44490344cd9ed4cb0d821623faa","size":1272,"data":"","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-08-02T19:22:02.992428Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3a538fd2a39c22198e72c3b9f498a7","sha1":"c966ebdbd2701a0980a85671126664f3892d4f1e","sha256":"ac233233e7bcaf806041b243578fab081dced8a045d9a82756410da9ea2382a1","sha512":"fb50d60ece94f9447a8deaf22fa3d2422f4b6eaff522833fb311495ff653339896e7bf0393fb12a537b538f9bdb057369cccff99ce38d9449ed1e6d41f510ad9","ssdeep":"","tlshash":"4fb0125c64542f8b61e82ceba168b3ab6ad1235058244c1127c9d5540f12804cd84349","size":96,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T02:57:14.670559Z","times_seen":46722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d3fb02f90526fa664994848db387966","sha1":"c81a52e84890c563a53c76fa62f38eb27175dccf","sha256":"14e5b45ae7259f0ae964f80435cdf3869ec8b673e1b70ce3737d5f62131bb468","sha512":"44b16f1575bd1e95cd9ddedb7cf83d4ed99c7941961f1fe33d3168b3ff87581c84dd56b2a60abe4c28090068ef2f889db25700e570a00569afd1348157dcab0b","ssdeep":"","tlshash":"f0e055c4c2b6b413234b28bb21c92a85ba79820c23505061fe4fdac82b238c4d20383f","size":435,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-07-28T23:52:31.718832Z","times_seen":6559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","size":3037,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-04T22:00:06.084018Z","times_seen":39136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-05T01:00:31.869861Z","times_seen":920886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.10","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f379f1fd11072d82f45467263fc81f3","sha1":"d533bd7b2f946e2d37769d0d66272003c90a015c","sha256":"1718371fc359dbe2dbab673e7827f7cbf218125959d8e667fc9ed685f5352b10","sha512":"aca68fc999ae8c84146f604faebd490c9cd41644940b38f0190aef0a27f099b7443935cc140c5397e61d77016318f2c44bdae5bd775ef00eea252375563e0a52","ssdeep":"6144:nLVrhJxgQ34FxCXHU6QTWKv9qWGG0RxxYndANnTKbl7wnoyJDT2kpbBCJQ:nFb34F/pv9yRxxYndANnTKbl7wnoyJDL","tlshash":"51644be8e532387a04e743d7905a48047375e929e30785a2f1bbe1695c5c68d02ebffe","size":318260,"data":"","first_seen":"2023-03-07T22:37:01Z","last_seen":"2026-07-25T09:21:26.322348Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe733b72675d4683549f10df06f8072d","sha1":"c533e1b43bc3f63f10df0428cb81bc87eb69a53c","sha256":"290b9b630f7dc870dfc3c139ea090b68105f971d870a4774a1eeab5cfe31b7a7","sha512":"a0844b18ed80a58d67cd9eaeed3dc58f5df936f01c72c48d056d2976afc42b6d918f30a8e0baf284f2f04532fa34145acf05c6397c3edc4d55e93dc246e627b4","ssdeep":"384:JW/4y+6GC4BfP1ENJ/ah4AiMEkhrcSyhoOn/xqRlwch6In/vkEy1jAuAZcwlImlJ:wX+1tHzJEJ/cfbn3luKcwsIyHgvNB","tlshash":"85039549b691b0e302e3a4f4009f444bb1b75b5ab81acad0f315f6d06c7d84ea1a7f9d","size":41247,"data":"","first_seen":"2025-04-15T18:59:45.846942Z","last_seen":"2026-08-04T23:29:49.658836Z","times_seen":85914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a867d4e903395cd7ff738a0d24559eda","sha1":"ebb423027764716b249d49b4b57ce3ab4e1c7119","sha256":"9e07301dc4aeac38827b1a471654b820023f013ac435d8ade775918e1abdeec3","sha512":"1f9cd6efc0e9f98b3e3d76980512f1bf192df16c13fe8d39780875bec242b28d0fe3db907d26fbbca70705779e06c06975b91d80c848303cd8fca6346a844c87","ssdeep":"","tlshash":"4bc080d044d32c43714f10f61114500565ff496c05c04d049d4dcb531ee05418787a45","size":172,"data":"","first_seen":"2025-12-07T18:14:45.597024Z","last_seen":"2025-12-07T18:14:45.597024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00bed9d64e33600c69049fa1583eea35","sha1":"b4a23f94af8e91e5fa00a5b29cec047f0b37179b","sha256":"f3e69321ade5c9b660383f5e257d9ab712064e931f4644935abadef2356ed046","sha512":"148a0a7b3be82079a1049c0f15db57a4eb0838ccb1c512c387dda329c7a63c1cd40ced7b565ff78ba3cd864e3a95ed4e2b2b81e8edbe5a6b0af92a2086207681","ssdeep":"1536:R2UIi1VzrNBzmv8tvMjVcQL+HJre7IY75+kVmuBRjI3kmkakbm5r0vTKf/j/yDUu:RDtXlMj+t+Rh","tlshash":"cab37216f114343546db90aa621b850de3ba215cf405c16ebcecece95df6d4d223abf8","size":114092,"data":"","first_seen":"2023-03-08T15:15:31Z","last_seen":"2026-03-21T15:58:54.268753Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99ffe9dd3d78a157947df765da9fae01","sha1":"b841dca0f6e25b3650c703e8187a90e3b7925800","sha256":"6edfe338b7932db9683c6303a3586cf3c7e8844422294d9995eca6137bdd7c51","sha512":"910f99ec632d2c9b0b07e918d708b0938f034aad15686131c58e6a54e85918d46e33fd22f43a72007379411649d1a3106c5feca7859fa1d6e1c387792facb1d0","ssdeep":"","tlshash":"2d513122a49d603716df9bccf04a0ac9afec2122aa220e96fddc8c1d43d5b03d157439","size":3133,"data":"","first_seen":"2025-11-01T01:33:40.543834Z","last_seen":"2025-12-07T18:14:45.597843Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f82bd554bceed75c96bcb7937c0d67cc","sha1":"7b21ca26d28fd8ca71ba77d908943d5172e0b0b3","sha256":"90e446f69128e8af0d4fa9715961696a1065396866529b610f7fcfc46db41f47","sha512":"26aa9d89d577e71fbdc442e39e830f13041d8a5d40a9bbd2663717114e244c9cdbf7241b123d990c1872075dd02a8112d15d47f396092ed3beb810abc4888d6c","ssdeep":"","tlshash":"fb218cfb777e88ac46c8b3dcd238a81eb9c8a6c08065e589d7bd8c2d469425557c9243","size":1360,"data":"","first_seen":"2025-11-01T01:33:40.545215Z","last_seen":"2025-12-07T18:14:45.598692Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/PopupBuilder.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b40496d8f2a17404252501f81106ea","sha1":"0c46e7878c082931761563f32b1e183e82c3c660","sha256":"87c41ed508f3426410a3046dd1d8fe9112ee864a6e1d20dc97fb08bd081e6477","sha512":"a1857c4575d814a72220acf22571668f291de7e3e9a552bd9d80ce86d2d982b57bb7404e549360f94b0ca8c7592fb8308c777d6265809b2623a0297a65198c14","ssdeep":"1536:Rs2LCxrkTWih+S2wXS2pOfUlEUspfpF8/K+mdIH2bajwcMaXBKGwbN:RsUWpUspfpN6MaQnh","tlshash":"3583958133dff1ab4aefb355a1fe142cee3cc570b1469e7eb58484582890844ab96d7c","size":82135,"data":"","first_seen":"2024-09-28T14:13:19Z","last_seen":"2026-08-02T15:32:38.813497Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/plugins/jquery.modal.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8f50397e0560719c62a35318f413e16","sha1":"a643db87287e6e940fbabe6d8cfee5a8775692d8","sha256":"a7e8ed2d7bbdbcaeeee81c3433f057d64a32c000112bbd09b5969fc658d0a655","sha512":"fcf2d708251c814a4b84572e7c2f6ca64c0162267f7f5a6007e94e7a475abb4b9ee36da58a91a19196c451bf6ef223b6249d9171bb620b2bdb50fa11d88bc2a0","ssdeep":"96:jPCbS/KZzQeF0VczC5x4MIKG3okQ9vGmzSUXd7INVdYH9LzYIED1OlX:jKbS2QeqV3v4MdG3zQBHzS+PYIED1O","tlshash":"65a11f0beebc635902ff90aa3d9e1d394135a2b06407448c7578cbd979a8c08606fe7a","size":4953,"data":"","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-08-04T22:12:59.016022Z","times_seen":9201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/wp-util.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-08-04T23:29:49.612376Z","times_seen":101372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woo-variation-swatches/assets/js/frontend.min.js?ver=1.1.19","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a7e2bde6d83dcf65d25c466dbd31e38","sha1":"26af3735d5792354d1b0cace8774c181742966a8","sha256":"ec727d9d31dcb7ba62a9e4f09f2e1e79323673c3d9e2e50be10f74dbfe2df195","sha512":"2d763b25f4e6e1d731ab6eeef5040a595afb520fede379219042469ac6409a6cb7914fa2f3223329cea1b819f0cb6a00bd62214a26ba95c042990191f5eee642","ssdeep":"192:zOa1MpXM5HKBm3lgaKJvn9fTTSDELkuofUHwf0xFTOesTODR:OMtKJv9fTeqJwf0xFCXCN","tlshash":"cf422ea9702125b639ff71f6542f5e4870339a7840218a6278ce93e71dbde0842bbd39","size":12178,"data":"","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-08-01T10:25:17.786392Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442019,"data":"","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df014e8aea0c4f0977ca529123322095","sha1":"ba558b1415825a597ce46352f3c9a1eac8487cc8","sha256":"fa672ad28fb96bb2f8a5a3e0078564b3950b221c3def0f5fc88cc6cc2871b719","sha512":"4a8e342af60d3ffadc81189c2a0d6c2f44e9ac86406fd0142ecdf2e394a71881959c8cf493e521f0b9f4a617650f0928ba8b8137e4bb312bd4dea15df8e44870","ssdeep":"384:FubzguBg2FJ5ejrjjrwjip5fQL0db88MY942htveQRD2pE0adnOTekzcbdSnBl:QguBfFJ5ejrjjrwjip5YAht24frdOCMd","tlshash":"5ca2d628682064df82d3a365e8476b1d61338e57fe42da744278ac7525fcec65832fcd","size":21571,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-02T14:25:23.914804Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro.js?ver=20190610","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37deea7ceb0e0e42b45ee90f8f9cc794","sha1":"5ac7f882fa4646bee9efa6d50a17bec9ad983bb3","sha256":"208b462e3667afaa99662b34e6f84c028633dfb0eec5b56ec8496452a2954070","sha512":"044d38c50e0749c211aff5fd7a5900789113b75028f1c49682c4378c70d259b526486ddd23fd0d85c007d60b84853eb82e86517c03850100973e36f6895ac3ab","ssdeep":"96:iS8V1ka1irLtVzqiW08sKk/1Ln59yujXxI4wiicNwoeewaI+Wk5:ivVSZVwuNK+Wk5","tlshash":"1a91d143b30e8a164d3f28eb39ff7dc6456919b0980648e458e11e9026f89645bb4ffe","size":4328,"data":"","first_seen":"2025-11-01T01:33:40.403396Z","last_seen":"2025-12-07T18:14:45.521176Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4404db36e560c1db1966e54e3ae9de6","sha1":"1ed4dbed6b34c988ccd3c079ca6563099a59cc5f","sha256":"1113cb471b59e05bbc7b41a1c17d18647090249f7a6ac9419b71598c0c37c683","sha512":"0aee03472c0018356954ea17b563564082b3d0f2a941aa8af7b3c138107013aaf21b592bf8930e825b74ecc4d3d5633eca23d2058f94356e650e8195ad49187f","ssdeep":"384:RTsiqXwOX4R/hbSMmNgvNR00nOuCyRGF4dZ+wxmeKmTrYnRmf:RQij//bSMmNgvNR00nOuCyIF4D+wxm9C","tlshash":"7f523fe6b2335c533a6f51a7548f900cb135e87c6242c6b99c9ae7b3583ce402353b2e","size":13595,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-04T22:00:06.09996Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.autocomplete.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4413c3e2ddf4b264c39f16a5c3994b80","sha1":"879adc32320429c011540187beedcd2c84e79a8b","sha256":"4669f93c23967fa33e4b9acfa2f9fc8d47cee2808f44a64ac48a14b230438504","sha512":"43a81a09db529110dd1c80180240731aa4e27e606d12939f34848ea8244be7357edad8cc0ef75e6981c1451b078a90014eeb9ae75e7f8cd479dfd89ab0916303","ssdeep":"192:hDFbFFhp3CymZ8iH5EBPLhTHxkT5BwXWmByV/WRXnGyf4B+kdRMwHZliNRc1Sacq:7FFhp3CyCEBvS6xyV/W1ABT9Zsz5mN","tlshash":"7b42744077423332d66b209dd95b414e99bbae167c066890b31bc6c59eb9f08d0eff29","size":12766,"data":"","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T00:58:03.685747Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"1428-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1827\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fX0rnQE8ju%2Ftx56%2FW%2FLpQQmyfBUwEQgECmKs0jHfGkiNqT3CKvNbcZCLMPxXaCiHviBoS9tpU42fdZX0OSGrDg6B7BwJJud3%2FPB1VE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004cedcd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5160), with no line terminators","md5":"7e06538f036b4aa656536920e39dc1e9","sha1":"668222a778cc9b24d9b6dbcd2f26d7dd3e6d9897","sha256":"a1ca17763c6f1df520727d1965a0cd3d96e94a9f2f5cfdd778cf4d5c9cc64c79","sha512":"0cb3a5404560263bbb8bc7be43e62bd6e09e5ff48b0092b569049ffc53148138cc02ebd8e46d656bcf2f2123c421a18b5b696316ff98c3687f8c1fe7c4be11d0","ssdeep":"96:P8fuDZdngXIF6ibg514fJR8LmrK1WyptgX+UzPoep:UfuDngWA1kRcmG1W0tgX+uPoep","tlshash":"94b1881c73443c7681d09179296ba70c83aa425cf511c05d7aa8e9ecc879dca3b67ff5","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-07-19T14:48:24.836605Z","times_seen":52,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2020/08/krungsri.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/krungsri.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 25 Aug 2020 04:53:52 GMT\r\netag: \"3932-5adac7d511800\"\r\naccept-ranges: bytes\r\ncontent-length: 14642\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbaVK%2F6KvdzL4d%2F3fxOgb5FCMchxbZ7hSFFMMV6%2BIriB2uAufL%2B24CaukFlbi2fl9Cv%2B6p%2Bv8WhB2WrIaPuXaKpVGoXbM15W4sEJyKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6004e1e22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"3df1782ba755c7025a60a1fc9ac7603d","sha1":"7cf73bf733c8230ced2da7c2283c7e4e9efcec9e","sha256":"2c88db933c8d2877e3903b9dc94a0a0fcdd179784fb9160434fead1b01fce8ef","sha512":"99cf5d66e1feac5b967a2b97747b2d2c1a02efcc521baf1311762561737279af4fd98614ebf39c0a9b5f7779b7bf98d70740d4344dc1721dd92d319ad16071bf","ssdeep":"384:+JXE05wAfTJu9kwGP0KTdGClz42BrG+XM8SfY/dTSGP:+35waUGPVBhz42Br3MfYVTSs","tlshash":"c062d0ca226168197e8cf400a99d8bc6a17e37ddca5a770dbb660cfb2085c04f7136d3","first_seen":"2025-11-01T01:33:40.506756Z","last_seen":"2025-12-07T18:14:45.503424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2025/10/MM.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/MM.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 29 Oct 2025 03:47:45 GMT\r\netag: \"28be6-64243fecbab0b\"\r\naccept-ranges: bytes\r\ncontent-length: 166886\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ozz5T5NSob7pRfU%2Fn4Hr0YlPqg3FOaWHTKMJmAA%2FlT5PAFsmqO0FudLBpCINfpr1Qwribkz9HQ8SLQtx470PUGUtgkEOmRgqhHJXqf0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6004e1e23783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1280x1280, components 3","md5":"d3df49b0dd214d481351d194c5966115","sha1":"59cf7076b1a3dab04f91ef5c7ad065473868063a","sha256":"70b9a03c53b556d83c03953a45f2a1022272ec40320bac75418ebb2bb103b140","sha512":"dc1155ddc5be5db8e92aa7774d0b4e8d007eaf44028dc4d05dd848df1eb67c8a7f78e3960977ffe0e192def451017bf67e0af311b07dfd41483ed7920fdc6032","ssdeep":"3072:rkoaCi068lBl8KrOlabIm8iPFt2gs/1r7XZLApn225EerJb:fm068lAlDiPP2gs/p+pn225E2Jb","tlshash":"61f39e039c198f97a558d7a8bf131e6d6f5a2b0c94c236fe40221edb3f696714c8e42d","first_seen":"2025-11-01T01:33:40.513186Z","last_seen":"2025-12-28T13:11:53.385785Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":1606,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"72a-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 982\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejKNEFdRwcuFGUDCaJhvp5v%2F%2Bax%2FwgMWk96eCClPsaNcq2hkO9VvxZ2b7rlv5s8b8QXH8nOCU1yf1%2B8Kopv3hA36dryPCkNB48XVNL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e2f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"d0a6d8547c66b0d7b0172466558d1208","sha1":"ff93916519c7b9483251f609e4d29f38c30a66e3","sha256":"3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612","sha512":"48bb25b08bfcc9944cd1fc3bd039ea41d1a870f488971839f2891b91710f3ff9eb0b523aa7ab888bf9968bbbca41a48761405abbafc6c6d24927c078049545b8","ssdeep":"","tlshash":"4f31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13431867815bfb3","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-04T22:00:06.140844Z","times_seen":52665,"resource_available":true,"data":null}},"time_used":1327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19276\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 17:17:09 GMT\r\nexpires: Fri, 04 Dec 2026 17:17:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 262623\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19276, version 1.0","md5":"31da10f2e745d03f329cfc87d45d6c3a","sha1":"49d517f3f800e04eb6dfd7948f808947343ac057","sha256":"a44817a3dcd26f5c659cd92c241f7c9e96414a74c0de249407064364573cd6b5","sha512":"ab7a86d73da8bf083eca72c1c2bd1ded7661339aa64b692194244bddfbaaa6720b24535005ba8a43d1cd21391916854fd85921763baa423b1128bb9cf3ec22cb","ssdeep":"384:pkLL43v8zfymKhBeCuoBwkA5uldAr2mQGEWweZvhcg2PdH/U6:OLU3v8zfyjhBIaldAHrczFH/U6","tlshash":"8282e01eeb1fc5a8fd0083ebca07839c77765810d1b27d976daf80d4ea8d1e5122118b","first_seen":"2025-05-04T15:41:45.605838Z","last_seen":"2026-08-04T20:14:04.393333Z","times_seen":3413,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4yPRWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4yPRWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13956\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 17:17:58 GMT\r\nexpires: Thu, 03 Dec 2026 17:17:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:42:15 