{"report_id":"958b9b2b-c55c-4cce-be79-add88c4344aa","version":0,"status":"done","tags":[],"date":"2026-08-31T05:21:49Z","url":{"schema":"http","addr":"www.sexvietnam.mobi/","fqdn":"www.sexvietnam.mobi","domain":"sexvietnam.mobi","tld":"mobi"},"ip":{"addr":"5.61.208.88","port":0,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"title":"Phim Sex Hay, Sex Mới, Clip Sex Việt Nhanh Chất Lượng Cao","dom":{"size":57468,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31231)","md5":"13ef3e7a811e7b4e24189a0b01ce64fa","sha1":"b0b53ecde3c53ea640618658d67e550880341d8b","sha256":"5ebe5830640b2e9ecab52331d809d28a6e40e3ed684c7418f374d5ce8caab4bb","sha512":"e92eddcc7911395bb0529b4d83a3d01c5a824bdbbee84313d39f516574caf6df5d1113b91149f5fb794188548ae89abe1869cd7553178b26562dc245a7ad3069","ssdeep":"1536:zsO9HqsQw0XHBBEAQWF5qJQ9NfPVxPZd6DPGBLcbr1RZ2zsL39KhEE52v0dqSxUj:z59HqGmzs2c0dBbMg/Gc3Deq+p","tlshash":"2143d6b390c4257f0b7197dc4125390eaa8b441e8f96cec5f5cd16e66fa3ea0b9212dc","dom_hash":"domhash52b043edb4b0213b3d0883d93cc46db4","first_seen":"2026-08-31T05:21:57.368632Z","last_seen":"2026-08-31T05:21:57.368632Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.sexvietnam.mobi/","fqdn":"www.sexvietnam.mobi","domain":"sexvietnam.mobi","tld":"mobi"},"ip":{"addr":"5.61.208.88","port":0,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T05:21:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"pricklyassociation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"r2.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":519537,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"phimheovn.net","ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":19,"received_data":249153,"sent_data":10505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.troubled-mother.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-08-06","domain_rank":0,"first_seen":"2026-08-28T06:57:28.095297Z","last_seen":"2026-08-28T06:57:28.095297Z","alert_count":0,"request_count":2,"received_data":209110,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.sexvietnam.mobi","ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T05:21:41.744381Z","last_seen":"2026-08-31T05:21:41.744381Z","alert_count":0,"request_count":1,"received_data":229,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"r2.haysexcdn.net","ip":{"addr":"172.67.73.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-05-28T05:09:26.421933Z","last_seen":"2026-07-26T07:42:09.384582Z","alert_count":1,"request_count":1,"received_data":6226202,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.haysexcdn.net","ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-25","domain_rank":0,"first_seen":"2026-06-25T11:14:00.599886Z","last_seen":"2026-07-21T11:33:48.152095Z","alert_count":20,"request_count":20,"received_data":308858,"sent_data":11925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cupbearergrowllurch.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-12","domain_rank":152791,"first_seen":"2025-06-02T04:56:19.306364Z","last_seen":"2026-08-23T03:08:07.199257Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pricklyassociation.com","ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-20","domain_rank":0,"first_seen":"2026-03-08T12:26:37.265704Z","last_seen":"2026-08-10T04:38:21.803906Z","alert_count":2,"request_count":2,"received_data":39151,"sent_data":1239,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pricklyassociation.com/bJX.VZsYdbGrlw0MYuWgcb/QeQm-9xuEZ/U/lAk/PYTVYZ4WOVTqk/wWMfD-khtANvj/g/5-O/TVABxJMGwu","fqdn":"pricklyassociation.com","domain":"pricklyassociation.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e1ad1f39e2f36c8a991e38e709ec2c3","sha1":"63afb0aa8e3e4330eda92032830747fd27046104","sha256":"fb6ea3f90976aa22036ac18a048b4c85c11f6e57557579aaa8cbaf689fe86756","sha512":"e4e9f630f87b22a6c5443582cfd06c2f7c58bd4454252105c275d22d7dd2bd62f8c535ff6a28c61105189c96ec7189818379dc9b84dce2ecc7d2ac5f63b46c66","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLl5Bhbpp4Gj+OiG82IA1gyvk:0lHg7JpoIvECJZSboEBkleZ2ZcLlBppw","tlshash":"6403c6c871c3642642eb507d713b7208b23a1465642db028bc7ac8e4fc69e9f8577bbd","size":37823,"data":"","first_seen":"2026-08-31T05:21:57.448064Z","last_seen":"2026-08-31T05:21:57.448064Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/jquery.min.