GMT\r\ncontent-type: font/woff2\r\nage: 348974\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13956, version 1.0","md5":"38db15c9e26033a3395a3ba579fa2b46","sha1":"1c576d0031529f1e6100f472b95c079473fae08e","sha256":"e17768bfa4621ab60cac01acb59d3b5e5012b4451ee3d233c1a6c37125844356","sha512":"e566083c197a851764c799bd23c438665878abc0263788d1cdcff7b1336ae10928031ca682ebd4043f2323f4a0dbc095664a0d3ef01a9a96d54bded7136877a9","ssdeep":"384:5AP1vyAv/MSLj6T/niBrRPS1k+Oa/F3d/OODXoC0JNUxN:C9qaZLju/wrQ1bx/FNXXo/wxN","tlshash":"9252cf24aeb68c64fd116bb2a049eb80f6e41d9ae1d6b10096f116e305ffd42b753e31","first_seen":"2025-06-25T04:43:59.51602Z","last_seen":"2026-07-31T15:24:18.863146Z","times_seen":32,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 15 Jul 2025 17:37:35 GMT\r\netag: \"1c679-639fb3b5a5acf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 15315\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZJp7oo%2ByeRgQdl6ew%2FSvrsTX3dgLsRXXOEff%2FSy7%2B8dFWiewHOpdBVzkkoXPflJ5venWboEnfNLCCv7o4J1HTPQ%2FdXxZhwMhpVj2SM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b6d57783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-08-05T00:52:38.652882Z","times_seen":177898,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/prettyPhoto.css?ver=3.1.6 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"24dd-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2043\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQl3Kva0q4AQRTMrvb2wvNS0Y1li0pBMQzoI5e%2FoFvBHNlNBT%2ByxSXnRQRmw%2FsZuR2s2RGx33%2BHkkwlB6VSR51a6fzyqUvCp1m6GwhU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d60783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9437,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9437), with no line terminators","md5":"fe6f7681b3418899883937e379005ee0","sha1":"68d977eabc937edebb3de3dd45992177cbaf3470","sha256":"c9dd590b56729b6eb692c64c1d530adbddbf39f72cb437e3280fd00de8c7d354","sha512":"6338496f9174d009519ea0fde547f309f91d9c99ad9ffd6b9f3391402405012573114a8f1ffa828ebe9c12adba7ab0a696258126b8b9325d4647574b8b54ba6e","ssdeep":"96:piltXJtJl48xK+hS4GLjWvQ/h2lNUmfmEcpm/bHWQRh1GJrMmqW00YC54CRjVwcE:gXzr48xKj/WI/UN9gpWb2k1Bmgz","tlshash":"961222238a58698df3e7e1a7dd82e79899341437ff030e3ee9195f688dc6186391178c","first_seen":"2023-04-08T17:02:49Z","last_seen":"2026-08-04T22:00:06.065684Z","times_seen":189,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:55:10 GMT\r\netag: \"a50-5ce0a04dadb80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 932\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnAnuXY4hVq0UUKxd7vMG5QNEWVJCTizKvPWbm44eqiuH384EM%2B6v5u4Rutiv%2BrAgJZYX5oEu7Q7qDj14ho85HWBIYRwnbM74ZgrZZw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d66783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"76e12144b6be9bc0a17dd880c5566156","sha1":"c57db768b452aea923a2b083162e9e6ffb98d2f8","sha256":"070edfef42e0980783d0acf8fa9ca6a9833b994eca13ffaa94e9a2deb47c92cf","sha512":"090a8ef4b25ebde53333749f44ba1318753ac3594d1c9d891c0b66664813f60584ed126c15d30478ff8a1e8dd30b0338ff3132331e5aa9d140213c23bec67454","ssdeep":"","tlshash":"ee51127066002c414bbf92d77eaddb4576ae3880cd1faf97b0c21a3c57785851263e5e","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-08-04T18:20:00.638143Z","times_seen":4261,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/PopupConfig.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/popup-builder/public/js/PopupConfig.js?ver=4.4.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 09 Sep 2025 05:29:29 GMT\r\netag: \"177a-63e5796988372-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1763\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9srkR1DRtjaZg1wHZxqyJAV%2BXpLKnhyVOVNdaY3HbrKXmc%2Fe%2BKvqHSpvp0dFBu2zMGMrP9M2yTH65uYuvp8IiykmjoyQeTKNQJ%2FBcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6010,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2826)","md5":"c7a493f7e281b7a2c5fe182a44ba8367","sha1":"11c971b79a4c8ea2dd1b6b4d7b33192275054f44","sha256":"3fe8c79d67b21039a5d059ef40761950fb76e1d17933d61509f7eb3c68f5aeeb","sha512":"ad93df5a3fc14c672eaaea8a1aa96009df34380bf5db8cc85acf97f605d5d0807fcafc2adc668bb98e7d03d0d3df512ed80d9dde9f64c2353c4d58388c66d8c0","ssdeep":"96:aPWiAlsT5rQocpDpNyOEpTDfm9bDDsZuaiI6/PHhAaM3QLxE6bY6beSrfXQFSXYA:en2pDpkOKPSbXwiI6nNZLxE6bY6beSrV","tlshash":"23c155a4e168323d977be13a128f1b1c1e3a9560f10a593dbbb95ef914d43000d9fb7a","first_seen":"2023-03-07T01:42:32Z","last_seen":"2026-08-04T21:29:35.19522Z","times_seen":3557,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"9d5b-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 12054\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLsYuypwr3Va6cW49Fr%2BU4aowEsYcAzAF2hKnkuCI9U9G4S4O%2FwUnqU5cOv%2FS%2F%2F62Yu7nbiwGv73exZ3yYji%2Fr9sWf1m0AS85snL07w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004cddc9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40283), with no line terminators","md5":"93bd6b7a85a5922edb04dabfeb27e919","sha1":"ec5b8a88279e0d1cdf003d4d06f2e2e0b7ba62fc","sha256":"48e8f3e8454763ca5d315d18e893c5c4c5755f035a52843ea0c8cdb8774cc3f2","sha512":"1a53d9c443010f8dc9e03c2c05b19f22770637b301684d091d6d646ec97c25ab9073956c93a475994dfbee2c9809162a6dc0a9ee2ae894b66fd40682781638c5","ssdeep":"384:xg9BBsWzesl9C21Ab6wQwqaAVtx34zPPoEmMvyH2ImzeUs9l+f9LXTIfBtirFw5Z:xg97eSAb6wQwESh1dzVEl+f9LDA4hFsv","tlshash":"9b03a7c9b74570bb0393a17a823f030b63369454b40a456c7478d8ea5db9e4d23bbf79","first_seen":"2023-03-08T15:15:31Z","last_seen":"2026-03-21T15:58:54.321072Z","times_seen":15,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.2.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:17 GMT\r\netag: \"5075-5a745b18dde40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5816\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65EjC9rlb69JgZHEwZ3WfsR9HeoW4xmsA6eTzjBwuAF0ypasFS%2BgmOiruzKt76iO35oj%2FD%2BXf6IfqGdxIEt5%2FOvMv55Oc%2BVHGjrlQ6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e3a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20378)","md5":"463cf6ebc00dd2045999aadbcb73a74a","sha1":"52185ae4be6f23dc20aaa58b86c1f98db3f840d9","sha256":"9be6923457d76debf4c512fac0a2173aaa94748868d26566515ce2a4156d083d","sha512":"d5db18b3e820602dfd58411be979b943c78ea4b819440177f2f4b324f211d9fb2f773e6ecd6b6ba6c8d5e08652b097bee6f0a3b804cd8e7280ab72e1917c919b","ssdeep":"384:leVk5QRqhaFKTWKWaTOqU5SEhy6ya0FmDj5OhSu0LSah4A5Pz:leVk5RhaFKTWKWauSEE6ya0FmDj51u0B","tlshash":"ae92c968b91070f552b7373bf13b3b1ab233383a944651206415d8787abed4f222af9d","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-08-03T06:59:25.214382Z","times_seen":1398,"resource_available":true,"data":null}},"time_used":1150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.tooltips.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/jquery.tooltips.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"22ec-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3048\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JivhBwpCCBZo%2Bz7Z3oF4RiC9AY43pEP6L2jcVzc8lyq50vDbS1XGlc6KXXhr7tGZxq67Ye2nYyqemwTPOZHsH8VSr1ylN87rwBBDbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e3d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8940), with no line terminators","md5":"958fec7596cab8311f62095cec3bef92","sha1":"17575f03daec844735418177759a61761f9399b0","sha256":"c3d480b53ea6bd1f32389597b5ae39801a48e3e3f7960a009f53942a6bbe3a35","sha512":"1e7696ba9e9701f4228e3a8d278579f49b030282a61ebd04ef80a722be6d71bcbaa268b8242cfcb8192b948f4247fd48a2d43affcd9a4143b9e37850bd2e713e","ssdeep":"192:0PqKHunO93jhA3hLCl8SH/1fvvdO7pVHK:ANjhqCl8Sf1fvFO1RK","tlshash":"a802970ab2723a21839f91e1111b010d3235967efe82907d3968dbf56d71c85b267f7b","first_seen":"2023-03-07T12:39:46Z","last_seen":"2026-07-29T06:51:47.565511Z","times_seen":221,"resource_available":true,"data":null}},"time_used":1777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1774,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 19:07:56 GMT\r\nexpires: Sat, 05 Dec 2026 19:07:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 169576\r\nlast-modified: Wed, 10 Sep 2025 16:43:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"201d1d24b464e41d18e57dc58687f055","sha1":"d35fdb2a75da697dc080ced73400fc394f6cf4b8","sha256":"c3c4f89f25c7c8343a8b8ce0a120fe2c419809a1e92cc9313cbb5a36fb10a411","sha512":"8c695fb5dd450e0d4355f898d657d6d5c943c5c049284c9b32c017fc89d82296dd84b93abe8ed5ab8c44a2a480515d37e12b1dc3c8f2532406108d849533e93e","ssdeep":"384:IKA0aP4lPNAX1S8i6ePT1EEgJM3tgs4+fWjg+lva3AXnpj9gx:IRyWJeeJwgsLf0vg0XI","tlshash":"fd92d18fed917bc8f29d04ae94830ffd6877b10bd1a081790ad464419ca87766a6dc47","first_seen":"2025-04-24T11:01:06.88202Z","last_seen":"2026-08-04T20:41:49.127258Z","times_seen":3527,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":90,"dns":2,"connect":15,"send":0,"wait":16,"receive":5,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woo-variation-swatches/assets/css/wvs-theme-override.min.css?ver=1.1.19","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woo-variation-swatches/assets/css/wvs-theme-override.min.css?ver=1.1.19 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:09 GMT\r\netag: \"1c89-5ce0a085f2040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1404\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1jHRfSQeNoE%2BLeQlVRlqRQbmPiGNEH39vla3LULO68ZVbVA8n4CHuGkdxCbj75XOw0eUli6aTXGwhG8VeeO1dkJ8NIBS4ROGAahYwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6dac783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7139)","md5":"d3a9e4286a2cdfb82d2548d8606f8224","sha1":"ffe6639d5efa20f85d3002b3971724cdb6c2720f","sha256":"dc81bcd8502a26e37110471dc2c47906d0e924324f64811830296c39a06ae035","sha512":"308486461164db64b40e9487afe381a6c541c45552898967ce70a0b80188e38ca3ab5499c522bccbf3183c1fe2d3c65855b9449197903976be9e44a3afd7debd","ssdeep":"48:wbdDu3TaNX9pz7OxSNWx0DfhnWHoUtvJLN364+CBZRMTOXiS6FjZvnHGfR4lygyF:6b7rNvnaTR36UgSoSBbt7","tlshash":"bae16bc9e0bb1a26355f453f2cbe5dddeab4f52453652865fc4eb34b0b0ca41832368a","first_seen":"2023-04-18T23:17:22Z","last_seen":"2026-08-01T10:25:17.751921Z","times_seen":150,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/Popup.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/popup-builder/public/js/Popup.js?ver=4.4.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 09 Sep 2025 05:29:29 GMT\r\netag: \"981c-63e5796988372-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8132\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZg7EOKdoVSnih0seVYcplLOS2PafGxLD7YiFfj9jx3IkqjNGoPHMaRCqACNACyYDRUr2ArgbPOaIJ%2F8IUJkh%2FHN0jkxZyseZAjhA1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5515)","md5":"aad76345b176f2bdea7082ce27717aba","sha1":"1f3c44bf0b8169741bc5b3e71e83e05d07b59338","sha256":"113500b83a965388babfdb15b9740741f750db1890f6fa3677cf1bcaddd96089","sha512":"032c021f68b64b7ee9a8f6ffbf21313949074ae63c6fdaff9b7d14ecc6a5c092cf3680955db25766cadff3e26f47f24c8c57a22621c894267970b96cbdcb1150","ssdeep":"768:ysEyFJzkzQfBZx5XebLRfXgNyOaAnhRgyuNJG+4JDzy5pKvy5pKOtZFlusDt6Iu:ysEeJzkzQfBZx5XenR6yO/nhRgyuNIdn","tlshash":"3b03d7b592913153c6ef8157a2cf2b1c3d27d860934aac4ab658a0de77d0f45306bb3e","first_seen":"2023-07-12T23:47:38Z","last_seen":"2026-08-04T21:29:35.187494Z","times_seen":3186,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro.js?ver=20190610","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro.js?ver=20190610 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"10e8-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1289\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ8%2FE%2FQdHaOVumkjV2TsqiLRFh4GPpZp8zX8ap1k%2BfmNhThQB%2BARmQN9BZnr7PsS%2BzDr2BgTEFsfa%2BzKk4B2p8le7vzJJ1OmmBl%2BGuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e2a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4328,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"37deea7ceb0e0e42b45ee90f8f9cc794","sha1":"5ac7f882fa4646bee9efa6d50a17bec9ad983bb3","sha256":"208b462e3667afaa99662b34e6f84c028633dfb0eec5b56ec8496452a2954070","sha512":"044d38c50e0749c211aff5fd7a5900789113b75028f1c49682c4378c70d259b526486ddd23fd0d85c007d60b84853eb82e86517c03850100973e36f6895ac3ab","ssdeep":"96:iS8V1ka1irLtVzqiW08sKk/1Ln59yujXxI4wiicNwoeewaI+Wk5:ivVSZVwuNK+Wk5","tlshash":"1a91d143b30e8a164d3f28eb39ff7dc6456919b0980648e458e11e9026f89645bb4ffe","first_seen":"2025-11-01T01:33:40.403396Z","last_seen":"2025-12-07T18:14:45.521176Z","times_seen":3,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 11 Aug 2023 18:18:26 GMT\r\netag: \"1590-602a9bd204080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1803\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mUXyKElEUe1k8U4vQi7uLh0bMX61E2ogCWWt0sIDXLLZqk0zixn1Q6V%2B%2BwKw2%2FXutvwN%2Fg5qnoy4KnfW4Lm%2FrGvpguUQ5aDqzyngKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e3b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-05T00:55:11.76231Z","times_seen":201870,"resource_available":true,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 20:53:49 GMT\r\nexpires: Sat, 05 Dec 2026 20:53:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163223\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13488, version 1.0","md5":"7e282092619e83527baf07b5de0a1753","sha1":"fb8d514d7275260715385d88a3d327a128610a74","sha256":"20ee1ffc0cbccfc9e4b7d660d2937f82b75d0eb41354e71e22752495aa51f68a","sha512":"fbdb6d402588ec80a8b32cb41899b3d81c265a5cbb0a4c1d9cc227bac95c917656919f225627720d583ffeb6c49dee4d8abc985bde4824779658955978fe84d0","ssdeep":"192:fGhuoiIthoFe3yjqs+WWI8N0n/efbCbATIyS0714d1iRmoVCUBYF7iQEoKmsXdEL:fzopho0gBWJNEATSFiCUBK7i/oINnbW","tlshash":"7752d044932be8b1ca1b09bfa4e29e1ae7412c2e60fb489554709127d5fcbf4c6533e1","first_seen":"2025-05-04T15:41:45.710779Z","last_seen":"2026-08-04T04:54:39.748585Z","times_seen":629,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T18:14:07.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 18:14:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://thaicigar.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://thaicigar.com/wp-json/wp/v2/pages/1724\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://thaicigar.com/\u003e; rel=shortlink\r\nset-cookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o; path=/\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FBPwzQj64ZGTuCJntNRwZU0l%2Bi3qGeu%2BFAsH99aHWxwQvsCK3%2FO3LiXfjPnapPP54xKhovzlbTOHtbGfaIT%2FmjukKfiQoP%2BEIXi\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9aa60037490656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slider Revolution:6.2.10","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:17.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:3.8.2","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WooCommerce:5.7.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"MailChimp","description":"Mailchimp is a marketing automation platform and email marketing service.","website":"https://mailchimp.com","common_platform_enumeration":"cpe:2.3:a:thinkshout:mailchimp:*:*:*:*:*:*:*:*","icon":"mailchimp.svg","categories":["Marketing automation","Email"]},{"name":"Contact Form 7:5.4.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Smart Slider 3","description":"Smart Slider 3 is a responsive, SEO optimised WordPress plugin.","website":"https://smartslider3.com","common_platform_enumeration":"","icon":"Smart Slider 3.svg","categories":["WordPress plugins"]},{"name":"MailChimp for WooCommerce:2.5.3","description":"MailChimp for WooCommerce gives you the ability to automatically sync customer purchase data to your MailChimp account.","website":"https://mailchimp.com/integrations/woocommerce","common_platform_enumeration":"","icon":"mailchimp.svg","categories":["WordPress plugins"]},{"name":"Redux Framework:4.3.1","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]}],"data":{"size":737933,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30569), with CRLF, LF line terminators","md5":"047a8e5cbf990cfe544dee8759ad8b1f","sha1":"ea9b341350cf8e1515c091d349b70969229fa1b3","sha256":"868623ef8dc1da5b8c3bca94a6e75d9705176555ddd91aa645fbca49c619700a","sha512":"bd705babdbaa4f3a9269f81534180e3e3c8c6abfad5963ce896a2100146f2fc169d749e8e1b1fc8ad375bda8061519d4d87fccb523890a8cfe924f7a8028c028","ssdeep":"12288:C6O6sTvkX2n/SmbCoyxh2oUWSQvu9Og5FuoAxf2db:VO6sPPpoodV","tlshash":"aaf44bb29cba1d2a4b6b168580dcb7c8bd5feb37ea11c6e1f4bf122813c099145c25dd","first_seen":"2025-12-07T18:14:45.523663Z","last_seen":"2025-12-07T18:14:45.523663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3081,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":3039,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/plugins/jquery.modal.min.css?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/plugins/jquery.modal.min.css?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"c81-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1772\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBznlNJ5STnFNkwpM91ZBSd21StL%2BqFeo4WMfdjjOZRZnroKTcoWQPc9xezuM9MahPK39H3ZfYxO3TiorM%2FKWUXIa%2FZ%2FCucHFk0oRbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6d9c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3201), with no line terminators","md5":"54e7ff4998b2900efc138ead15e54a93","sha1":"928eeaad352ee4698ec1dddad216ec38424cfee3","sha256":"eaa593bcfe485f4b5a8ac997cf9936604f9fbef91652db94a8e22b75d612bfc1","sha512":"4f754bd6aea331423318b441f73f3aa0983d3e017b039e5e0b65e407ddf3c964aa430dc9bbee8810965805f4fb13dc0e1ccec708c08e652a5cb2cc67527e8079","ssdeep":"","tlshash":"8961b6b20d57056a72abc77287d51ba80475ca37e6130bbeb1267138c25a8d425f721f","first_seen":"2023-04-05T06:18:56Z","last_seen":"2026-08-04T22:12:59.0292Z","times_seen":8555,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/css/seed-confirm-pro.css?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/css/seed-confirm-pro.css?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"375c-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2756\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4bgQZXlMRtgLV4ilkK0Fs%2Bro3RPNzj9KH2zFSf7J%2FSKlhvUBQLEVeb9m4eQ92Zkorz9FbVJSg9%2FG16f14vw%2FDK9rq7kvwoF2VCHe2s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6d9e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14172,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"88db7220a2aa6184dd1f7da9fd2dc720","sha1":"129787b05be6272b8828b973e2b5d03577c9725c","sha256":"1b8e3f5f61be6bbffb7c68f44f0a99070df15025b3e0bca1ae11754b218087f3","sha512":"b7f0838e8cb8515050ef6ff0413b14b1aea22f82b4c1653af381391a4e4ea53b5ef29ad727b26c5bd1d95fab961858c7f71b0743be4d70830e1c0ec04538ab4b","ssdeep":"384:MgZfOgk0UGiTEKMVjJ7vTS1YaL+eeRCUSXNKLt5Ae:DZGgk8JvTS1YaL+eeRCUSXNKLt5Ae","tlshash":"74522f3256841e8ee93f4cd15ec55ba9272f05931a4aec7fba00369c83cddd5869338e","first_seen":"2025-11-01T01:33:40.46926Z","last_seen":"2025-12-07T18:14:45.525138Z","times_seen":3,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Kanit:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CPrompt:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap\u0026ver=1598583033","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Kanit:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic%7CPrompt:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap\u0026ver=1598583033 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Dec 2025 18:14:10 GMT\r\ndate: Sun, 07 Dec 2025 18:14:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54786,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"366db299675c20ba452c1f04a6817b67","sha1":"422ace636bbdc3f48f5126f7c0c4d98f357d477f","sha256":"0789ae5fbc1de61fac1f49aec9c5249ff850db82fc20392f6df6064caa5770cb","sha512":"e9eb1f71bb03b6fabb7b47b64961e129035570cb76f1caea4fbae3f3da71e1757bbbd4d64d23045b728dc2cc6a4c576ebb0c04bf40b872da3cd9d12303a4073b","ssdeep":"384:X3Pp3S3S33lpX2Dop0Babpm1qWp+bUrpZgtspgtGrpZgtRpba+tcdaWr/jZbmPa4:HNSSxOdaZu3HDaZzcC","tlshash":"2633cba1442bd540eb972dc223cf7e3ade4ea1617450d979affd18c8ecaac22532474d","first_seen":"2025-10-01T09:33:15.926889Z","last_seen":"2026-07-23T07:33:16.091634Z","times_seen":29,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":61,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/plugins/jquery.modal.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/plugins/jquery.modal.min.js?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"1359-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1643\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2FPOfomwPlAivYW6aRl0RlM1EGMIuiDwKgtmkqp5G%2BH1vs6qrEq5Yqx7emqKKI1IhGONpRqU7EfWvSdV%2BAwwux13TfMwsDdURGDYX1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e2b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4862)","md5":"c8f50397e0560719c62a35318f413e16","sha1":"a643db87287e6e940fbabe6d8cfee5a8775692d8","sha256":"a7e8ed2d7bbdbcaeeee81c3433f057d64a32c000112bbd09b5969fc658d0a655","sha512":"fcf2d708251c814a4b84572e7c2f6ca64c0162267f7f5a6007e94e7a475abb4b9ee36da58a91a19196c451bf6ef223b6249d9171bb620b2bdb50fa11d88bc2a0","ssdeep":"96:jPCbS/KZzQeF0VczC5x4MIKG3okQ9vGmzSUXd7INVdYH9LzYIED1OlX:jKbS2QeqV3v4MdG3zQBHzS+PYIED1O","tlshash":"65a11f0beebc635902ff90aa3d9e1d394135a2b06407448c7578cbd979a8c08606fe7a","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-08-04T22:12:59.016022Z","times_seen":9201,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2C2_8IaWMu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2C2_8IaWMu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18160\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 21:41:49 GMT\r\nexpires: Wed, 02 Dec 2026 21:41:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 419543\r\nlast-modified: Thu, 28 Aug 2025 11:25:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18160, version 1.0","md5":"3d353ab63f7fcf80a9d9a99d63bd3d06","sha1":"05c1fe730299524b9fbd5d7a2e4e5ddb4397fa12","sha256":"54eb2e1925b4a3edd3460b8140546fb3e7767666d7ac1c1fcc246d3f1ab8157a","sha512":"658aca9d7bb79be65a299ef05300749d3c03628ffc77b0218d800698c4d10f3a850b480aeb1d223ed2a0852730b3ea7b36668ac8d57a8f39ca3d22c097eaa045","ssdeep":"384:OGiZC9yyvsZHOcOOYYJn2XMbHWadn/Bu8cQPCAcnIh19LfW28:diZQyy0ZucDYYJ2XUleQK1IL9LfW28","tlshash":"0a82e1286c4841bbd075b170265051158f79dfb6d3821afcecb670befa15a38f598d07","first_seen":"2025-04-24T12:40:40.865612Z","last_seen":"2026-08-04T20:55:07.674469Z","times_seen":2878,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 18:22:59 GMT\r\nexpires: Fri, 04 Dec 2026 18:22:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 258673\r\nlast-modified: Wed, 10 Sep 2025 16:39:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19236, version 1.0","md5":"12c6e4c44681180d8bcfd68b7b7b1258","sha1":"7f16e28ecf3a9e4d8454fb1010b60af5ba835582","sha256":"c6c4695e70f2b11892dfaec4d4ab44065ed3a847f4d531cfc1340d2e65a738c9","sha512":"2d314ef767721d9d56ce01b016803b02912eb0b5c0c87b0da5dd15a8de431b6b69abfe04cd71fa57881fd10e300f8ddc96ee82292d54fd19b9161361ec96641a","ssdeep":"384:mMLVaCCwmhi5dxGVfDxuaYdaN3Y4pheX9cWjpmHSEG:9VaCYhibkV7xrOaNrbWjQS7","tlshash":"f582e0a05e8b67c9e827dde31228ccda374a08e78eb6c1c06fd5651269784351ec3b0f","first_seen":"2025-04-28T13:50:35.994991Z","last_seen":"2026-08-04T18:06:40.637871Z","times_seen":4523,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=10","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=10 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 02 Jun 2022 03:45:36 GMT\r\netag: \"4038-5e06ed6a95800-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3149\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jB0%2BjFMVHpu5oGRMHWYT3QFURG4kZ5oReZnxVaY7wlrZbBWVxROhhulRoEoQy4EIvhAJsZFISZXWhsQoPbFeUY2yVoH0n%2BElqgG3dTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6005ba933783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440), with no line terminators","md5":"c6ae025c4f7829a7307250c497cb7251","sha1":"ba241ddbc346c724cc8411a93f0f0a6aed0ad2dd","sha256":"48b3450b1fd12ea2178361ceb247435f27800e844d432435e24898ee893fead6","sha512":"667dd3efec51e23373680c966d344b52e0d8499fe96b53fb1877099add4c7366e7f3096adf34f1834dea84d23bab2b7461ab361bd531c4189cb36dbe7750f45f","ssdeep":"192:q0apV2rWDP5nWi2IWR1vZTPVj5z3sM35LSvx:qFtDP5WiMZTPVj5rsw5LOx","tlshash":"867221aa5e0c1168d2cfdf1937aa960ea114f731b29d5af824a17850f3ee5d41d2e383","first_seen":"2025-11-01T01:33:40.460309Z","last_seen":"2025-12-07T18:14:45.528661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"14b9-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1375\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBbXuJE%2Br%2FuaSYF1MbXYlTeHrnwPkcCL%2Fnfcda1HhCuUvyl%2F7K0SfZ6nNIe%2F6uoOJtJQoJ02EdfAslGW5qRLh9bhaTukh52lrOlDcpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b6d59783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5305), with no line terminators","md5":"ee78f26525b08d4e372b92a1a3ed1d26","sha1":"b4dbb4706c8a479b3891cbeddf19e162e36bd61a","sha256":"7fcaa4d432eb8627f0ab7efdc3ce11a4e593f29443fc6bb1888f4955c55f868b","sha512":"1200d82a24a5e1c1d6d97f49d26789efd938fcb4f399d390d2060723429b2fabeedc556978156b45da264bbd9dd3ebcbed5a142198050d2459ed944625f4c9c2","ssdeep":"96:Wne5FOp0KWty79n3H8L8BDiJCt44fulN8LaKFGWxa+QSCOGUuxei+FP2:WnCAp0K+y7hHA881lW0vP","tlshash":"e9b1502044201632a4ebcb1f6370fd4721f9c792eaa366dfba16f290cbd744e151729b","first_seen":"2023-04-06T13:17:06Z","last_seen":"2026-08-01T04:32:14.222249Z","times_seen":1248,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/css/theme.css?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/popup-builder/public/css/theme.css?ver=4.4.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 09 Sep 2025 05:29:29 GMT\r\netag: \"119f9-63e579697a8b3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 11607\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZhxS1G67r0dh0iFQnzswDOk48FPgrAh391kXcByqGqIvjvVYYy9%2FJLOi0tIO08GHpykvJ3mvv%2BhcyuIppHAyumZi%2F%2BB%2FR8kgRSKjWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6d99783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72185,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4774)","md5":"e6fa0ab1e511473032e374f0ec4fc1ec","sha1":"002f24a50270e1c847d21b8530db933dcbdc499f","sha256":"96344c48276b6477946734dfa6f60c187fa33d371c0f4bc2156edc0e2868617c","sha512":"30a114b39365d58324bb4bd77937b8ae13ae40b136f60441f4197ec6882c28882c647fe094cbd1ecf187a5b7f670c0ea9de3e9c307c02f3deaa22a2dd815bfc4","ssdeep":"1536:quz9qkZO8REowJ1eAlkGDW36yG5frIeR0iTOujvWvBug5EBl3ZugJDGK:skZzRpwJ1eAlkGDW36yG5frIeR0iTlgU","tlshash":"46638cae5991228991638e66c3dc5e68473dc67314721cde33422c4b8f8bfde63da607","first_seen":"2023-04-07T11:48:57Z","last_seen":"2026-08-04T21:29:35.224082Z","times_seen":3221,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.1.6.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=6.1.6.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 02 Jun 2022 03:06:04 GMT\r\netag: \"a54-5e06e49477f00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 708\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYgfyuW1Y1OLTyLZ%2Fp3zuZ9F9ZkCt0PbdoL3fCx4OGrg5d2D69N2rl%2BXx1rNIiJjJbso1XeNtUoQG%2FJWzfE%2BDAj7O%2BUQSR39AlOE0sg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6da0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2644), with no line terminators","md5":"0341c2916b69a7637a2d339c115dd966","sha1":"86df1c999b8f138985cdf4cb2b57b10eee11f8da","sha256":"59d5960aa84694f985df4cd73d34ff0ccabd3a45b3fbe9ced06e03a71f5c2a4e","sha512":"6eef1582e47e377ed3f87f00c893da750af13ea22bb51a77420c25d89bb52f955a21a40eb28aab03e7d9eabb856ef65227b98d150020cdc5d9c4d8286971f897","ssdeep":"","tlshash":"0c5104756c530894b3feef052d84b9c82a29f753c02e0dede162922cb2df54298e6346","first_seen":"2023-05-11T23:23:21Z","last_seen":"2026-08-02T09:59:15.204461Z","times_seen":54,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"2549-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3491\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eWtRK3CVM11ZcuoiBUPzX1AVlodEDXKhr9Z1HIEwlStLpptdLVQbAuF5l12APj0DAYqpxIwLG%2BdhewWPdU%2BdHEyCq0GODrejjzz3qo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c8dbc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9151)","md5":"2e96f622673104a3fb67ab56f849c073","sha1":"f4c17ae4709cad9bc997357581f4e30fc4bbee2c","sha256":"b49498d1142de7f2e16afc2cd4250d2ba30c5df4de5d291f51d7cf69727efdbe","sha512":"ea3ab01ae8918a226bb998625c58efbee1a6ed2e8d36dbd69f0f91b9d0c373925d240d7f0388a9dca0d4bbc275984636957d553dcc0e1c88923915d8c168688a","ssdeep":"192:x9RHfGTArT7TMcPvR52AA1uKigDDptgM3sP9+HxlP722DDNrDc:x9RGTArf4cPr2AYhR9th3sPcRF72YpA","tlshash":"a212c86831f3605790b3b1506cf7d78e73b6257d548399c0d0ace46929aceba1226f19","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-04T22:00:06.11937Z","times_seen":2799,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"1bdac-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 26440\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5gZSF9D8oU638mjd287ItjotS5W5ih5MzIFzmIhpPf7wn11NMrFHSBCh2TJOVXubaf7kJz6dEjTFvpSYKBFmtQo06vDixf5B%2BSfpng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004cddca783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114092,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00bed9d64e33600c69049fa1583eea35","sha1":"b4a23f94af8e91e5fa00a5b29cec047f0b37179b","sha256":"f3e69321ade5c9b660383f5e257d9ab712064e931f4644935abadef2356ed046","sha512":"148a0a7b3be82079a1049c0f15db57a4eb0838ccb1c512c387dda329c7a63c1cd40ced7b565ff78ba3cd864e3a95ed4e2b2b81e8edbe5a6b0af92a2086207681","ssdeep":"1536:R2UIi1VzrNBzmv8tvMjVcQL+HJre7IY75+kVmuBRjI3kmkakbm5r0vTKf/j/yDUu:RDtXlMj+t+Rh","tlshash":"cab37216f114343546db90aa621b850de3ba215cf405c16ebcecece95df6d4d223abf8","first_seen":"2023-03-08T15:15:31Z","last_seen":"2026-03-21T15:58:54.268753Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1387,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.6 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"5443-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5777\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5QtiaKyKp8acRu2mjjP0hZdPzetTgD0jmwLD9KVn47SZR2SX3WkoWOuxbdUm%2B%2ByUKGJsPn6dtU50UYnjoslctuwlslyV3PG6i%2F4lAPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e26783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21571,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (21571), with no line terminators","md5":"df014e8aea0c4f0977ca529123322095","sha1":"ba558b1415825a597ce46352f3c9a1eac8487cc8","sha256":"fa672ad28fb96bb2f8a5a3e0078564b3950b221c3def0f5fc88cc6cc2871b719","sha512":"4a8e342af60d3ffadc81189c2a0d6c2f44e9ac86406fd0142ecdf2e394a71881959c8cf493e521f0b9f4a617650f0928ba8b8137e4bb312bd4dea15df8e44870","ssdeep":"384:FubzguBg2FJ5ejrjjrwjip5fQL0db88MY942htveQRD2pE0adnOTekzcbdSnBl:QguBfFJ5ejrjjrwjip5YAht24frdOCMd","tlshash":"5ca2d628682064df82d3a365e8476b1d61338e57fe42da744278ac7525fcec65832fcd","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-08-02T14:25:23.914804Z","times_seen":236,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"85b-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 794\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbvuXjixU2yKCbeY%2BaY7eQIpFxhqEx1UVHyzz7bdYKFC1KxwOi2AysvKtDRTGK3qYa81zebsc7YKvuvyPVQ%2B8DdMpltT1r34PE0ajMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e30783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2139), with no line terminators","md5":"b72c1cbb1530a011a27bd9800f26765a","sha1":"27b825c5d8255f33b8427a059d4545ebd65e1746","sha256":"a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8","sha512":"63febb24bdb65c39acc8d355dc5b20d3a1ad94afc347ab2936c543d8b7a911c2f6d2c1c0146707cdb29bea85a8f34e7fb6e76aaee4bc0bea212ea58835a58025","ssdeep":"","tlshash":"8941ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-04T22:00:06.084486Z","times_seen":51469,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 28 Apr 2025 06:12:27 GMT\r\netag: \"49d9-633d09179b1f0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7317\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbEWI0BKQ1Cb2And40yALChZ7ob9pH6YN7BHV6YdxYULP6Y40XRJ%2FsKQl444ojCDmK4CuATwutLm28SxmKxI9m89o8YYuK9upHJ6cMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e35783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-08-05T00:44:48.956842Z","times_seen":117939,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/css/bootstrap.min.css?