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8e7cabd4d49dfaf0146678ee147dfc5","sha1":"b19b077cdc2cf89c66a644f0305ef4959f8472bc","sha256":"39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa","sha512":"f0b10d35b5e6cc8fc66e3f8ec179aa47a57841a500c34fe9a2b3f3cb5f9d42826a0b424f1de756a1ed030ce4cbdae1c0e575c9c88b0fb623071fcea95656b2e8","ssdeep":"1536:QmGY6OI1mwxklLhClYsosYKq8s1PS0dakYBF0fIZ5+ONtQCcq6RXu:Hgm1ClYsosU88PDf4wyN6RXu","tlshash":"d87309ddb2c6b06247a760b9407f950bf236194d384d8910f229e4e9bc74a4e827bf7d","size":78748,"data":"","first_seen":"2026-01-22T11:09:04.33239Z","last_seen":"2026-08-31T07:37:55.084902Z","times_seen":5656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/jquery.lazyload.min.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4af2e205ef4adead1af4051ca18846","sha1":"6bb3f15124ec1e41eb7bcd2d7d1fea9fb8bc751d","sha256":"cd70be0e1560f026889a913260aac58aa0e8d220eb7de7028d69c446a0445c1d","sha512":"d56d9642da1b234cdbbba53d5c1e3e2a58ed68b1bd13dee808367fd1d9ab8f5b6b4d5480e68cc6e79d2aa6bb6705ce38a5ba0bb7be298f910c489ef55b65ec29","ssdeep":"","tlshash":"c401498e79be70bf4463227547af07053e580003000acd223f6c93d25f685297fa2e8c","size":670,"data":"","first_seen":"2026-05-15T22:40:41.233723Z","last_seen":"2026-08-31T05:21:57.446599Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/main.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"088fbf8901eaafadf173e9be81d9d14c","sha1":"4ae6585bb0dbfbc27c920c24e0cfd380bee985e3","sha256":"4413275b2d95d0f9eddf7f27454f13c7b4ad7fabce321896e8b0fcb6d64219f5","sha512":"ef649f75f9fafa4ad85684c71eab4076d7d95acef4447a029a3fdabbd9e0d8e1f39b20118a2550898c24075bd73c3817a43c29e76ae0a8bf404ac268f040f7f5","ssdeep":"192:5MskjnuV8AWZyLYydbit3qrZADnZpd/RIZky41kI:mz6WZyLYyJcCZkz20","tlshash":"62d151057be6d57c03ba1f295a3b41e6db128f57a992c78fd010fe186c44ea3ab9d034","size":6251,"data":"","first_seen":"2026-03-29T14:27:16.268685Z","last_seen":"2026-08-31T05:21:57.420313Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cd5ce9d9b8df8e3cd398ba586edbf67","sha1":"112fff6c0be02595ac80f54ff36d771121a682da","sha256":"3c5a2c78f4ac474a0c2cf684b9c9324c78ff980bb6d34446bbdbab51f2c0c80f","sha512":"7f88c8b342343279a138267d37605cb73f4cd6efe82f4b6cec2d907e43345dc2dace414e5170e53211f937e7dd176cf153f59d3924d47a035e6767825585c79e","ssdeep":"","tlshash":"86e0c0cc0c5de63873a73037b4f48a4e7455201415317a51606ce24b7f04faa8d15bd5","size":370,"data":"","first_seen":"2026-06-15T10:11:39.691329Z","last_seen":"2026-08-31T05:21:57.450578Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"68dcfadfd1bf979b403d3f75b36aaa62","sha1":"15f99babb76d6782b140dc62bbb0debb3b088cf0","sha256":"4cada0cffdfe21b4d4925c4b5aac30cb913dbc37c0165726c3b3d99f909b0081","sha512":"2cda492634a7dd1791461552bccbc78f2fd5a29cfb95a0e353687b25ca00923778f74bf0cc12df7ae4a12d3b6104a4e1b088d4c56ccea851444e1abff1c297d5","ssdeep":"96:AbURVbDLhTzi0aN7e0dy4IL+hVzDc0R1bVDLVu1zHwz:QUboo76eIhu1Mz","tlshash":"aae1cf7bd4d8c39b42a1f288c022716e7c42312f2e21aacbf94d5981fb1e57518b71cd","size":6967,"data":"","first_seen":"2026-08-31T05:21:57.451846Z","last_seen":"2026-08-31T05:21:57.451846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"015667c9dd82e7383728455b7feb6bdb","sha1":"f368b8922f430acae03f8faa508543507d08b3eb","sha256":"74e8f2d40328457907dc8b07f7088f622b209b944e80be9ff76ecb7856a857c1","sha512":"d86d91836593bb4c34a5a17a650c6b0f37648ce6c0fb33699c26a0c0751be1afb11c853c0eec4b9383e6caa393179a70c6f5358d2bf7e61c4be5647642359f3f","ssdeep":"192:oSBaaMh04wIkLTyglqBN9IF9ELpZshqz8hKeTfUJwvul+fcL7QdDHNfGzcdJ:1BdVxIkLTygCeo7sYzkdTf0w5feQvOzy","tlshash":"5f220771a1926d6e87700cdd912d2454e9794b00388ece94f0bc9c8b3ce3e4596bae7d","size":10307,"data":"","first_seen":"2026-08-31T05:21:57.453084Z","last_seen":"2026-08-31T05:21:57.453084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ab1af4426c09610a964560b3b7d657","sha1":"fe7cecac2e2d198b8243313845f64b761f6f3feb","sha256":"576d7c3096e6e59f29734a5a484f4fab551be92b88d144a973e88cc5a5c4b4c3","sha512":"f6438d0e7cf729da9c3200393a80b7a4a51c2edb13f1d65903e5dd55b98840bfad9eec1fdcf3939ffcf0cc31de80e14e12e65523e6836c2873902497a9afa8c6","ssdeep":"","tlshash":"f7e07d9f585064470654919064073119f1c044fb5c056782fa0c884deb09376326570e","size":320,"data":"","first_seen":"2026-08-31T05:21:57.454645Z","last_seen":"2026-08-31T05:21:57.454645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc4848e35238e73662ff83c9c234fe8b","sha1":"14c3b1283ef365d739df3fc76744c81bc2ab3569","sha256":"ee7b83cd1b7f110473cb3283ac3adea7f40092b287a9bd268bcecd1a282b1eb7","sha512":"d73a42bfe7a8b6f5dae5742e0e9a04dd021c9c6c9a9ea031d2ee65cfdb334f57e261cbcf799561a39501f050252b9d5100c44df0f98217bd6def7572547e95e3","ssdeep":"","tlshash":"37c02b8c220a0cf241eb27408f3fb601f002321494d4a931090923045e21f07d794810","size":148,"data":"","first_seen":"2026-06-15T10:11:39.696694Z","last_seen":"2026-08-31T05:21:57.456766Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/media.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c0e39c5b76b506d225af81252699958","sha1":"e8c192e44adab0dd4c678a8886afbb939d1f9477","sha256":"312a41d182d00be239bc3bab821a1bdb9fc38e71c818d8688d114ddae4029a2b","sha512":"2402fc0b3b7748ccd0a5877cc795fa07f162807c00f2aa2833aa9ec878dc3729753499be110b1b2f689a5d3b3af2384db565dd87350ad128bcc70ea2dbf3f954","ssdeep":"","tlshash":"9c51f97b3d4b0a9614732032c7af9124b1f771d3d5e688007d1d92b9af608be843af61","size":2486,"data":"","first_seen":"2026-05-15T22:40:41.219639Z","last_seen":"2026-08-31T05:21:57.388539Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.troubled-mother.com/ecc874/6f691bfb1bb9.js","fqdn":"www.troubled-mother.com","domain":"troubled-mother.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac9a30bac74f06364d657b73ef56be0","sha1":"158c27b787c582d019c6417bc7dd21bfc8612a50","sha256":"aa7fcc4e01865107d63192dc54b503b381db2eb0b9727e567697b80a82dc9611","sha512":"4cf22055730354ddf94339cf3cbb7edcfe958d96a34b8e53b94175a02395bdf1430793adefe6f3d1a781e9b06f817c28d5ab6f587551dc245af3e773fcbd8ccc","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvqR:OijxEQq3P5Enne9zkWHLu","tlshash":"7aa33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","size":103681,"data":"","first_seen":"2026-08-28T06:00:59.919253Z","last_seen":"2026-08-31T07:35:16.329313Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QT6SWXKSXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d434eff310dd1773868fac1f707bfdd","sha1":"110a4914d782f3f06a24b4595fa74f9bc0af8a3b","sha256":"a69c37f1f8268563e7757a7d32714a7a35da9ffbcbf7ed5a823bf2cd64d19116","sha512":"ad0b3afc995247abb4c3aff39090bd503b95ec733ee2a3ddac6e92084eefb1a7a39279f963e6a5ae93559d0ffd2be4d03f51c4028398c19688913433948db186","ssdeep":"6144:Yr6NcAu4706mInkRDuccUQ/xEkY3UchxEvO/iQcVk5P0jSHA:Xi1BPIUHxEYiQcAM2HA","tlshash":"05b408ce73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4177f7c","size":518933,"data":"","first_seen":"2026-08-31T05:21:57.375607Z","last_seen":"2026-08-31T05:21:57.375607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/sung-suong-cung-hai-co-chau-gai-moi-lon-hang-cuc-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.846Z","timestamp":1788153672846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/sung-suong-cung-hai-co-chau-gai-moi-lon-hang-cuc-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13628\r\naccept-ranges: bytes\r\netag: \"de6d17b7e489f9c5800d14084455adb6\"\r\nlast-modified: Sun, 30 Aug 2026 01:46:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6431\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5fkUSUayyaU%2Bvk80SLIjOiyFnIpE%2F1%2BWfByeOXWxggXpiqonmn0RRxHnCvf1S5%2B7D7LSOB7Q865QXZT6gAGq0PRRZg6KjbZrXzpTlGsNwpzRl4JEJRGiHm96sHPIAciwnS3WA6VrJQ%3D%3D\"}]}\r\ncf-ray: a33997274db52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13628,"size_decoded":14403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de6d17b7e489f9c5800d14084455adb6","sha1":"8ad39949fc63832cdd49883027f2fc48d62431d6","sha256":"12d61119a9f5278ea7725b58fb794c135cfdc4bb0d37bf9aa229f5965cf41c1d","sha512":"538cf12cee64d88758e9ce7314a7539072d05c7ea7c440d125fe071b5a6f713dcbcc643d32c7e6d2ebfc0c827103039aabbe02d24bfe5941e1abd2ccc2feb1fc","ssdeep":"384:IPECDglyANbPAYZM8K88FqlTSBPCarVUgEqHTi1DMz4V:I85jNzlZM8K8l+Ckyg/HTi1DMz4V","tlshash":"1d52b054f62a23b096f423f4269c473b2969f78007f5c512f162186489bb22ceedbdcc","first_seen":"2026-08-31T05:21:57.371621Z","last_seen":"2026-08-31T05:21:57.371621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/anh-nhan-vien-don-nha-may-man-va-em-gai-hang-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.859Z","timestamp":1788153672859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/anh-nhan-vien-don-nha-may-man-va-em-gai-hang-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8968\r\naccept-ranges: bytes\r\netag: \"e542906a099ce1ea392922559419f0d6\"\r\nlast-modified: Sun, 30 Aug 2026 02:00:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6419\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvVc8ax1pfVI3IiSSdrR%2BR%2BRUXr2KNL8ncfBtHryfgORnGLMwumDYAK8UGeCt1OqeWf68hQeDzAM35IC9lUNuZ68JaoNkB1As4DTuohRvH4VbD8hkk8trgdf1%2BKkWq6%2B%2FVJUBON7kA%3D%3D\"}]}\r\ncf-ray: a33997276ddf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8968,"size_decoded":9744,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e542906a099ce1ea392922559419f0d6","sha1":"84609b8b2581694618d0f8f3e04e415a7ed47f81","sha256":"13b6707cad5d295b9e845cd6007dfb433fa4dfc54d51bf2d2c2dba67f45f4e22","sha512":"7bf1f8da0f719dcda36ed7db6c3e1ebf4f0d084127175802a47dc8d3387fe535fd8d500f46d4177949ca993df1b7078f665c2c34539f4da67b09a8282696a998","ssdeep":"192:nPID3QhwxaTTh1iBG4R5EmXLgiNcOXb7PECi7ei19UlCt:PoQhw0TTiBLEEJNzb7PEFai19UlCt","tlshash":"7d02be4e9bbc55820879bd89f2016f16724d6e5041388d8e40605fa1bbeba3b8e4f227","first_seen":"2026-08-31T05:21:57.373027Z","last_seen":"2026-08-31T05:21:57.373027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QT6SWXKSXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.448Z","timestamp":1788153672448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-QT6SWXKSXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\nexpires: Mon, 31 Aug 2026 05:21:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173574\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":518933,"size_decoded":174178,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"9d434eff310dd1773868fac1f707bfdd","sha1":"110a4914d782f3f06a24b4595fa74f9bc0af8a3b","sha256":"a69c37f1f8268563e7757a7d32714a7a35da9ffbcbf7ed5a823bf2cd64d19116","sha512":"ad0b3afc995247abb4c3aff39090bd503b95ec733ee2a3ddac6e92084eefb1a7a39279f963e6a5ae93559d0ffd2be4d03f51c4028398c19688913433948db186","ssdeep":"6144:Yr6NcAu4706mInkRDuccUQ/xEkY3UchxEvO/iQcVk5P0jSHA:Xi1BPIUHxEYiQcAM2HA","tlshash":"05b408ce73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4177f7c","first_seen":"2026-08-31T05:21:57.375607Z","last_seen":"2026-08-31T05:21:57.375607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":49,"receive":74,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-home.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.538Z","timestamp":1788153672538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-home.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 332\r\nlast-modified: Thu, 23 Jan 2025 17:16:08 GMT\r\netag: \"67927958-14c\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":931,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed738381fc485caf7bde191d64946b37","sha1":"0dcc63ec79503222e9b520ee15321e817b5dcffd","sha256":"6c84b34b2bcacbe789aab5257721ba426393f5db072811f1395b8c0f9cf26e70","sha512":"5f15d70bbfab28ce9f4dbb9dfeafe27a6d18b0f0ceab27dbf012d59a57de6f27f0070c734ff4d8164929916b43cc86911b88feb4a2187901c4c670fc2c4506a6","ssdeep":"","tlshash":"eae02638c2ccd12ee809d291d635f496694ef01592f942a4d698e3f4a321c95690093d","first_seen":"2023-07-22T00:03:03Z","last_seen":"2026-08-31T05:21:57.377074Z","times_seen":141,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-vn.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.544Z","timestamp":1788153672544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-vn.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12028\r\nlast-modified: Thu, 17 Jul 2025 14:02:20 GMT\r\netag: \"6879026c-2efc\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12028,"size_decoded":12630,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cd829ce9624b9b34639c6740c233757","sha1":"cf247649d1a834ae12bb69777ebd487534cdfe1a","sha256":"a4120e3ea01fddf687edbed5d92d6eed0e8204e00476f327fb7a0df4cd98ec1b","sha512":"a9197f31fa9383f68b8d0cee01554ffa79f77784f3f97d2c23a9cc116d2ca65f686b38604b669439766a4f6aa49b55596fb5368d236bcae63e5055786b29cc07","ssdeep":"192:4dZaKGrm5nar449l3xCMdLVHXeBlgiyHfwQRKtbvsNW5e4dDrLrKH:M8Ky44T/IlZIfwpNUNWA45rLrKH","tlshash":"8042eadcb3b885f0cb5d97d5dd6ab8a9321a14b77a54106c8a55bec1286339f8c0c8cf","first_seen":"2025-07-18T13:59:50.433488Z","last_seen":"2026-08-31T05:21:57.378706Z","times_seen":62,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-us.