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/css/bootstrap.min.css?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:25 GMT\r\netag: \"71c3-5a745ae746940-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3310\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PzAonVNmrvGWMH9l8ufhveMYQodyk7z6w9hDUdFk57YiBhRDZVZb0CZMs2domZuBXbdXzoIl%2BCEHL6XpQyDOToM9pEtsaru7hEhyjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7daf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29123), with no line terminators","md5":"acda8773e11a64648748e589882e967a","sha1":"d111b1141d32b57ab9e935e2d4ecdd351c8adeb6","sha256":"84be2b5bc6d7901f4489f152003b8af060dfd7718212681c3a1786c8f5b74ac4","sha512":"139db5fd266b081322d167ac4f1c002fc4b9794091ab24cc62c0cd08a7ff68344668403f4493349e3281c615fddd34e3c51c8b23b19617307780b62878818814","ssdeep":"192:69qPtQcB9u2GBvtYaQRqZhDSmIACpL6L5:4q+PNbGIX","tlshash":"2ed29ba3f4b11a9d4152c40c14d17bfd44bfd489ebb29ef9a8632770178a1e74ee248e","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-07-31T18:58:54.253381Z","times_seen":266,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/style.min.css?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/style.min.css?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"ddf61-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZoQFA2QjqrIifWhQ9rT0U9l7zRrs71Nn6YjJFXCJ%2BpSreWpKRv5OiPYC%2BT0buYD23xj6faJukk3BVn1x1gcvsYG2fv1ZUzHRCvFPrc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa6004c7db0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":909153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d610396539efd52d03879fab5c7f5805","sha1":"42558263e17871ce060aafd71e732e5aafce0e60","sha256":"d49bfb170508c0d4c9eb745d7f91c58b0736d77f2bf50d0660c0bd476b4f4ad8","sha512":"1c22074217149c82b5246eb159d61b08915e6b6130c472de497dbbd2bbdd7ebd9b33804ffcbd1416e23fad75f5dc1d1cd94ceff62176ecfa437e10a0edb91464","ssdeep":"6144:jhyTEaj+YoLp+gwEPxouB5bgVS4h3NuvhWvCvP8epqlgG:jh39xeSHD8ec","tlshash":"5615f962f520192c6917ce2952c0f6d53634d332d6b616fbf933ba29c78668a233371d","first_seen":"2023-05-04T16:02:15Z","last_seen":"2026-06-14T08:16:30.617061Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1156,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\netag: \"15601-603fed35e19c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 30368\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pt3UYdb5ZY95aq9OagwAuSlUzpjXVZOacSPbHJcbUMeWtxy%2BLAOaOp%2Bbf466ot6cC9bW9r2Sre7YobfXGi04e6t6cK2qRXJJFhBTmgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-05T01:00:31.849703Z","times_seen":1004797,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"4f8-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 615\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRodydPyiiY5sFbHoOHqwoQvB4YdpDUgt4Mo75if3Zg3UqHCSxmq9xCoay9Avpc3aTgrGg0Mx%2BRfTgs%2FSRqTxxM0LLg1WpZ26B5VJz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004cddcc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1272), with no line terminators","md5":"45fdefb040065cd33462f64aa2beb4eb","sha1":"93972bd08645b876a058e97ddd70efa20d3d09ca","sha256":"b65f1c922082e444c839c066f1f9aba1e0bbdc477c4bf028601c7263fabd8efb","sha512":"d982d1f1a35803f7d290f203e93610f0e62cde9cf0f7ec9a4d4868d93435ab40362b10b20f150813ec8f7d04b22b703fea599b5a2fe87b2bd37086980cac3b33","ssdeep":"","tlshash":"6221fd98bf5478b203e5e27931bfa705a77921b8f0c44490344cd9ed4cb0d821623faa","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-08-02T19:22:02.992428Z","times_seen":83,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro-ajax.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/js/seed-confirm-pro-ajax.js?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"d31-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 994\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X75gC%2FYB3t0RFW9yc6PaBWKVwuQ%2BlcaBkkWQTO456hpJXkdphRm0vHfz9WafQ6M3jmrK4t12HGVQYvvk%2FAMTfhu65NuIpRgKG%2FyRTQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e2e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3377,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"aadce03181c310e1d3266cc18ce0cb1a","sha1":"2238472d960683a7fccee9f7787a3d534210079b","sha256":"42dbbabc282f12f76fca32ffc0f7c1bdcde2184ffe3c7afdd72ce7feb59b53ad","sha512":"ca905ca6d3d5d277c97e493a329491b3842bebe4ea7c478964aec822d607a949f0a1bba2f31a3df681bc8e426da1c5db1abb11d8472b7e17573acf9616a4d33b","ssdeep":"","tlshash":"df618b06b4fa1ea7193b7cff0abb1848272710576446da24bd4e2b884f15d94f89364e","first_seen":"2023-05-25T09:44:24Z","last_seen":"2026-07-14T03:54:43.894164Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/flexible-shipping/vendor_prefixed/wpdesk/wp-wpdesk-fs-table-rate/assets/js/notices.js?ver=4.8.4.267","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/flexible-shipping/vendor_prefixed/wpdesk/wp-wpdesk-fs-table-rate/assets/js/notices.js?ver=4.8.4.267 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:55:24 GMT\r\netag: \"59b-5ce0a05b07b00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 358\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fc2OQiCped8jw%2BtHDQRTOOULME%2FBg%2FyPiG0F7UjcFf16XL29rZyvsZsAWOZ2jZ82rQrn9elmMbUTe3gwUf%2Flk7Q%2F%2BYJ5yO8Soa%2Fj9sg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e33783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9df528c61024f6673bcc59adff12450f","sha1":"804984923d588e9055377084ded1b1f6eebfdfe8","sha256":"3facde26fdca38bf10fc3d2102db90b9ac33899e1d9bf84c43c82ceba903e345","sha512":"88e7ad6d564863aa7d7346ff12a55f469ef66c8f26922312499b466b4d3e95812ea9b8882d4c79f7f2ae426e7b5117b5c88761cb9de1a89f37b0a31483cd7286","ssdeep":"","tlshash":"2321433870aa50f4947f7a2efb3fea54386b18937406e655381e2db01f2201946f1ab2","first_seen":"2023-03-07T12:10:16Z","last_seen":"2026-07-26T15:54:43.263632Z","times_seen":98,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.magnific-popup.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/jquery.magnific-popup.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"51d4-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7560\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSnK6LQQ4O3dWMNASSUPqEBqP74rbebLy2GZUBfxe8bluZN8ZDmEw4LZaZqGc%2BojhNbLu%2FPkUzkrT2lAggMrA%2BfaeLsho3evFh9qyOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e3e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20948), with no line terminators","md5":"2b677df6de6084cf0e4234b631294271","sha1":"156e57657e9c9990494abd162bb6892dc90de5af","sha256":"9936720a77866034451995484e2900ccb899f4e58f7fba49ead5d1fab6b569de","sha512":"ce6ba44a2aa8ca836f4d7796ac7ade80a1fb68a1c8271f52cdf411521d46f024840f7e73bdb2d03ad86081fbb6098d5cae818c9df71b67fccf4e88c94de8d220","ssdeep":"384:iPhVSXQ2G2XAQYqVxRQnsgiHCLEtA5Tn5h5/w6l8aZwH8tTfHXasdS:iPcsssQEn5h5o1qkyfqsdS","tlshash":"ae920864f2b2b26393a335b8646f700935729953ed0ac855b55a88d86efcdc89027f3c","first_seen":"2023-03-07T12:02:23Z","last_seen":"2026-08-01T00:58:03.688101Z","times_seen":419,"resource_available":true,"data":null}},"time_used":1518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKZ-Go6G5tXcraBGwCYdA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKZ-Go6G5tXcraBGwCYdA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 19:29:40 GMT\r\nexpires: Sat, 05 Dec 2026 19:29:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168272\r\nlast-modified: Wed, 10 Sep 2025 16:43:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13452, version 1.0","md5":"eea71e5e0b5d69128a9f853948c231bb","sha1":"65b29226bbc6b260794e44b393b4e09678d750c9","sha256":"943218ba72a5e68e3fc58fb6dd43493edeb0c4a05167748b4ee503748a8d8e12","sha512":"4377a6076cf5d90f38d5c82f04529ec938c514f211e6696bd2c232be7ff4fc3e5ab4313ff50284236be2715b33eff09f2d57b8ea5b1ad7d4f7b807faf804d6f6","ssdeep":"192:xKUZohSiRfWWDyrZuLZhkVgXFqPVVoVbT4KKVLVmmDcZJ0C9+RFW2+pEBGv5k:JZGlMINwgXU2EVmmYYC9iFW3EBGRk","tlshash":"9052c0f53623e12d0a0721f5860ae0ffd951b4091ad9bd7d063b54c37beca938160917","first_seen":"2025-04-26T12:39:08.723482Z","last_seen":"2026-08-04T04:54:39.718635Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":81,"dns":1,"connect":14,"send":0,"wait":18,"receive":3,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.10","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.10 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:08 GMT\r\netag: \"ea2a-5a745b1048a00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 12614\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E91QNUUVJpzJ8v0wbyDllmfozWixD6h7QMdK75AcET7H%2B4R%2Fw9ykED8jFCIgyIrfLaClxGNVsjQK3pQLR8qg2ZnV2gpqMsbKKDEqnos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6d9b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59946,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"7f1d3cdee6e67c584ec3df2772391f2b","sha1":"a5a8f3a0942914d0db18e574742f5b5ad85bd77d","sha256":"8215fb8f99029767d8081516dd5c245f65f3a5c3bd78fdec0d9889b0f549703f","sha512":"28219f0d6f2e21a9109954c656c4d7ac9aeb4e083c655fa25c01ca12afa76b9a0b8d162f1a35c5ba48f860939cd8ef1e4b36b894955277bacd9caa6efc6d2d1b","ssdeep":"1536:2MhMbEX0TzVQdHkub8uIhqQRHmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:smHkubys","tlshash":"b243c67198921da82327ca81e7ec0bd49e25cd32ae030cadf597321dc39e599467d7ce","first_seen":"2023-04-05T07:58:19Z","last_seen":"2026-08-05T00:28:34.672678Z","times_seen":1324,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:55:10 GMT\r\netag: \"32bb-5ce0a04dadb80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4071\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmWpxrNPBf03BbdvrmJWQpiRBIlgWJqrXScZ0i7PuZvoomiKMsZq0VMpdLkX2DFQ1fTqHAYM%2Bk%2FzTjx8w3cmoCgxhrJhbb%2FUUJnyGpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e29783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12987), with no line terminators","md5":"6ad9165b167d54947b37f4b9de75ab39","sha1":"4c02f66fd8c26141450e310d6786f50f99913dd4","sha256":"eea0b9621509f98be77c5af1e9b5c952a675bda2b27c419876364017069e0c19","sha512":"dae93e3fe93a1e04d65bf1a64dbe7ab4f58938363c9b0d519ddcaa4608c0beb4dab995db8b115e174d8f2b2a539f5dadb0b60d79d96110477cbef6b172c1af9c","ssdeep":"384:4v6d5sHteQkJmVUrITdnMrQk2Y18e2pZN5+:6Es8QkJmmrq79YCe2pZN5+","tlshash":"5f42e9943a6579b307b362f280ef2342b2b6385ee44bc6519650cde45c78ccb61a2f27","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-08-04T21:03:07.91822Z","times_seen":2904,"resource_available":true,"data":null}},"time_used":1787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/img/theme_1/close.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:14.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/popup-builder/public/img/theme_1/close.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 09 Sep 2025 05:29:29 GMT\r\netag: \"355-63e5796986432\"\r\naccept-ranges: bytes\r\ncontent-length: 853\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F35IFYpqGWGiF3ObbJ2EBqmOJWyAdpBA6cPvyDWM2U8r7l%2BwBmU3Wf97WJW2Z40dljbgBIdeSsZ04c7WJARSc6GVhH0cxvhYVD4YGJI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa600660abc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 21, 8-bit/color RGBA, non-interlaced","md5":"6b52a2ee85e3c1d3757f01cb113452c3","sha1":"6c3c4b8f236a11bdff8fe0179682c40071e7e868","sha256":"5fa0adc766a6fc3c3fe1a0f4399edc28519f13ca502624cd1c1304bd0a17d3a0","sha512":"09dfcd63c4ac0e7a61e390289e321e8f08f44ac5c0ff869ccd3b782a3f1c00deddb92bdb7d1bbc509436842eb1139e5600d2c3e9903b985f89c8ec7f79e0c6d9","ssdeep":"","tlshash":"0101d693b9ed7c74ce4121324f2307f49b4113b90591a37186b7d06c40cebde95d1149","first_seen":"2023-05-04T17:54:13Z","last_seen":"2026-08-04T21:29:35.220526Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/9f3360630b8d81f2b4eac8914abf37e3/thaicigar_page125.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/9f3360630b8d81f2b4eac8914abf37e3/thaicigar_page125.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:34 GMT\r\netag: \"86fa-633e3e7817292\"\r\naccept-ranges: bytes\r\ncontent-length: 34554\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjnzAPfFhHROTYzu0uU%2FD%2FtmyekVXg7hXf9RvlaV3iyIMhxcPaLPagiMrS71jfjOj2IliqB1nZ4ywtjLxcKZcntMxhqkfP02M3%2BKbxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067eb10783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"fa94bfe0abbcbf8c27229205149dfb0f","sha1":"d28d934d7e7eb7ab0703a23db67f8eaeb25470ae","sha256":"31ebd1089f41f210727316cc15331414cf4bcd6c0f183d045d17f363d09d860e","sha512":"a60e32bb9fa25b7fa0faf752cb9acbd50abea0967a9d670694ac701b49fca2d783308da703f352159935bdf9c36c03844193bc11ccc9810c7adcc46e3a85e606","ssdeep":"768:JmO6F6zxkszp+kC9pYD2tbjVovcrtz0LJxGs2:Jm/6NkiYjpd1YGs2","tlshash":"7cf269038c64db576422c7f9bf075e298f1b670da09233ee25335daf2e256352d8a12d","first_seen":"2025-12-07T18:14:45.544091Z","last_seen":"2025-12-07T18:14:45.544091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/cd1c0ccb1528aeb6ee767b0abe0a6c90/thaicigar_page122.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/cd1c0ccb1528aeb6ee767b0abe0a6c90/thaicigar_page122.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:35 GMT\r\netag: \"98a3-633e3e78648d5\"\r\naccept-ranges: bytes\r\ncontent-length: 39075\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7%2BDAvNaA0RoF%2BgZTTo9vYg75zxliHuPdmA9aIJf%2BPj1U27xiGLVMvqM8ntKb0B8DRfpAzmLNUwVlvH72UwJyy6IT419yl%2FjPraDGKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067eb12783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"d262a098106695783337562f5a3a63e7","sha1":"5ce1ccf130b82d5631d8fb1271e0834fdf32fef6","sha256":"edd6f7723e04d6afdceca1f17904c797c45d4d020b33cd6f1200f9dd3af5c913","sha512":"d18e3c0639f4a4a01ddee63442ec66c66eb9df2f92c5532e8e4e39e09119b749c2d6384b0813d9548aee7dc7305ca3ac357a586d93fe748e7cba9773ac6055bf","ssdeep":"768:JuuB1snUO7Q6iUUNonBMBMrbgVLNU2sM82AgnbR3B6rX4H1itTpJVKl/z0:JuuB1W7MmBMBASzsM/HB6rLTGI","tlshash":"6103f12ba2535152c02ffcfc23e51711e6149a8ab6c8bc4ece238977b0457954fdcba9","first_seen":"2025-12-07T18:14:45.544979Z","last_seen":"2025-12-07T18:14:45.544979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\netag: \"3509-5fdabee5f2100-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4872\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7iica4jpY4%2FGNEfz7IvXNjdBw4jasFhnMvaYXzfEHwg7JNeuhzA%2BhDxGP05%2B5W5X5HsBPh5iyRnW7aRE9tSktDoRoKSwBNcbyYCikA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-05T01:00:31.869861Z","times_seen":920886,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/seed-confirm-pro/plugins/jquery.form-validator.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/seed-confirm-pro/plugins/jquery.form-validator.min.js?