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.548Z","timestamp":1788153672548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-us.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 34404\r\nlast-modified: Thu, 17 Jul 2025 14:11:44 GMT\r\netag: \"687904a0-8664\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34404,"size_decoded":35006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b650e16e58d86658ddba729ede0c10e","sha1":"a0bee38b63dc23ba32e9c05ccfe8808cbdbb79f8","sha256":"556d365edd8515925e7fd246a23198f279b400e6c753d6c64ee528072a18ab21","sha512":"effef43a089deef579e998f04883cd4b74c23a0be0233fdc34fdf2b229f9367811e6a71f15d43740dd3b2b8ea8537018f02583b9e6d7542700b78cd24c147de2","ssdeep":"768:6deNSJFa3dp/BZ4cRfWJC+fytfg2fFHD5U8X3Vl0HporumuF:6UDdWJTSfg2Vy8X3jCnDF","tlshash":"b9f2e7d4779850f8e62e13d04ee65cad276f22fe3b81815c0f9e39901c3759e9b998c2","first_seen":"2025-07-18T13:59:50.389777Z","last_seen":"2026-08-31T05:21:57.380725Z","times_seen":62,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/can-tinh-trung-voi-co-gia-su-goi-cam-vo-cung-dam-dang.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.896Z","timestamp":1788153672896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/can-tinh-trung-voi-co-gia-su-goi-cam-vo-cung-dam-dang.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19578\r\naccept-ranges: bytes\r\netag: \"a004d1ef6e53640cd200e08cf93094e4\"\r\nlast-modified: Thu, 27 Aug 2026 02:01:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4720\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrFeUGUWNf4DKW8pTnvMavDj2sKr5oHCoSnvP4guYP2Ka5pTHixWQ5m2tY9HGEG7eo2ZZ%2BaQyEaBzxN50ehjJ5c538G2bSFjnLPt50zpYzvVwnNpW0gcASIEXcD3kSva%2Fm1Ss6p1TQ%3D%3D\"}]}\r\ncf-ray: a33997279e6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19578,"size_decoded":20349,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a004d1ef6e53640cd200e08cf93094e4","sha1":"f7cd8fcaa30b4bbfcd7bdeae4e91d52e1d79e163","sha256":"ce76b1bb684fba5c1d37cbfdb847bcc0d74df3d693f543d0843de44cde789eaf","sha512":"8b5b05d058fd4a60c62fd0398cc1d4b155cec8a6c8c6f11d55ceaebb014c49b69bdbcb3b24da48b780e73a054c773cceff0682e2e6b7fc312b624f8157a08c46","ssdeep":"384:wHRhp9XLi4UAEDlqoHgdw8wTM1JYQQLJa8uJ+4gFF+OO:OTp9XLs5ow8wTM1GJa/JWFYx","tlshash":"db92e1dc35ef8b569c7821a859c69af73931632637dcae17988673807a8cec72605809","first_seen":"2026-08-31T05:21:57.383102Z","last_seen":"2026-08-31T05:21:57.383102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-verify.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.541Z","timestamp":1788153672541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-verify.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 489\r\nlast-modified: Thu, 23 Jan 2025 17:16:20 GMT\r\netag: \"67927964-1e9\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":1088,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bbf57fa3c14e4051d55dfe7c345beaf","sha1":"00bec0791a9acba80a7c5946b580b5c3a0c8d057","sha256":"bb9eb963aa7f4a8af08a30199cac2bdd8bd2ed28c09c7e9a89a8f8072d58a9f4","sha512":"91556d1a175f1804a1e547e237a78107225103f392f6cd71e0431e470eaa24ff12ec2be4a338d57aa9de63e20d18a41086727a558bc0c33ca11e89fb5451b787","ssdeep":"","tlshash":"c0f027f35b9d5088538b47f16f14347a28aa707bdbd00395c2d74e210195940f06ab74","first_seen":"2023-05-09T06:21:39Z","last_seen":"2026-08-31T05:21:57.384726Z","times_seen":120,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/css/style.css","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.259Z","timestamp":1788153672259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/css/style.css HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 11:14:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8c2786-6805\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26629,"size_decoded":4696,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8713c0e7465880501d47c228e2d2a569","sha1":"b365c1b808dbf5473b8db122f8ba3d4a7ab47651","sha256":"ba2b27e48b8b732dffca72ba37f68fbc175439ce8f18472b842e697000a5f53b","sha512":"7549c96a96c5123527db042ed89dd535cc8052bfc4cd6d70fde47c4bcf27ba16d0d28e7446eea8e8a572ba26783e98a2def40e71930078ebf385ea25f834c1a7","ssdeep":"192:Mo/3ruG6WZChDDfWA/4dfYsuj867/LYOLEUo5RwR44ilZQZ0ZrGqA50PaiiCwUqh:EeYfdSfBbR0vcwHIg","tlshash":"06c20125db12254ab2339a786ff20356f756012387028a3d7fdd72a09fb91a89471fdc","first_seen":"2026-08-31T05:21:57.38683Z","last_seen":"2026-08-31T05:21:57.38683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/media.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.262Z","timestamp":1788153672262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/js/media.js HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 03 May 2026 08:04:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f701a3-9b9\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2489,"size_decoded":1814,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7c0e39c5b76b506d225af81252699958","sha1":"e8c192e44adab0dd4c678a8886afbb939d1f9477","sha256":"312a41d182d00be239bc3bab821a1bdb9fc38e71c818d8688d114ddae4029a2b","sha512":"2402fc0b3b7748ccd0a5877cc795fa07f162807c00f2aa2833aa9ec878dc3729753499be110b1b2f689a5d3b3af2384db565dd87350ad128bcc70ea2dbf3f954","ssdeep":"","tlshash":"9c51f97b3d4b0a9614732032c7af9124b1f771d3d5e688007d1d92b9af608be843af61","first_seen":"2026-05-15T22:40:41.219639Z","last_seen":"2026-08-31T05:21:57.388539Z","times_seen":30,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-hashtag.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.551Z","timestamp":1788153672551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-hashtag.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1620\r\nlast-modified: Thu, 23 Jan 2025 17:17:00 GMT\r\netag: \"6792798c-654\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1620,"size_decoded":2220,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a288424d92f7dc00fedb217e72432da","sha1":"8e0d82006c66ebfa6db0b0d474f04d410db23b9a","sha256":"4a76c4fa7a19224174bcc10a2ce34767cfb28dcb5e54d4c998170e9693cdbedf","sha512":"de5545aa7dfb6d09ce1887df4cb84e97131bd5521101d878932aba145f5c696dcb478dd8aa9028929a5085c32ea16ac4205c088ec753574d9da68cf4d008ec54","ssdeep":"","tlshash":"4731cffdb34c64c0ab16d7f2f5e2a44a7d5738fa1b80c55ae1d66de0882105d4b6e881","first_seen":"2023-05-09T06:21:38Z","last_seen":"2026-08-31T05:21:57.395035Z","times_seen":179,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/co-nhan-vien-cap-duoi-ga-dit-sep-trong-chuyen-cong-tac.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.878Z","timestamp":1788153672878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/co-nhan-vien-cap-duoi-ga-dit-sep-trong-chuyen-cong-tac.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30504\r\naccept-ranges: bytes\r\netag: \"fe2c4ac2e861aba6a03f8e735d676b83\"\r\nlast-modified: Sat, 29 Aug 2026 08:49:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4415\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSi6GTFllZ%2Ff%2B%2FtLJ6ugfcXF2lZZteSMnhkSGpFN8dYQPIFh8pRy11%2FgoW3FTVePqJpGmCgEb9akgaRsG0%2BG2opwExu9OdEhiHPVHgiJCFuxevwfga7hedCQBoVhp2JLhPD94%2FczKw%3D%3D\"}]}\r\ncf-ray: a33997278e262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30504,"size_decoded":31285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe2c4ac2e861aba6a03f8e735d676b83","sha1":"fb8f3b9f2348d81fadcfc7c622262f094c14c475","sha256":"e02ff2dc2634448f08366e90e1466264e100d33eef18384b5a5a3d343df02463","sha512":"373b1ef82d8d4dc85f2894b35ad4bf39a880bfa1d7d9a2858cb0250ad83e8ef85bc578f781926a6db247ab12eceb08bd62979bebcc70d0726678fdb19dfbd618","ssdeep":"768:g306zVw23QAO6hVyZdWSIfqtQs8GCZAgnaYt:g3p62+IfqtpUn7t","tlshash":"11d2f104197c49268d3a6244e98fa70799aee82352df778d41cdd9d0debc22d08b5cf6","first_seen":"2026-08-31T05:21:57.39693Z","last_seen":"2026-08-31T05:21:57.39693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/anh-trai-len-nhin-em-gai-thay-do-va-cai-ket-cuc-suong.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.892Z","timestamp":1788153672892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/anh-trai-len-nhin-em-gai-thay-do-va-cai-ket-cuc-suong.