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Jun 2020 17:53:07 GMT\r\netag: \"95f6-5a8afea49c6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 11901\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epgJvTaZWVMGTKQmH90S1mwjj5Vq%2B%2B32aMybnaKfPqzB%2BXU51jEIgX7EwgHDXvkAfvroTORQchUAWgqEYQO3nCVQocwImGubh5Ye5w8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e2d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32073)","md5":"5fefc39ddb4e99c2622b0a7e6f35cdfd","sha1":"011c2b3bc4be53c470b67eb623042623b76925dd","sha256":"ecc9511f3ee3ae647019b84d09de698dbc0ec5f7fc59668f877ba62a18ac1a74","sha512":"4662291f086038acf1ac1633460c5a3db55912df1b665ea3e39559c8f2a74378db87776ad760a80266a6ee682a145f9086cfa06f0b631214b573c75d05e1f0ae","ssdeep":"768:oh78/mIrHOprt3p+R4i6aM/x11g6K6DOMIKl2O4EORXGashy:ojIr6rxzaW11pK6qMH4EmXpR","tlshash":"5803e888b661292b6e6732fb24cf900b91f50c64b5453870e689e0e51ef8fc416b7f1d","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T14:04:39.380442Z","times_seen":55,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/waypoints.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/waypoints.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"1d57-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2416\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xi1m11zsuYHXy1pTwxwHmDVGSwiMOC67V0EMdO6aa%2B9p4Ud15u1fZCiSUMFrrZjiTANw9xOcizLBiZlCYoLORFBs%2FsG8dUJYJALCwpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7511,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7511), with no line terminators","md5":"cef05fde1a566e0d27b7a1a01299220e","sha1":"a4e0c3e1ac4a320cf0ca5b0267fd897640dae954","sha256":"173a42f3468eebc25191bc4aaa1e86fb422b56337682ce4b38bd2ca4229b8543","sha512":"e6a68e0d32c9f818bb079bdfca0075547aa2c7e45ba57ff4034ba60800864fb9bee825d173a959517b1de1106e4213e31d8d7c3faec6ec31c13dec3aa908cf01","ssdeep":"96:T1leyZ6dnD0GTfXPv/P/4HtxEDvtGCFj2HF5bsshaTa/dOEVXdODJdldURJq4Z:TeD0ufv/oHtCV952H3Nha2IESDoRg4Z","tlshash":"93f111c97893b4226bafa174d53f420ba23b5d9a75088834b0d494d43db4a3db677f28","first_seen":"2023-03-07T01:32:50Z","last_seen":"2026-08-04T05:24:30.962319Z","times_seen":1262,"resource_available":true,"data":null}},"time_used":1674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1673,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.nanoscroller.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/jquery.nanoscroller.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"2837-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3320\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIjrGkJMOBDeBweo49AwmFIQxHVQLJP6iLdwWEiK8bnzmMBnECIH15idQSGSSzB9BCTYMDEHCYjqVWbLuJFJC2MLzX%2Fvml1Tx2n5mtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e43783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10295), with no line terminators","md5":"7c35d62f5f8e9a6e12ca2eae209205f7","sha1":"ae7cc8effa2cd039275a9ba3f195d08aaec0bc67","sha256":"2ed15453fa6f5887d785a7e67d8a9414258add477682358cfa158063e18d57b5","sha512":"0f6c109d1975d85b34be55bbe3ebde173e47f6d5753f00e5a9410a124690093df77efae3af6754e99da86b2cbfc1fcdb129c7d188cd7ff21507e1cd97609b07a","ssdeep":"192:X2tJ7sWP2UHeF5S2/4x/ebFfxqfmmY5Tmpt:Xm+uf2bFNBm7","tlshash":"902273597314211142cee191d16f4e85e379a0a6f24b84adf8bdadfc7da0b2831b2778","first_seen":"2023-03-07T12:02:23Z","last_seen":"2026-08-01T22:37:27.875169Z","times_seen":588,"resource_available":true,"data":null}},"time_used":1017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/wp-content/themes/woodmart/css/font-awesome.min.css?ver=3.8.2\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scyO8WdGm%2FSMh7CoYp9FVL3v%2BYMqWcwKBRMuAMMG0rei%2BaoKx6Aisoa5vsZeKlJVTfU%2BMoJ48CoIRaJ6TDM1K95ACOwkZOjJOOU9qU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\npriority: u=4,i=?0\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\netag: W/\"12d68-5a745ae83ab80-gzip\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9aa600588886783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-05T00:55:08.689094Z","times_seen":527198,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":385,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/?wc-ajax=get_refreshed_fragments","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1765131253446"}},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\naccess-control-allow-origin: https://thaicigar.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 437\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Sun, 07 Dec 2025 18:14:14 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1cgji%2BeCyQEkQH3qy1yb1UlKCnXXUvr3fwkuwZnI8g%2BkEzS6BA%2BzdK%2FbQgazLzmh7CU9lyjj%2FsJv2i5fxFyLKdKMH99mnnkeJQEYZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6005e1990783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cabfab19ddc3de8bfe4a51255091e03e","sha1":"1f17b3cfd8fd0714daf0915e6c257f949047857b","sha256":"3a80f06b7b342bc3ad3c0b4c8fb41aa6d4deb39753236a41877883d2025ace93","sha512":"f90a39609210e41642650086d7cc9e58358a2cb210471926719b1c579a9d9f9cb4346d6568d633eef36051549f608a391f12f8412f41fc2bbc6dfa28decb6f27","ssdeep":"","tlshash":"32117b62b07e41328b6b4fc465c9b39abeab490cfd7a044641ea3324038ce50b534e36","first_seen":"2025-11-01T01:33:40.451534Z","last_seen":"2025-12-07T18:14:45.549104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2020/08/Logo_Thaicigar-copy.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/Logo_Thaicigar-copy.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 25 Aug 2020 03:32:26 GMT\r\netag: \"1dfa8-5adab5a16a680\"\r\naccept-ranges: bytes\r\ncontent-length: 122792\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:13 GMT\r\nserver: cloudflare\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pp%2F%2BbXR%2F7YKrczBRc9dx3qM0AphuCiGpVuj5lVEp5ZEsjMr%2FPYulFF%2FN2keXwsjv72HQlRYdw0QfO6AfPmD97SujcgadWYEAagzf6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6006009d6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 478 x 406, 8-bit/color RGBA, non-interlaced","md5":"2d363dc08fbf099576e1223a8ff671bd","sha1":"c18e054c46bc27873e9aa9e9a03100e5ccea5cb9","sha256":"bb86a0f5e3917c6673d025213dbf702291d7b2b034ee8c65340b8c77144afac4","sha512":"04b7c53de903baeed0f19b4597bb8fec8bc3fab252023e57d405854937141e4eeb4272309488db601adf8ab4f0628568c1f215c6e28a0a382411539b97b170a0","ssdeep":"3072:c24UuQJRH7wQPpNbLpHPMPuDXWp8wy5oJkm4o5Gf:wUxHjflPGuDX/5CGf","tlshash":"20c312daf915042ade9c301b9d99fdacfaea09c1e0242ff119c756458997b0049e0fdf","first_seen":"2025-11-01T01:33:40.462134Z","last_seen":"2026-07-13T03:54:27.350951Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2022/08/Line125.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/Line125.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 05 Aug 2022 07:41:18 GMT\r\netag: \"1dcf-5e579976f2380\"\r\naccept-ranges: bytes\r\ncontent-length: 7631\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:14 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pl%2F1c74XH0vWAbSMmfGwFWBBLikaXAFmXVZjV0ajN97s7nyJ9dB8uVJEdKtOhlLRXCEmf3isQi7lai2qRBtwY%2Bf756pTxuEUe0uPKDY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa600616a12783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 57, 8-bit/color RGBA, non-interlaced","md5":"3d6355ae27ea9a2c7e8f0bda96791cd9","sha1":"620814e1281bd6ab7bbe375084be9b5f7be338bc","sha256":"8c484e3f660830ae70f1c5db0f7f201548b7cf7d7b71279a403eafb2da008686","sha512":"0015bd120fe74030974ab8dbeb380f02fd3ad639e51e26c86816a5cd66f44539489880f84d7c1a7f5aad79513fd533cf7859773e736869e8f3daa848e64e1893","ssdeep":"192:VSDS0tKg9E05Twstyyvdb+Co7eYxrda3j7ZisQoZJyzvia:0JXE05zyc27eSrdaT7FoKa","tlshash":"edf1ae56c520e41ca34c7e8014cc47c2dea12a2dee567a7c6ad928dfa1b8e770f65c64","first_seen":"2025-12-07T18:14:45.550803Z","last_seen":"2025-12-07T18:14:45.550803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"3683-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3151\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ScAaD0yePPf2bWxDht16RG%2BpvxmpxUMBAb9m1Srr1diYBApOqEtRcS6H%2BZ%2FobQfl1G9OVs0ANWavlxNycFPR6zwurE6HyI4zJB18s5c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004cddcb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13955,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13955), with no line terminators","md5":"9402cf5ee94544d01f5b9399275eec96","sha1":"ad3dba8aae72f2e602e3af75058b355adf854f66","sha256":"2e0bf876c7c9808336e3bb2823e62fe417b63133bae86bbc0aca41293f16107e","sha512":"46f6b8e158e36c9ec8e1e99890ba08068668e0e137c6125ccde8daf8ce3a5d17ed59130010c4094cf6c9db6ef4b0908f9fe51e3937bb9456aaa93cf1fb514145","ssdeep":"192:0UtMAzzrjW2qgHytcVkMeIL3enEXPEQXcjPEQ5Gypk8+kQwuh7up7xb0oZr4luMC:0XAzL/TFGnE6LklklbVr4luZ","tlshash":"6c522288e6915d6663cf46b7562f880987ba025cf019c13ef5fce9e988e6d0523273f4","first_seen":"2023-03-07T22:31:44Z","last_seen":"2026-07-19T14:48:24.832281Z","times_seen":46,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.1.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.yith-wcwl.min.js?ver=3.1.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:57:01 GMT\r\netag: \"609b-5ce0a0b789540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 6557\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FFOnAsGeXgtn0jF3dpnjfVkoJQAkCQnHcGnL0VeRSwk52DXbuY3O7O6rgu2ABdHrMxv50Y2HGt%2F8IQ%2FFVvWr6smhD7Rm%2FW%2FSYAAWxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e27783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24731,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24731), with no line terminators","md5":"502ca2250b797193ecc051d0c323cbdd","sha1":"3ba0ac15dad090633ddd4ac81472360692ad8bee","sha256":"93a3315f4ee582595965f888b1381ac13f8fecb6b53df998495fbb4e759a5b1e","sha512":"9f4ff790e8d0ba3ca47a08c24f191c6cd83b33093e1aba670c24c13c1ead6724cd9a6c95c5b20a09bf0198e17a4b35485960f8d0185db315258c6948ce3a0877","ssdeep":"768:MmCbv6/wXnKcgL/Fcz1RkWsNeSNi+0yL2R5XG76:MLv6oXuLNq12teSQ5G76","tlshash":"38b2a76dba2d60561af3227390a75a0671325df9e24f5820903ad4fc3fb4ec54137faa","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-02T20:41:58.516695Z","times_seen":422,"resource_available":true,"data":null}},"time_used":1205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5mOBWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5mOBWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 20:03:07 GMT\r\nexpires: Sat, 05 Dec 2026 20:03:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166265\r\nlast-modified: Wed, 10 Sep 2025 16:39:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13288, version 1.0","md5":"732b9a7629303748a3254623ddc19fa7","sha1":"417947525f553bfd3b352ede4217e6a67a8fc03d","sha256":"cce9152dbafcad068207294cbfcc74140e1b18c6c90d30af4a41630d5e73d191","sha512":"06ddb08b4615581119cd1418eb62cb22685215a3db4af8567d9e1f92d7516ebb9a93861ce7f69154cefe037853495c38c527459fb2e48aca3f1e82e468f52c26","ssdeep":"384:KZsQpKR9Pm5/K0+Evc8bQb+fSzEF+pHh4Ewmlyd+/w:K3o0+Evcrb+aQF+1rlSh","tlshash":"3952bf0987b83251cf47c63e683f3a826c563a6364b6352896dcbcfb83f0481165b4a1","first_seen":"2025-05-10T17:16:09.248418Z","last_seen":"2026-08-01T21:15:46.592228Z","times_seen":829,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/8e9c54e950ebec5e2683a2bffbe04ae2/thaicigar_page124.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/8e9c54e950ebec5e2683a2bffbe04ae2/thaicigar_page124.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:35 GMT\r\netag: \"8091-633e3e789793a\"\r\naccept-ranges: bytes\r\ncontent-length: 32913\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVua56%2B6nV7bJrc1zhm6ngtEGq4emwPt9eMSGEMEvoj7CBvRT1Iyc8%2B9KkaenC477XMH273P%2BVdXNplWFZ63H16vgS4z2xdr1bLP2k8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067eb13783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"649122f1b28b5268cc619cc7fd37cc67","sha1":"8b10d1286fd2c5e13c0633c16abaa8aff76c96b6","sha256":"4574c7db4ed6eeef66de0e089b22783194a8f6572b7bc66917de4638d4eb4f7a","sha512":"f2e18dec85310f30460e471dc521bade709407429470027321ef6270b6fbdeabf3121596d52719db71575e17b17d73d8a8a422a4748923bfe987b1b116b80efa","ssdeep":"768:JQQ+7Cb22dpe1///26XJ8yfu5DA5+KM+dnFXXduR1+1EWLiYu7FR:JA+a//XX58nZA5rd9IYduZR","tlshash":"d5e2f17d9ea742f4746ea739d63e0334f2576b2c01846c38ec299d788cf06945e54c6c","first_seen":"2025-12-07T18:14:45.553862Z","last_seen":"2025-12-07T18:14:45.553862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 28 Apr 2025 06:12:27 GMT\r\netag: \"a11f-633d0917bf40e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 14471\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Amh%2B6Zt3%2B4WJo9F9%2Fvud8EaiLx0TovSOhLrmPKbmEt9ZY4sbPDc8Knh9RhHiF2pDsuxxhcJ8esuPnDtPLdAQjMG8KDcJrTrsZS6N6mc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e28783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41239), with no line terminators","md5":"fe733b72675d4683549f10df06f8072d","sha1":"c533e1b43bc3f63f10df0428cb81bc87eb69a53c","sha256":"290b9b630f7dc870dfc3c139ea090b68105f971d870a4774a1eeab5cfe31b7a7","sha512":"a0844b18ed80a58d67cd9eaeed3dc58f5df936f01c72c48d056d2976afc42b6d918f30a8e0baf284f2f04532fa34145acf05c6397c3edc4d55e93dc246e627b4","ssdeep":"384:JW/4y+6GC4BfP1ENJ/ah4AiMEkhrcSyhoOn/xqRlwch6In/vkEy1jAuAZcwlImlJ:wX+1tHzJEJ/cfbn3luKcwsIyHgvNB","tlshash":"85039549b691b0e302e3a4f4009f444bb1b75b5ab81acad0f315f6d06c7d84ea1a7f9d","first_seen":"2025-04-15T18:59:45.846942Z","last_seen":"2026-08-04T23:29:49.658836Z","times_seen":85914,"resource_available":true,"data":null}},"time_used":2005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2004,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2022/08/Line225.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/Line225.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 05 Aug 2022 07:43:38 GMT\r\netag: \"1e1c-5e5799fc75e80\"\r\naccept-ranges: bytes\r\ncontent-length: 7708\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:14 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMLTpgUHiyvvpRxZJFdLYUc7DDAlk%2F3OulUmA7X11CKt71lEJEz7zJHI0PGW7EmJ%2Bp4l8zrLBYkNsYpjBYvWOS6FpTBvRqADEmppY%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa600616a14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 57, 8-bit/color RGBA, non-interlaced","md5":"c364d7a8c4d8624f00a28d1ec9663094","sha1":"9a290f30c9f29c78bc706453d6e66b6648a2c807","sha256":"3dc7c8073fcd9f277ead9f83c56d2e431181e4f3c6ee8ff2d7580be6260673b5","sha512":"1de6631661f6238cab8192dc7e2c1d6f4b399600cfe56fc52b1a8cebfa8ed3827defd68f36fe1c4961eea2e966512ea5e7cd89ede718248a903bee1759f5f5a4","ssdeep":"192:VSDS0tKg9E05T+Ti2tJ0mFjOUD9sR7e8D/iWVp:0JXE05yTFtKcx9sBD5Vp","tlshash":"bbf1b0dd4a60601fee9e75720c8baf63f79e106c40b7691c5cd4c4e23492f05ba6b470","first_seen":"2025-12-07T18:14:45.555092Z","last_seen":"2025-12-07T18:14:45.555092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.1.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.1.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:57:01 GMT\r\netag: \"7245-5ce0a0b789540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4839\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVRdSuZKQpADVw66eFqpndmARRnk%2Fwm1ina%2FYtdXUzQpnJ4ZSjN1GiXIl%2BqZ%2BPEX5CrpDZvWQUviOeaDJUCqQWWM9vwGmQpKjpkcSP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d63783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29253,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29253), with no line terminators","md5":"0826f9aa4b7e761ea6044f29ba8e432a","sha1":"7d3bec8f54ca99e00442ca3ae0026153376f80be","sha256":"1cc1d2811dc382e9ea8c475cd9ad79b20227fb8a33e6b5225587f58134d99b77","sha512":"55cf5fd3cdc0b8e50fa6b6cd03cea21e7e61a1c2c0b3a597e201da976910d91116d6e4d7f021d736a2404f076a434601117995724b0e2228309b27296604b876","ssdeep":"192:yr4S2Mj0paxYxMosMVKNEe1wvB3pWyUaQ9QAFun8UaHGTmNy6xE6gov5htzZUgch:1paWxM0PU7ydI5hT1yxryiqM","tlshash":"04d2210ade69b40c04d3f303a1e14dfe3c109ddef1992e61eeb5aa3db55a9d05236a24","first_seen":"2023-04-05T11:05:32Z","last_seen":"2026-08-04T22:00:06.133993Z","times_seen":492,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.2.