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15956\r\naccept-ranges: bytes\r\netag: \"64cb906d21b237f26fbbdbf1ddc8053b\"\r\nlast-modified: Fri, 28 Aug 2026 09:20:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DMQ%2F2cUNcVtWEd3XAoR%2FqEH8sxH1Rku%2FOO8Gp5EWe1EKHNAE145zRsaGm6Nj2qUpAHm0xkT6Hi6WG7AgK5K6eSfIFdZ1AgGoqH%2FfPd%2F5PI3Ee%2BI6x12hmGRS9iMhPp5VS8awPG6iA%3D%3D\"}]}\r\ncf-ray: a33997279e572efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15956,"size_decoded":16735,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"64cb906d21b237f26fbbdbf1ddc8053b","sha1":"888cd5587cad070b7279d6f49d5a333dca60cadd","sha256":"af374d5363c8601d70d56a76cf63ddde9b0ccd2cc2bcd41d500520583a05b309","sha512":"0214223e391fa5e0f2dabe173e42161adca84010aba9bfe9a1ec822fad8c920498f8cb94691efbc13047c70f43e80a4cea0e0a7cec3eb0c2bad97462eef9ae63","ssdeep":"384:vQXansmSnyi3hUFErJDljPYTIGfT8ErVwo5bdJbL+q:gaTkxUQpjPSIGfb5wo5bd1R","tlshash":"3262d08770224cd358a18d29caf15ee5d3e600955baf422da710b36bc3f449b2207cbb","first_seen":"2026-08-31T05:21:57.39896Z","last_seen":"2026-08-31T05:21:57.39896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/cuong-dam-em-dong-nghiep-xinh-dep-dang-chuan-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.893Z","timestamp":1788153672893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/cuong-dam-em-dong-nghiep-xinh-dep-dang-chuan-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11006\r\naccept-ranges: bytes\r\netag: \"926c7a9a235c7393b48d644489643a9f\"\r\nlast-modified: Fri, 28 Aug 2026 09:26:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTRFG3uLg4oef0FY%2Bx8PUlLKAPv45atIttWbL%2FHVktMFZNW5uMy1SKWg9AUBy08ZhGg%2BoNn4tviets2VscEuK8tVAXUVgwiIx4nMXo1zbYMk3Gg8j0QnABLDulkfvjj7vLX92iQkiQ%3D%3D\"}]}\r\ncf-ray: a33997279e5e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11006,"size_decoded":11779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"926c7a9a235c7393b48d644489643a9f","sha1":"ad6da7e4a83a5d470983915a89383dea43d0d0ef","sha256":"c4a8914f7f35e752971761b7d3e33889763d7831a9990c546931542a77fb7347","sha512":"90758ba2046dd1d803098986327b80eb6cfd2bb29e9262f89edf0299bb3710fc9be545fff0811d55ec5ec73d5b4129f9aa44ab939b621663fd3322282977a88f","ssdeep":"192:2JJuenSmMifCLYDppnMcwm0xaWGFtLaf7nUS3zq+eDXxmiIkQkRt:xe/MqCOJPdGaRLLO7nUS3O+eLxWb8t","tlshash":"8b32c0fbe3cc543147aac06fb539ed402e328c81a9b664e623231792b538d5ced00a5e","first_seen":"2026-08-31T05:21:57.400252Z","last_seen":"2026-08-31T05:21:57.400252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T05:21:10.843Z","timestamp":1788153670843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nx-fastcgi-cache: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59332,"size_decoded":13590,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33730), with CRLF, LF line terminators","md5":"91644f30bcd9b8bb7093ec9e414610b2","sha1":"a3cc8d205554d37ca78efee60854cec7cdcdca6c","sha256":"fdfec2433ba5cbd1976a9dee4da9fc9f3e5b24bba08026434101cd705140a081","sha512":"6a92741778a60557d338c651487641397493d7e7b64cda403d88cf0dd2e8c96e634ce092e9dad5e8209a9ede4ca2bed0e0a255c0aa8ac4f2055c2719ca8bac09","ssdeep":"1536:OYZsHqintImpZc8siUuOeNqqmj2qst8X8n9Y2v9dqSxBkHLHOMEDdV1QfzqB:OisHqPqqswc9dwOM+/GfzqB","tlshash":"eb43d8b391c4153f4b7197ec95253d1ea98b441f8f46cec8f48d22e66fa3e60782229d","first_seen":"2026-08-31T05:21:57.401427Z","last_seen":"2026-08-31T05:21:57.401427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":20,"connect":279,"send":0,"wait":537,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cupbearergrowllurch.com/on.js","fqdn":"cupbearergrowllurch.com","domain":"cupbearergrowllurch.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.444Z","timestamp":1788153672444,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: cupbearergrowllurch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T07:22:52.629271Z","times_seen":18198138,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-search.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.553Z","timestamp":1788153672553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-search.