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:16 GMT\r\netag: \"76828-5a745b17e9c00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 45790\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FX36kpv6YJPXYLilATu4PAO3mdrZOXqayy%2FiKZhgp50kFGqTzdgIPfADk9ZR7zgM5z%2FnRKo64vP7Yq92YnZRfs0bzFPq6NDyB6I4BZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6da1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485416,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"2fcf15b9242ca9cbf091c45419959fdb","sha1":"52e744ee97e3612e790305643ab5046201831618","sha256":"f1dbbc4be8d88ae17466b1d7a8fd7bf4f9d9b5ab492719cdea721d82cecb738d","sha512":"4d4a4c6c0be9ea17249b76af3b86056a5b9cf221d8366dc9c4c834c5d6562af6551b5bd7e9ce7b6259a2268d2af23e2b3b228de093761365b64a68f99650123e","ssdeep":"3072:wR/QvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gN:wR/3/+cQ","tlshash":"b3a430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-08-05T00:14:03.432719Z","times_seen":5064,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-wishlist/assets/js/jquery.selectBox.min.js?ver=1.2.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:57:01 GMT\r\netag: \"3a4f-5ce0a0b789540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3780\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2QIRa74Qb626Bukrw7FbyWHEZwypfR9vK5ojODWOjLEuDikdrquwzIRIoAob1Kd0HFW6Tch%2FhPXcyzBSK5UkM2QGLCvVVLFK79GwSo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e24783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14924), with no line terminators","md5":"157f18464a93eab7fb62a7f3e618ac2c","sha1":"f47727e80d529d6e4941fea32f2e8a8ee5008b8a","sha256":"9ed8f2a0e573467348e64fb1945eeac1698f32af9e9c723153eb7142d6a43306","sha512":"a67c0a6cf4d918f0da5aa01d1b8c06c0a34f5434eb0a8ca580f678fd7e4c38ed21da3dae533d67d40702fce6a25674f7c95c7afff841b2388640b9de2ffbc7ae","ssdeep":"384:bdMv8k2UvYmbIatJcY36FLfsCnieEbf+bCSSOf9jPg7g7gNHwcbdU6hIcb8Ux:g8cX90FpV6dbdUCv","tlshash":"3362e005315421b022fee1eb1e5a645d1131a93e850581adb5e6d4ec1efeecc22e3f6f","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-05T01:02:17.795552Z","times_seen":35726,"resource_available":true,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1024,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"b7a-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1039\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p84jtAV0nqQSIVAmKhALLBM56hHwzA43HN294tdcsg4GYxW4fwJmYhnOlkudjcww7TUUusCiLVnQQO9QzuipT6WkYvseEUAH4OKTsDs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e2e31783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2938), with no line terminators","md5":"51af5d767f0300f23ecec6298b707395","sha1":"5eb2d3d937fe0392a974937125d0420666b9396c","sha256":"9c7c023f91428234ca0ea4df1199758686f4dcd04da96ba63571788fb3389c0b","sha512":"aef8aec7a48ba11df71b68853fec6d8d619f68c7460851fe116fc578d0226abdb701d23be630bfddcccd51561b01ef23045e6a320a7e5a555aaaa7a7b388bc06","ssdeep":"","tlshash":"cb51341fb060cda119f2287e613a718522325965b6098b30b025d8e42fece4b1b73ece","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-08-04T22:00:06.099316Z","times_seen":4487,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/device.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/device.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"bf5-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1203\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dre6LBRmfOgWUu5hD75Q3D6ER7AeYXjk6zyYhl2a1J8%2F51SXdlGV7rbUMm58HvNSy7eJA5SttZGzp4wKN49%2BnLtm9uj%2BlHqmT6lY39M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e3f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3061,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3061), with no line terminators","md5":"42d2a84f8934933796892821e3b90391","sha1":"06aaac64bfbf121dc2bf9e28b6c404e3c52fd27f","sha256":"4f164ac673a1beee85461fe53f89f12d69c2ed5a6adff3d4d69f762c6f766411","sha512":"9cf0f42a58b82c5b6cd4d4d37e30889fe8801de0c3f9e3353195bf420ad1408e2838dd3fedf37115fed8ea376dc9b1c3b88f057a9e288e3f913ff6771e1eadbf","ssdeep":"","tlshash":"6251ff44087a187a5d302f72918f2fe71362a64c694ba5a7d2826d48fce2f53206bdf1","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-08-01T06:07:00.377586Z","times_seen":409,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.1.6.1","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=6.1.6.1 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 02 Jun 2022 03:06:01 GMT\r\netag: \"b905-5e06e4919b840-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 10887\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FF6P8aq1ZR%2Buvp4%2FwPVFS5bYOzIz6NPDgR88pk9KQj8H1oPSmxCov%2BD60Fwc%2F4YEaY8HkePdam5EnnUtORKeAJU6%2Fd58UL4KJNc5K8o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47365), with no line terminators","md5":"6e006cdf323827cba54415527d84f321","sha1":"64cd52e592cab7a10f86c7b80ac06e7f141735f0","sha256":"caae854769a9780915c2522ec0e118160e6287a63bed5cd72a005b3c4bd0cf16","sha512":"b9e617d568268786fa8ae21e9fbd597664d241d776a5400959a9912809205f2c4b026caae834a0a34f1b5cecd67768207048631e63ccebd166bfe869b04c70e0","ssdeep":"768:mp9SRIsUiST5DUiZNRLm7qgdqgxAkI8Qy0lynMKwHyH9JZl+/JbvV7iySX1scjmx:+SRIsGyNNAzHy9AxvVLJc76QFfa2NKJ","tlshash":"8523db7936dc90b945dd53ad3abbeb8cf4603462d40ddca4c1b1cc2411e4dca4daabb6","first_seen":"2023-03-07T12:05:42Z","last_seen":"2026-08-02T09:59:15.163233Z","times_seen":44,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 23:41:08 GMT","end":"Wed, 21 Jan 2026 00:41:06 GMT"},"fingerprint":{"sha1":"FF:00:7B:19:09:C4:BD:F5:77:4E:73:CE:3B:98:71:15:B6:48:B3:A9","sha256":"BF:70:BD:A4:5F:D8:C5:A8:1E:8D:E1:C3:9D:8C:DB:54:CF:2C:1F:A0:31:21:5F:AB:93:03:65:2B:EF:49:98:68"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8CgqZfBMtw6xZd%2FgNuFKGT2eOtRlQLtZ10GpaSBxQV%2FXcqO91IFPXb7w22MrXfg3ZusGTetdNNY0n5tpj6x5mG9AKKdLYhWs7TQhTBndFY%3D\"}]}\r\ncf-ray: 9aa60058fa5656ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T00:58:08.865803Z","times_seen":17716184,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":38,"dns":13,"connect":1,"send":0,"wait":62,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:57:01 GMT\r\netag: \"778b-5ce0a0b789540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 6968\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibQ%2FsKTcXdP%2FvCNidQw6d4DTjl1E%2FX4KXnncAhZHu2lp38CBP4fwCyIYC5IJ3zOtkuC8L9koQAZdFuiNx6hcBX5WPpS3hK16Q4Finas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d5e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30441)","md5":"d3ec229e04c8634c88cc4cb3f2934c11","sha1":"785cb4beecaad98329fff0a54f9a5536cda200ab","sha256":"73835f9dd494931cd0562ab2d4db8aaf3d54dca375abade1794ad1a12ae0d97c","sha512":"65d669a89a92e9c65169574a41d381f1b53051bdff32764fe79ce69feb64df79f9a56ba39cca51724e978750b8ad5768ee956f652a9b3416420164eb9a005526","ssdeep":"384:0QWZyDDVUKW+KZKJ5Ne2QYvB+fx1UaE6J+yQ/QdmIaUX:0Eyr+KZK3Iacfx1Uz6J+yQ/SJvX","tlshash":"e5d231f8e54d01d66731c48bef81b36862b6fb3cd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T11:05:32Z","last_seen":"2026-08-05T01:02:17.788508Z","times_seen":33945,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/css/font-awesome.min.css?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/css/font-awesome.min.css?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:25 GMT\r\netag: \"7918-5a745ae746940-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 7053\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UasZ5jYt9ZVfNeISf15XcWCo8xUUyRwg7IFDBEV5EW7qjjB85zgaooJdSfi%2FveZEtSSt4Q2hZTF3scJbhNuroVIsIh126Xn%2FyKlNv2s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7dae783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-05T00:53:57.869637Z","times_seen":306051,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2020/08/dynamic-1598582530.css?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/dynamic-1598582530.css?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 28 Aug 2020 02:42:10 GMT\r\netag: \"4f02-5ade6ffd84480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4047\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hAcWp%2BGDk9HS6ECYh4y8GhUnkRyonCCRm600jZYCAAg2e6Aev%2BAVZgkSWjqTqLY60OFBWQ%2B9RGsOoCnj21F2OdLMK6Gpo41%2FptsuLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20226), with no line terminators","md5":"2d4e85c9c076b87c1f6a75ab7901e0df","sha1":"c818a0c762c49affbff3245d9f29a687cd88f105","sha256":"696c7f84e3b5f972cc5e31acf210e2fc28d3b6e1c1c3a819c6613239e4ea7e29","sha512":"da3660db8e7ea6307e322112d18856e740469cec222215fc63d3eba58a59d3b096b0fbe28963b881323a00c8f53235aa772ccb3d0b47b5d94e7ae03c2d628360","ssdeep":"384:oBs9umz+BC3X2N1o+m9ruGlgq9EVNel+P:oBsN+BC3X2N1o+CruGlgq98woP","tlshash":"0492539cb6660e360fa7cd39218ef5b13f2ad3f891e925e7687275b80384049537613e","first_seen":"2025-11-01T01:33:40.441857Z","last_seen":"2025-12-07T18:14:45.561015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.2.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:17 GMT\r\netag: \"3e0-5a745b18dde40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 374\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3XNUgLU%2FUsUsPO4NAEl9UoSTGPOS%2B3evq9Xx3QNzGw%2FY7BK9cbWHHA7T5UL8BRqGEVCC3ObEcMrpCR025fCvq3nXSDs2Cflg%2F0UW3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c8dbf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"787fe4f547a6cb7f4ce4934641085910","sha1":"c2dee88d5bdfef214ce9c56f71a1df51cda0f328","sha256":"654aaebdea944313257827be97eb196a8218a2cdfc9ba399db23e2cd4c02bd79","sha512":"e55a14c83a65ded7853759bd3f7245e57d51062b5434d8d91bea41551f7b81ffe6da17bd7dd86029da2d30cb8a74ffc955b71b137530a19094fc2c3329cdad13","ssdeep":"","tlshash":"f711c295f74f6b4cc5ba74dc951684c8741984b392cb206e5e0347c4bac817d5029d0e","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-04T21:34:27.10656Z","times_seen":49606,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2020/08/Logo_Thaicigar-copy.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/Logo_Thaicigar-copy.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 25 Aug 2020 03:32:26 GMT\r\netag: \"1dfa8-5adab5a16a680\"\r\naccept-ranges: bytes\r\ncontent-length: 122792\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGvXENVLxFlNltdOe%2F3CRonwiCyeWGsWYLCEfQGEVXEiCU85z9ZTsFG5tG0HGCuHNBF8aY9IxMdh7sRHisabYCyj0F1UP4br%2FbeZm2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6004cedce783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 478 x 406, 8-bit/color RGBA, non-interlaced","md5":"2d363dc08fbf099576e1223a8ff671bd","sha1":"c18e054c46bc27873e9aa9e9a03100e5ccea5cb9","sha256":"bb86a0f5e3917c6673d025213dbf702291d7b2b034ee8c65340b8c77144afac4","sha512":"04b7c53de903baeed0f19b4597bb8fec8bc3fab252023e57d405854937141e4eeb4272309488db601adf8ab4f0628568c1f215c6e28a0a382411539b97b170a0","ssdeep":"3072:c24UuQJRH7wQPpNbLpHPMPuDXWp8wy5oJkm4o5Gf:wUxHjflPGuDX/5CGf","tlshash":"20c312daf915042ade9c301b9d99fdacfaea09c1e0242ff119c756458997b0049e0fdf","first_seen":"2025-11-01T01:33:40.462134Z","last_seen":"2026-07-13T03:54:27.350951Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":547,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/images/lazy.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/images/lazy.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"39c-5a745ae83ab80\"\r\naccept-ranges: bytes\r\ncontent-length: 924\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNBwzvfdWMuDR1NR44jpU9AbjVuho4mSDT5nRbKXkE0DjJFvEdp5hzNGAzw5QiHHtKA8IMK6EoSrSL0Y20VO%2FI%2B8ScdjG0KeEL%2BU5O0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6004e0e1b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"4ffd0c1ba4b4868e0900d988cd2d1d25","sha1":"f22b6ca29157c26c27642b4a214e5310865a0df5","sha256":"075122b3c315d3bb7888a2cb108821d0ce9e8a3c2a88d74f8af55bd65c7cc423","sha512":"c3ad32a141948213feefde6063d1aea6a8358c81470ac4f27c9327f6d0f9978facf11c8b387d41b51a9c6d2ddb3c52dc35bafbcb04ab0ac18320df46416b15f7","ssdeep":"","tlshash":"4d110009fd905c41824dedc378e692679a1349c0a5e8e969b9cbc41a08241fec8acdcf","first_seen":"2023-05-08T14:05:11Z","last_seen":"2026-08-02T08:34:29.501421Z","times_seen":302,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-woocommerce/public/js/mailchimp-woocommerce-public.min.js?ver=2.5.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:55:39 GMT\r\netag: \"259e-5ce0a06955cc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2500\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEVAG0Z6TD%2FGQ3ssEGCk1XfkGAgHf7bbRghw7Z3kgbq0QEqmLUGdBZ6l4pjj7w8yy8rWQxS1Dc5i1IKtMuUiAMprQPceg5sK8Gdb6%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (355)","md5":"d00833e3bc742fe6110bd6bd99b8a663","sha1":"c096ee7a360c1bec12c24a80ed1378b480e13200","sha256":"362e5cf9bab265a1e10d24429775b3008a906c5547029017c73718270c31f513","sha512":"8cc555164c5faf8721ad46c02e28314e5e94214b395bce3d7ef8897f943d6e685ac1f11a86d3f50981179a96bc18b4ca35054e34114dff98a6f6c2336362f2c4","ssdeep":"192:O2B8z8oChGATfGkBOsESCg55a4jyvrOJTxBnoMS9XbK1CNU2:TBB955a4w8Bo","tlshash":"fb121f096bf618a971a330357faf5635307229071c5adc48bd0cb1989f28c357b7daae","first_seen":"2023-03-07T01:39:40Z","last_seen":"2026-08-03T20:52:33.366092Z","times_seen":159,"resource_available":true,"data":null}},"time_used":1800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woo-variation-swatches/assets/js/frontend.min.js?ver=1.1.19","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woo-variation-swatches/assets/js/frontend.min.js?ver=1.1.19 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:09 GMT\r\netag: \"2f92-5ce0a085f2040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2513\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HEq7e%2BLXRq1202d%2F%2Ff6mlm%2BVcbMmxmqEKsftsXnR65CCZV%2FGoHxL85KucjXp%2BRLl6LAf%2FnjV81T66nX73%2BavTCEV02bhxGj%2FnSArwbU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e39783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12178,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12178), with no line terminators","md5":"5a7e2bde6d83dcf65d25c466dbd31e38","sha1":"26af3735d5792354d1b0cace8774c181742966a8","sha256":"ec727d9d31dcb7ba62a9e4f09f2e1e79323673c3d9e2e50be10f74dbfe2df195","sha512":"2d763b25f4e6e1d731ab6eeef5040a595afb520fede379219042469ac6409a6cb7914fa2f3223329cea1b819f0cb6a00bd62214a26ba95c042990191f5eee642","ssdeep":"192:zOa1MpXM5HKBm3lgaKJvn9fTTSDELkuofUHwf0xFTOesTODR:OMtKJv9fTeqJwf0xFCXCN","tlshash":"cf422ea9702125b639ff71f6542f5e4870339a7840218a6278ce93e71dbde0842bbd39","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-08-01T10:25:17.786392Z","times_seen":190,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/flexible-shipping/vendor_prefixed/wpdesk/wp-wpdesk-fs-table-rate/assets/css/notices.css?ver=4.8.4.267","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/flexible-shipping/vendor_prefixed/wpdesk/wp-wpdesk-fs-table-rate/assets/css/notices.css?ver=4.8.4.267 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:55:24 GMT\r\netag: \"6b-5ce0a05b07b00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 84\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXWkywg276QxS7%2BPdeBouTFC0TNc%2Bp37YCEutjc6wTrMGFKYPO%2Fgi%2B0M1WiwuBccUwHOe69Qi0TqJpdZtXAIow0qXSIwZaFkuwNiOe0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6d9f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"eca2f4dbf91a1f57204b14e0802e280d","sha1":"621c104884587647dc8a9135ded889948a917b58","sha256":"bad54a376a31e35969413c9c8a256af082f4eb0d6b7853a6d2b8dee9d8a8b373","sha512":"b93a9816fba68ff9d198d95460c903dbf35d872b420858308175e66c6587e504a0e4da610f4fdf911f9f39ccf56324c39a89d0eff02d9af0522d00b8ff18c3bb","ssdeep":"","tlshash":"1eb092a502f96b00d806408088a6a343795840432dea7d6a1850aa8a8b9a274c3703d3","first_seen":"2023-05-18T00:55:14Z","last_seen":"2026-07-26T15:54:43.250383Z","times_seen":91,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0.6","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.0.6 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:09 GMT\r\netag: \"1d25a-5a745b113cc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 45119\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QG1BBkufcQIXCmsb2RKJIkFknxI216zg3jSAGo98ggzpkBS0zB6rSopcLDfmwWc6wK7LwxopBlgehhdAej4GSIVIapZ0Cz8MwwhnOtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7dba783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41022), with CRLF line terminators","md5":"1eca6ed028850aa07d5f4a003fd7079e","sha1":"1f02b8c5485108373bdd14a96bb1fe22d72e157b","sha256":"9556bca5ad5eb24439887d7339fcb687088776bbaa995553aa489c9607cf9e19","sha512":"6328977461a8c077169132ed6071bd785496b58a91881d169753784ef916ad88eb3b7fcfcae1389933bd2bb32e45cf685c38682817102be4eb0ac3749321b9f0","ssdeep":"1536:tjaxl8yra469QduD5VFg2WKl+2qCd+m0SNpINVp7Nu1HfwvoOdV3LU6AKSx:N469QstWKALm0SbI7u5WogbpI","tlshash":"7fc33cd87151b432029766a6453f0a0ff23b9d15740b456cf328e4c87e3c9a991bbfba","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-08-05T00:28:34.67897Z","times_seen":4998,"resource_available":true,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-includes/js/wp-util.min.js?ver=6.8.3","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.8.3 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Sep 2022 03:52:10 GMT\r\netag: \"592-5e913c0b08e80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 756\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xH8oxty0yjvZ474CKKfdWFq7TfILwD8p6Rv4P35olMcAE%2Bgxu%2BF3tH0%2FTNXrZG7Qy2T4Gh9DB%2BmwHrmn4SJA3FyAR7aFAbkwNo4S9wQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e37783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-08-04T23:29:49.612376Z","times_seen":101372,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/owl.carousel.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/owl.carousel.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"a721-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 10889\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZ%2F%2Bnj%2BIqLYKEv6nPc8p8XuAlnJAly3MlrOmXXxpMnZLwWjeC0Vo5KAQmWRE%2Bk5UjFJOWWI1foZxquV6fpaUho29%2B3yInoERJ8m38MI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e3c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42785,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31956)","md5":"810cd9ed28e9ce225c327bc93556f301","sha1":"c8c24cab1f282aa018cd0ec25f0cdb66252a54b4","sha256":"cf41260189e7fb3d15d418e575d3aa655cbf705766e4081f7ff66685ec0c38c8","sha512":"38c2693f9c6de614902f54b45ef4a75525154a521f91a85c16d3d61ff1ce034c1357a0dc91c6a70c50d0e45cea879695007475926b0f8f509f788531c73ce313","ssdeep":"768:OBA7PKMFA0P7MKNORmnLGhep2lcwJeL+C2bQdc7fCORUQuFBt33:+A2MFnhMxAcrQDV","tlshash":"2c137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-07-31T18:58:54.280689Z","times_seen":280,"resource_available":true,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/jquery.autocomplete.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/jquery.autocomplete.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"31de-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4291\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUBI49jbBZgpZpm%2BAjwrFllcRAvF6BLu0IzkQidFvfjNXYke4pLoPTytyiatuFKS4CihHYiG66YTwpS0frtcQcZnFQpnLnpSMqGSnx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e5e47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12766), with no line terminators","md5":"4413c3e2ddf4b264c39f16a5c3994b80","sha1":"879adc32320429c011540187beedcd2c84e79a8b","sha256":"4669f93c23967fa33e4b9acfa2f9fc8d47cee2808f44a64ac48a14b230438504","sha512":"43a81a09db529110dd1c80180240731aa4e27e606d12939f34848ea8244be7357edad8cc0ef75e6981c1451b078a90014eeb9ae75e7f8cd479dfd89ab0916303","ssdeep":"192:hDFbFFhp3CymZ8iH5EBPLhTHxkT5BwXWmByV/WRXnGyf4B+kdRMwHZliNRc1Sacq:7FFhp3CyCEBvS6xyV/W1ABT9Zsz5mN","tlshash":"7b42744077423332d66b209dd95b414e99bbae167c066890b31bc6c59eb9f08d0eff29","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-08-01T00:58:03.685747Z","times_seen":286,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4yPRWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4yPRWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19400\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 19:49:36 GMT\r\nexpires: Sat, 05 Dec 2026 19:49:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167076\r\nlast-modified: Wed, 10 Sep 2025 16:42:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19400, version 1.0","md5":"4f78daef1a1d29da8783aed20256d678","sha1":"d7bd2d1c122216de856554de22d2dd517aea7f35","sha256":"69135716e3246d03252eedbc4b49092fd07b1691211dd5c8e6a099efaa2e1e59","sha512":"d81b2d4eebb9152ca6c20f8dbf8601272e7cfb699b02168d2a555810766233d3f5cbd88d284634babf5aaf63b9d5ecefe2ad5e896533f17203505cc6ecfa2d03","ssdeep":"384:pTYePRkgCPlNpEIQqPePakVBa/1huKRZxpvScPqtdn2c9zjFRcnuOQAJ:pTYepkgCPbyI1ePJra/1lpvScitBvBjG","tlshash":"5e92d090cf6be03aef256ca43b5bd946b51ecf3241609c17b44a6088a7e692145d2bd8","first_seen":"2025-04-27T14:23:01.08323Z","last_seen":"2026-07-31T20:11:34.604597Z","times_seen":603,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/61b2ce11f0527409e47a0efc6c739745/thaicigar_page129.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/61b2ce11f0527409e47a0efc6c739745/thaicigar_page129.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:34 GMT\r\netag: \"e9d5-633e3e77c753f\"\r\naccept-ranges: bytes\r\ncontent-length: 59861\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VELCb3I3F4a41%2B39ZB9TYZECBKRRQqamtQc6lYCUy9Cy4d%2BIntK%2BoMZw55Sp0bZx%2FYZRcJYOlqpojVSpv77%2FBP2Do%2FHWr21SE12mxzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067db0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59861,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"131c98a8526104684a29058230a3b00b","sha1":"0229d0a038b29bf3dbcf3de792c68bc7d3f92471","sha256":"0e9e5c9a3e84cd2aa302460c063e61676ac79f578d810dfe9310e4e8dadd606a","sha512":"52c8aa3b66baab0e20317106ce193e5f1450f324137e966be9b90e180207292040087e7256405d7373cdaaa044c5b3f9e5ac708cc2024fee0d9421883a3560af","ssdeep":"1536:JNEmkE8gB3O3HzfdPn3RGq4BBSozyYTzNqOAr/STodbfTS0qtW:nPkE8gpGHBP3RHyBSozBzN/M/SsbTdqg","tlshash":"474302eb4162a9c24a124b46555f33c47e8df406bbfbf513dcc05ea2a5b1c6c5b50b38","first_seen":"2025-12-07T18:14:45.567565Z","last_seen":"2025-12-07T18:14:45.567565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/popup-builder/public/js/PopupBuilder.js?ver=4.4.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/popup-builder/public/js/PopupBuilder.js?ver=4.4.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 09 Sep 2025 05:29:29 GMT\r\netag: \"140d7-63e5796987f8a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 16827\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1x35v%2BwqMM0A88737M7bL44baLhID8bD8gdrWGzimj%2BXRAuDNSKBuxqLbA6F7RF4nV7qwfbxpJP%2BeyFBWJqC4gVqDYLUaXMtWP86mw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c8b40496d8f2a17404252501f81106ea","sha1":"0c46e7878c082931761563f32b1e183e82c3c660","sha256":"87c41ed508f3426410a3046dd1d8fe9112ee864a6e1d20dc97fb08bd081e6477","sha512":"a1857c4575d814a72220acf22571668f291de7e3e9a552bd9d80ce86d2d982b57bb7404e549360f94b0ca8c7592fb8308c777d6265809b2623a0297a65198c14","ssdeep":"1536:Rs2LCxrkTWih+S2wXS2pOfUlEUspfpF8/K+mdIH2bajwcMaXBKGwbN:RsUWpUspfpN6MaQnh","tlshash":"3583958133dff1ab4aefb355a1fe142cee3cc570b1469e7eb58484582890844ab96d7c","first_seen":"2024-09-28T14:13:19Z","last_seen":"2026-08-02T15:32:38.813497Z","times_seen":1021,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.10","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.10 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:44:09 GMT\r\netag: \"4db34-5a745b113cc40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKssbH6hAGqpI4eMvGwVPyrjKJhfbeEN%2BQeOjdksb9xa7PWxJ4v9mI9p5fCihyxjF5yLTQeRdS%2B8NBQjF3XGWu%2BEE54YMFWBMo4J1L4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9aa6004c8dbb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57235)","md5":"5f379f1fd11072d82f45467263fc81f3","sha1":"d533bd7b2f946e2d37769d0d66272003c90a015c","sha256":"1718371fc359dbe2dbab673e7827f7cbf218125959d8e667fc9ed685f5352b10","sha512":"aca68fc999ae8c84146f604faebd490c9cd41644940b38f0190aef0a27f099b7443935cc140c5397e61d77016318f2c44bdae5bd775ef00eea252375563e0a52","ssdeep":"6144:nLVrhJxgQ34FxCXHU6QTWKv9qWGG0RxxYndANnTKbl7wnoyJDT2kpbBCJQ:nFb34F/pv9yRxxYndANnTKbl7wnoyJDL","tlshash":"51644be8e532387a04e743d7905a48047375e929e30785a2f1bbe1695c5c68d02ebffe","first_seen":"2023-03-07T22:37:01Z","last_seen":"2026-07-25T09:21:26.322348Z","times_seen":183,"resource_available":true,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/js/functions.min.js?ver=3.8.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/js/functions.min.js?ver=3.8.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\netag: \"16fa3-5a745ae83ab80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 23373\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JawSqaZAUfgLo5gg8zZcZwrzAggB6mDApz7mvOmT7GuS52sAQFicUR0nMmje5J%2Fjz8ReoUiEmiloSHyzsmRq2lKQn2XoUp2eVDTEYVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e4e44783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31976)","md5":"fe4f41042a392aaf98c6254d2cd0b978","sha1":"6fce5fcb41bafb93b1e01766e610459485846414","sha256":"a8bfd7e6cda15ecf2cf7515e90ba6fed0c2481cbde709f1d8ee2f79f564d2659","sha512":"304bf32b8c62fd3a1ef473828fddc865461a8e43c139acd2b11dcc6b5059161c6c41c77b8fd28f50d8c86ef55457e1d37953eec774c355149237c68a7e7201bf","ssdeep":"1536:kiYI4mAEGUQ/XDise9fJ5GszBkBq3PmQCyuHiV0PLMNHLRBEJnHugbrS0elFpRT/:h45EpGszBkBgKTMGIiS0erpRTB2fB9jW","tlshash":"6b93c898f43264ba09bf6d64505fe54534723b36ce35806364bea4b88d7cd893232e7e","first_seen":"2023-03-07T15:08:35Z","last_seen":"2026-03-12T09:51:30.764428Z","times_seen":8,"resource_available":true,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":952,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Shadow/ShadowImage/Assets/shadow/dark.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Shadow/ShadowImage/Assets/shadow/dark.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"2950-5ce0a07f45080\"\r\naccept-ranges: bytes\r\ncontent-length: 10576\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lul9utYu3aXnbLNOkCCdzeG5Fef6yKd2Ox7RuU252hT35TPt1LZaWH5bg6g%2FMS0BripZPErea4wuSplyeFV6JsQNxvUklm1Xu%2FGHXSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6005a48f4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 50, 8-bit/color RGBA, non-interlaced","md5":"9e244a559903f8e4d9b70a5d4f7c344e","sha1":"8b55fe5239fe9b884affc899acf0bee2d9560508","sha256":"7b270061480d012e5a0d16201d1bb606ad7fcfb842d25f7f56a38fd6a2101523","sha512":"a6513d923a8aa1f12bf1abf4e9c4fd1f4331f9c54f0988eaea1ca58e56eaff5b87a1d5f8f88f894aba0f37222fd96570a953977efb5fdfc65c16142cb7cec4d0","ssdeep":"192:mZ5Ye/DufEV3JJSfbew0UZazf4tCi5LGaGH/1p0Di4Es4NCOEH6EI:mZ5YQufa3JJSTew0Hzf1it5G9p0Dedgq","tlshash":"c322bf6ae08978f3b7c7dc519d99432fe837ec5c41d400eac8865cec4a78446f90a9d2","first_seen":"2023-05-09T06:08:30Z","last_seen":"2026-08-04T23:21:50.281332Z","times_seen":299,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 23:41:08 GMT","end":"Wed, 21 Jan 2026 00:41:06 GMT"},"fingerprint":{"sha1":"FF:00:7B:19:09:C4:BD:F5:77:4E:73:CE:3B:98:71:15:B6:48:B3:A9","sha256":"BF:70:BD:A4:5F:D8:C5:A8:1E:8D:E1:C3:9D:8C:DB:54:CF:2C:1F:A0:31:21:5F:AB:93:03:65:2B:EF:49:98:68"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thaicigar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 06:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c7ad0e-6bea3\"\r\nexpires: Sun, 07 Dec 2025 18:52:17 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 8515\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gi37qp9Qm%2FS678yRH1kek7VS3dAZ1FsRfark1l86fZeM%2Fc6Ql6AS%2BIjtIti9xsSK%2Bappw5PDvZ48NBoj4Nwkv13vEP%2FL18zyhOP2fn61vxQ%3D\"}]}\r\ncf-ray: 9aa6005a6b8c56ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-admin/admin-ajax.php","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 92\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"action=sgpb_send_to_open_counter\u0026nonce=2dabe956d1\u0026params%5BpopupsIdCollection%5D%5B5529%5D=1"}},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\naccess-control-allow-origin: https://thaicigar.com\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding,User-Agent\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 07 Dec 2025 18:14:16 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRREhjcrla7jnG6oF0JHIFcwI6QYUeJvgbMUwr%2BAEdGpgSq3U%2FzCvEsWVM4k%2BAXc8WIXL086%2BNEvDDcqTMSzWXe%2F5nQYQlqTqvJL0W0%3D\"}]}\r\ncf-ray: 9aa600682b1f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-05T00:33:08.941324Z","times_seen":136315,"resource_available":true,"data":null}},"time_used":1498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"2f230-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 20335\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwTyyE8Yo9I15%2Bcof2pi0LtNmgnRwd7nFKQU5Yq3U0WwjCIaik0FFxs10CJ8vLs4m3MhJpKJJ4y9P21EROPw%2FjpTNT%2Bk4Uiag74fkA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d5a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193072,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"861f60bf73ae2610ece7df6b04cfcc1a","sha1":"44d30385809817cc6649dd2ad80315b24029b091","sha256":"9c34d15226af3a3a8f407efb5bf5bf9a26d5e82b3568c8e48a9e2c354e12d490","sha512":"9cab7b4e39634bc67fa54c67bc83b78c65b00de9bbd717232f7598620014083282a952aeeda8e136bbf88fe2712901f7d799dfc3d10284ab8d373fb200483982","ssdeep":"768:NiZco2DkCdbOxlI3mS6MNJ5/w9rKBVu1YSggXU/9WwODUCJ00WO+4Ku4OxaZ:dRu16/UFUC7WJ4yZ","tlshash":"a614b97197301de918d68e254fb1ba8330f49281cb8305d7d487d89867ceaa90ee77db","first_seen":"2023-04-11T13:21:09Z","last_seen":"2026-08-01T00:58:03.638726Z","times_seen":187,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.css?ver=1.2.0 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:57:01 GMT\r\netag: \"a46-5ce0a0b789540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 812\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soijl1TlViFjLlgWu6OJzII1jJdCk%2B4uflGt5WSPTXvCoR1hV6pe4MCCBPklBKu%2B%2FulizW5t574QuPBHXFV16XMmHiE3U8dvBGgWBiw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004b7d5b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2630), with no line terminators","md5":"eade318fbed91c096467dffa56406638","sha1":"69d306a2097e792f99c80a5e0bb8863260399cad","sha256":"d589803f3ab380582ab137b22493c2bacaa92424fa88cee212e80288cac11fbb","sha512":"ec10d6d74dcc26cc6f7f37d4bd994a3c21d33fdafd0673b8aa4706385b1e8160d153c447e73bba36fb67c2208200469579dd58b78b4e379fc2a17a8f095f931c","ssdeep":"","tlshash":"9251dc36f4c51239242fc7d35d51a9ce6565823e92110769f1a2b9f8abcb4dc5023e0f","first_seen":"2023-04-05T09:48:04Z","last_seen":"2026-08-05T01:02:17.761736Z","times_seen":35577,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"bdd-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1086\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaJF6aVBJ58xG6XDwEbm6E%2F6iYCZkXqucaRc1ALpbP%2F%2FmWqVqkzqx788DE4hmx7a4QxyYrhM%2FNCiM5ncvZzoC7WfvIKZKbt%2BtiMY1nM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c8dbe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3037,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3037), with no line terminators","md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-04T22:00:06.084018Z","times_seen":39136,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=5.7.2","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=5.7.2 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 10 Mar 2022 17:37:58 GMT\r\netag: \"351b-5d9e0acc44980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3632\r\ncontent-type: application/javascript\r\ndate: Sun, 07 Dec 2025 18:14:12 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OihZJcTYPs%2Bbqt3TVklhIlkKan9uNhsIwltm761WvALqTeyleywPy%2BcAccZGl%2B9qTYWiyHfB5Wiw6g4lNHzy9FikR5uXqS6TFzmGWrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9aa6004e3e38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13595), with no line terminators","md5":"d4404db36e560c1db1966e54e3ae9de6","sha1":"1ed4dbed6b34c988ccd3c079ca6563099a59cc5f","sha256":"1113cb471b59e05bbc7b41a1c17d18647090249f7a6ac9419b71598c0c37c683","sha512":"0aee03472c0018356954ea17b563564082b3d0f2a941aa8af7b3c138107013aaf21b592bf8930e825b74ecc4d3d5633eca23d2058f94356e650e8195ad49187f","ssdeep":"384:RTsiqXwOX4R/hbSMmNgvNR00nOuCyRGF4dZ+wxmeKmTrYnRmf:RQij//bSMmNgvNR00nOuCyIF4D+wxm9C","tlshash":"7f523fe6b2335c533a6f51a7548f900cb135e87c6242c6b99c9ae7b3583ce402353b2e","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-08-04T22:00:06.09996Z","times_seen":826,"resource_available":true,"data":null}},"time_used":1768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13784\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 20:53:46 GMT\r\nexpires: Sat, 05 Dec 2026 20:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163226\r\nlast-modified: Wed, 10 Sep 2025 16:43:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13784,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13784, version 1.0","md5":"14f1963c9f4e44b48dd3aa287ae0e07a","sha1":"c9086cd45cb25020c82c874d7a72a2c4463d1289","sha256":"ac40cf0d115bc06bdde46dcb264db6ea887d6eefe36f7f8286f3342f1facf078","sha512":"be20d8dbf89599d857543da2b8c6bb3f6fa97589ef3df1e760819337b53ea2df093d40eb13f7681203280247e58955d7e2582dc93d120bb5ec63191d0f45a0e6","ssdeep":"384:thbYwTsfc3ecRU7xHQqy8PXBbaovjOpTQ:XY997xH17ZbBvye","tlshash":"4952c0d849a547a6e61b82f1d54cefc23675030ce499049857f26bfd8850b6eacf2273","first_seen":"2025-05-04T12:45:31.736924Z","last_seen":"2026-08-03T04:57:39.935425Z","times_seen":667,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/themes/woodmart/fonts/woodmart-font.woff","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/themes/woodmart/fonts/woodmart-font.woff HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/wp-content/themes/woodmart/style.min.css?ver=3.8.2\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Jun 2020 17:43:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoExyDzGuo1ibteH5VFtVRHRKmUp9SClr3hPWGrLHmpoVGR2isstTp9l52h4YT6dN6FEQXDuYAf1yA1xFHZ3O04zBHRpq%2FCXZd7%2Bp%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\npriority: u=4,i=?0\r\netag: W/\"301c-5a745ae83ab80-gzip\"\r\ncontent-type: application/x-font-woff\r\ndate: Sun, 07 Dec 2025 18:14:13 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9aa60059e8d7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12316,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 12316, version 1.0","md5":"23fce8fd8c7339f24f7e7068a86820b1","sha1":"679140e6e62a272f084d7b8d52cd037545715850","sha256":"1bd063ab5992907f457980aa6ed154377d67b20deb9a1f811866ee8a517cd5fb","sha512":"859ddde841b42b6c10a33dbfaccd355edf65bcaf6ea97bd5f5263f7dead6b9af71360662bcd43fce3df279871f1cad773e902e36e967cb01714cb2e7953b43f5","ssdeep":"384:O27cA2b+7jb7JpKgOzjYSwCPbBz/jJ0CY:otb+vbFpbOzj9RPljJ0CY","tlshash":"b5424d1bdb91de9fdc124bfa40a693209ed4bb21d77ed38ac64a4d89f0064e84d60787","first_seen":"2023-05-04T16:02:15Z","last_seen":"2026-06-24T09:30:53.214997Z","times_seen":46,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2022/08/reviewpage4.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/reviewpage4.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 11 Aug 2022 03:08:18 GMT\r\netag: \"c4d2-5e5ee7a286c80\"\r\naccept-ranges: bytes\r\ncontent-length: 50386\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:14 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPXQzlbBFCCAQNgrLCZpWetFbn1CYvOYcEp00oSkN%2Fad%2FcNcbvDy5nPK5KZFsqft7gVXlvenf6Vuq48vLQD%2FTxR7JdgODONxRwgL31U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa600615a11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit/color RGBA, non-interlaced","md5":"d38c4a0021cfd84d64a4c7545c2077d9","sha1":"b5ad410bb294820148246f480539cbede13fb5b7","sha256":"fd9150d6f207c91efd6a61d8b8f694180fba3598ef1a9c8eb8d7f6c92e70ea72","sha512":"08212e1b7b51494e2be7bf0ed947f8864c5a03ca04cf37d9436e83a8147e98fb7023380abc85057a6454618c9e813ab6e3be9cf616d8541b9080300a1943224c","ssdeep":"1536:1KUOPFVuHcOAe8VyfJNr1O3TwzDyEmrYklzG:1oVY8xyf7r19zDZcNzG","tlshash":"2933f2ba3a39df9b591221ff04e8e4835bc86ff894435f0905f396593b04eb45b3a914","first_seen":"2025-12-07T18:14:45.575286Z","last_seen":"2025-12-07T18:14:45.575286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/ba65287b4f478668aebe3fcd9b38a7cd/thaicigar_page123.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/ba65287b4f478668aebe3fcd9b38a7cd/thaicigar_page123.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:35 GMT\r\netag: \"903f-633e3e783d3ef\"\r\naccept-ranges: bytes\r\ncontent-length: 36927\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVoF6wgqSpIk5zMGpbygHJ1LUwboQgci7zq5YP2Kyd3ThHe75E68v%2B3KQoWFoyQebvGAj4%2Fx%2FyWh8dxcNbO8Cjg%2BiODyzAh9WRr95xQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067eb11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36927,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"dafe664c97c39fc40c947e2a3fc02931","sha1":"b4537088dcc404d58a1a9ab7c7c5854f6ecb6d29","sha256":"e38bccdad1c10d81f393d28043963dace1f01d981256b0dbad34ad5c4fb790f4","sha512":"1d5d58165abec91efcd6d565b2f3a28d54fd1d2760b988ab4a3a2824e3c56cf28ab3a131e10d0fbc6761008e091299c572488e7ca82c290eee3bc23677c0c2ed","ssdeep":"768:JG//FXYfzKVy4qx6B0DaZE018yT6RlrueQI46qx6OK9O0A6uK5ShpVYe/I1z:JIFXou+WZ37TZwqx639065uXY4Ih","tlshash":"03f2bf03ac94db47b42983fdbb135e791a2e6b05654537eb12730dab6f211111ecb239","first_seen":"2025-12-07T18:14:45.576027Z","last_seen":"2025-12-07T18:14:45.576027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=2a442a15","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider.min.css?ver=2a442a15 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:02 GMT\r\netag: \"558b-5ce0a07f45080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4035\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnbvIFD7gk4odLRe2OExwNVy4FYSrZyM51AXUsXcRjoEPBjP9vWVlOmpdDWkGIJffw9Zsfz8DEhCEuRD%2FwXAskVsDE3J7MoAaLSWnWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c7db3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21899,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21899), with no line terminators","md5":"d502398750838c7d746615c01e600e76","sha1":"14b02c472c857831b8cb071df414885c521b81e5","sha256":"ce117964f8db30a94ea2140728fc0bc299a5f81ea2665bb43c12c52c3bf9e3f1","sha512":"e16548acfd478ad6ab16a4f655a92fb809d4647e628d1005f8b5583428137e78e9e2165dad89a15a5975344ecd98c740d9d9de40563aeda9f1515faa7dcf7b7f","ssdeep":"384:cArwM4c4N/EqubQ2o9a+yRxIRFpFV7OLJjZmoIsPide/iO055q/u:cGwM4d/EqubQ2o9a+yRxIRFpFV7OLJFi","tlshash":"11a209201e3a232a746e52d279c6ee4dd0efd50df632d5ddeaf6621cc28e9c411278c8","first_seen":"2023-05-25T00:35:29Z","last_seen":"2026-06-30T04:03:05.957908Z","times_seen":33,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKZ-Go6G5tXcraVGwA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/kanit/v17/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 18:13:16 GMT\r\nexpires: Sat, 05 Dec 2026 18:13:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 172856\r\nlast-modified: Wed, 10 Sep 2025 16:43:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19300,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19300, version 1.0","md5":"b149de90fec0235ecc74597251628035","sha1":"a59ae1d58d86daa8759832a3475be3c1c26960e1","sha256":"1e856b3a04f93a23ec758ad37750f4dcfbde02334fd30358d02d5d4db3052bf2","sha512":"108c4270a63d0b99409a1102272e0c3a79200cf79663d9a6bfa999d9a978ee7233c06e89adcb5937c869e81ee70bc4e71106e8c644c9fd9303081dbe052a7dee","ssdeep":"384:5wjcwLP1szEliwu0gcAHKnawvrKNDggVRrw5x0jsE93nT9um:5wj7SKu0KK/v+FNrwDcTJnTr","tlshash":"a982dfac152fdd52fb37423dc5cd4ea4df8286f5e564e49008ab637f298201a3ba2173","first_seen":"2025-04-24T11:01:06.876956Z","last_seen":"2026-08-04T21:50:03.125098Z","times_seen":5665,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":80,"dns":1,"connect":29,"send":0,"wait":16,"receive":6,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2C2_8IfWMuQ5Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:12.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2C2_8IfWMuQ5Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thaicigar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 06 Dec 2025 00:47:47 GMT\r\nexpires: Sun, 06 Dec 2026 00:47:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 149185\r\nlast-modified: Thu, 28 Aug 2025 11:25:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13208, version 1.0","md5":"41d33a973a74ee2d2c336cd7dcda4e8c","sha1":"f4c67bcb7ef8b5294d0faa60426eedae7ffa9f88","sha256":"6709b0361745936ff7ec5b75bb63c4d67deb04669fbf40285e39e3421a0ab510","sha512":"7ebfe3366ef95a1abc6c4d47a558b5adbbb9dcda461bfd9537948c522bf5b588e702bc6ece670195e7e27ef90a5b028daf0d49045963b87a00cdd6fe95f0e73c","ssdeep":"192:NTeJy/GFI5Lw3DYetK+ZNqZQ82SvWC68x5UVn9Gu3pY6w5n4fvngty21jWoe1RBb:Na8TlwsetKq18Fd6MuZvUng4tvpWF1R1","tlshash":"5f52bfcbe714e8abd66c253dee6c7172465f4040cd81a9c93c125ae15b1422af74fa1b","first_seen":"2025-04-30T04:23:08.458527Z","last_seen":"2026-08-03T01:41:48.122372Z","times_seen":904,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/2020/08/Logo_Thaicigar-copy.png","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:13.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/Logo_Thaicigar-copy.png HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 25 Aug 2020 03:32:26 GMT\r\netag: \"1dfa8-5adab5a16a680\"\r\naccept-ranges: bytes\r\ncontent-length: 122792\r\ncontent-type: image/png\r\ndate: Sun, 07 Dec 2025 18:14:13 GMT\r\nserver: cloudflare\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zG4y61vQLa9YkH%2BpmHqENaI5FxapGqS4WcagOZJEHJNnxU0dr9GTmR6os0zTTvu%2FUVCDtAlCsaOAAZKXJ1Jj17Va4IP5UuSEl6l2pj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa6006009d5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 478 x 406, 8-bit/color RGBA, non-interlaced","md5":"2d363dc08fbf099576e1223a8ff671bd","sha1":"c18e054c46bc27873e9aa9e9a03100e5ccea5cb9","sha256":"bb86a0f5e3917c6673d025213dbf702291d7b2b034ee8c65340b8c77144afac4","sha512":"04b7c53de903baeed0f19b4597bb8fec8bc3fab252023e57d405854937141e4eeb4272309488db601adf8ab4f0628568c1f215c6e28a0a382411539b97b170a0","ssdeep":"3072:c24UuQJRH7wQPpNbLpHPMPuDXWp8wy5oJkm4o5Gf:wUxHjflPGuDX/5CGf","tlshash":"20c312daf915042ade9c301b9d99fdacfaea09c1e0242ff119c756458997b0049e0fdf","first_seen":"2025-11-01T01:33:40.462134Z","last_seen":"2026-07-13T03:54:27.350951Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/uploads/slider/cache/de145d3ee69467956f97aa0ae23f785c/thaicigar_page121.jpg","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:15.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/uploads/slider/cache/de145d3ee69467956f97aa0ae23f785c/thaicigar_page121.jpg HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 29 Apr 2025 05:16:34 GMT\r\netag: \"f532-633e3e77f24bc\"\r\naccept-ranges: bytes\r\ncontent-length: 62770\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Dec 2025 18:14:15 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqNEptr1So6T1l1z8J64TGNr%2BVCKGLb6R2ZY6LYgVm%2F8oiKbB4BWjUgfjJohfeET84OKQGa9EEJ2HeNagzn9n9sfxoRUOyv6DOFEEBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aa60067eb0f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 800x533, components 3","md5":"5cddaea2aad830a1aa2ff906bc0d955e","sha1":"8ad60ac4b4e68673b6ec14197653cb50a8c7e5a4","sha256":"64ab9a2ccb44fa464823080319278764e3bbdca1adcb1fb718b455af5a68d06e","sha512":"0abf049443ffe0da8eb123d94a23dedc6bf9e907c81601f254b9d26937221f5e7022aaed454344059cef47fa037ceeb02da027d76d1137391d55e21cf472c900","ssdeep":"1536:J0Za+T48tErkLQOR9u3n9hbsSvWNSJ61QzYkmLbt:4a+TZaYmDswW+61hkmLh","tlshash":"7d5302b1d107b4946423e1d01f5a5bc8b7bb933c4fc18a101da15ebba854eec693cb7a","first_seen":"2025-12-07T18:14:45.578969Z","last_seen":"2025-12-07T18:14:45.578969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woo-variation-swatches/assets/css/frontend.min.css?ver=1.1.19","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woo-variation-swatches/assets/css/frontend.min.css?ver=1.1.19 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:09 GMT\r\netag: \"3f4a-5ce0a085f2040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1765\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBMXSea242LnNtdt%2F8v%2FPIYJOCCmeSIXEku1kGm1oMPt35XM68xrcEQzHpJsh1BLu1TMuYSDIajzQaTGXVg9eTScZdd9%2FH0OYidnhWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6da3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16036)","md5":"10ab5eb84d5c09e20d122ffabed97668","sha1":"d661fd6ab413d6182996bb550590d1fe99f39350","sha256":"8e089627a7e029b65182c7eb5e17dc196538c77316b9ad4b616b679b29445e25","sha512":"c67db61528690567ba49600d60a9e03c071eb82a4775a7ddd28ce57a181da3009ffc219aa6ca0d4146a34c1ecd9c058a7df74712fab80520367bb25a75b66b43","ssdeep":"48:wbvNm4zufuT4O0gcP3cvMw+pcGcPe/rMzHMhV+3YcQ7+xtFTNzjJHuiFpHnonFn4:oHNgCS1t/4AaIcgeiiFE1C+Gdh6xNyJ","tlshash":"4872f7a2b44f3e8db68ae07a65dd2cdbb57165f0c231157a684e330f4fadf0181a6c94","first_seen":"2023-04-18T23:17:22Z","last_seen":"2026-08-01T10:25:17.83643Z","times_seen":166,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thaicigar.com/wp-content/plugins/woo-variation-swatches/assets/css/frontend-tooltip.min.css?ver=1.1.19","fqdn":"thaicigar.com","domain":"thaicigar.com","tld":"com"},"ip":{"addr":"104.21.29.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thaicigar.com/","date":"2025-12-07T18:14:10.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thaicigar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 16:14:58 GMT","end":"Sat, 28 Feb 2026 17:13:35 GMT"},"fingerprint":{"sha1":"09:D2:31:ED:45:CC:BE:EF:2D:F9:51:79:F1:4F:53:CE:85:8C:05:09","sha256":"F8:0F:87:AE:A5:66:30:30:C7:04:F9:C4:06:59:8B:B1:14:C3:1C:4D:DD:8C:F5:23:4D:36:A2:2C:56:FA:5D:7B"}}},"request":{"raw":"GET /wp-content/plugins/woo-variation-swatches/assets/css/frontend-tooltip.min.css?ver=1.1.19 HTTP/1.1\r\nHost: thaicigar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thaicigar.com/\r\nCookie: PHPSESSID=gtr2t1j1sml3japseuosufmh8o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 11 Oct 2021 01:56:09 GMT\r\netag: \"c1b-5ce0a085f2040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 875\r\ncontent-type: text/css\r\ndate: Sun, 07 Dec 2025 18:14:11 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKfpA7pGGGnuGBy43R1LRJvqX%2FsSXDZHbeDBWQeAntR6c%2BDo2OXnaazNWX%2FXu2gBcb8aS2mKpfMeq6hW9cdcfjmIr5l1bmB80INvy%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9aa6004c6dad783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2933)","md5":"64e0bf396f9117a45eb1ad8bf01ad3e4","sha1":"ba9e1ae7095949e9b934a46ad2949b6db07a39fe","sha256":"7d47d2331dcfefa823651485237fc936a2401c24339d82dd56028525c2dbfe70","sha512":"4a2511e457e79d7b94f42a5c94e7a9ee37821653cfd781d3302bf38f2b07f0f995d801e89f52bcc5d4aa0f009f269d9ea1fb0ab48374df7fdf0219ac697430c8","ssdeep":"","tlshash":"ad5142a2f43741be3117e21969dc3eccbc75f1b2479a487c65aa132f878db815349883","first_seen":"2023-04-18T23:17:22Z","last_seen":"2026-08-01T10:25:17.837499Z","times_seen":134,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"thaicigar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"thaicigar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}