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 639\r\nlast-modified: Thu, 23 Jan 2025 17:17:08 GMT\r\netag: \"67927994-27f\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":1238,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e63cc9b20b1380afed3815a50e56656","sha1":"f96a5e3bc74ee4852e8f3db34d928a4ce781d88b","sha256":"86d43cb5b5293d7d48aba98a55012829f8dfe047d667285798dde8a647e93321","sha512":"cd7bb036357ce042f09a7d87db9f2bee90e38e6e38c0b2fc08b722c055433b91dc9565a91db1db3b5e4274809372dc334a9954c13ecfa8c1c933b7d589edee33","ssdeep":"","tlshash":"3cf07d2831ad4455a022c525b7f4ba465b6a508392c91168f0ce2535fb249ab26772a9","first_seen":"2025-04-09T03:19:48.931332Z","last_seen":"2026-08-31T05:21:57.403617Z","times_seen":175,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/chuyen-nghi-duong-sung-suong-cung-em-gai-hang-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.898Z","timestamp":1788153672898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/chuyen-nghi-duong-sung-suong-cung-em-gai-hang-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13854\r\naccept-ranges: bytes\r\netag: \"d015d8b5df6f1ee606e7d5d6a328aa9d\"\r\nlast-modified: Thu, 27 Aug 2026 02:00:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4718\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ap61VxME4xrmZDyvrEpKca4I5z1qTeL9dGd8MyA1h6F7BGkdQxwLESHTrTpg0ZXeOFJ1vKDwVaczaSryv%2Fi3xPZtMj99f7VUs00JkB0N6ep3xj5Ka3NzjRBcFw36Buut6V7aCW2M2g%3D%3D\"}]}\r\ncf-ray: a3399727ae722efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13854,"size_decoded":14623,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d015d8b5df6f1ee606e7d5d6a328aa9d","sha1":"23f2790ddf68566776eaf23c1e68c94a7d8b685d","sha256":"e05b03a5a0b43bb809e6f8e1e23e84f0764bcb6be6eda8431e72f96b711f56cd","sha512":"0030499e288665aadbadafee8ad09ad715eee30dedd60dd1d22f8a11aa3263dabe21cb3c7d386efbf1b1fb5df916fb17f809ba0e5e0a06436e231bac93979ea3","ssdeep":"384:d2mizyVBAEcFeZEbqtOsFGaBd8scRCpBcWq3c4y:d6eUEIeZCq4sR8VEXcw","tlshash":"8352e13323a4e804f8d0456f69a167fb1f785e1e9ed6017cbc70c4fc69c2621a92640e","first_seen":"2026-08-31T05:21:57.404905Z","last_seen":"2026-08-31T05:21:57.404905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.troubled-mother.com/ecc874/6f691bfb1bb9.js","fqdn":"www.troubled-mother.com","domain":"troubled-mother.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.775Z","timestamp":1788153672775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.troubled-mother.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 02:54:14 GMT","end":"Thu, 26 Nov 2026 02:54:13 GMT"},"fingerprint":{"sha1":"DA:B7:C6:B3:5D:D8:C3:2A:22:3B:2A:13:27:36:A4:37:DD:B4:08:A5","sha256":"2A:20:B1:E4:0F:51:BD:88:CC:1E:0D:D5:95:28:2D:58:82:3F:25:19:89:29:76:17:C3:ED:10:44:6F:D1:60:B9"}}},"request":{"raw":"GET /ecc874/6f691bfb1bb9.js HTTP/1.1\r\nHost: www.troubled-mother.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: text/plain\r\nOrigin: https://phimheovn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 30 Aug 2026 03:58:20 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnjOdmiruE8mn%2BzujJfEuHIwxducGZWUuETfoBmNHxaz1PnkzfoT9wI47kChfeTSdWhjKar6PVinmeD9IjZOGNsmaSIsZp2QZEeEbB0%2BnF8t2fRvbLtfuwe50ZNA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a330e05f3eda3e95-MUC\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Wed, 02 Sep 2026 05:21:13 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103681,"size_decoded":38188,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3ac9a30bac74f06364d657b73ef56be0","sha1":"158c27b787c582d019c6417bc7dd21bfc8612a50","sha256":"aa7fcc4e01865107d63192dc54b503b381db2eb0b9727e567697b80a82dc9611","sha512":"4cf22055730354ddf94339cf3cbb7edcfe958d96a34b8e53b94175a02395bdf1430793adefe6f3d1a781e9b06f817c28d5ab6f587551dc245af3e773fcbd8ccc","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvqR:OijxEQq3P5Enne9zkWHLu","tlshash":"7aa33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2026-08-28T06:00:59.919253Z","last_seen":"2026-08-31T07:35:16.329313Z","times_seen":20,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":2,"connect":20,"send":0,"wait":39,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.troubled-mother.com/ecc874/6f691bfb1bb9.js","fqdn":"www.troubled-mother.com","domain":"troubled-mother.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.777Z","timestamp":1788153672777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.troubled-mother.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 02:54:14 GMT","end":"Thu, 26 Nov 2026 02:54:13 GMT"},"fingerprint":{"sha1":"DA:B7:C6:B3:5D:D8:C3:2A:22:3B:2A:13:27:36:A4:37:DD:B4:08:A5","sha256":"2A:20:B1:E4:0F:51:BD:88:CC:1E:0D:D5:95:28:2D:58:82:3F:25:19:89:29:76:17:C3:ED:10:44:6F:D1:60:B9"}}},"request":{"raw":"GET /ecc874/6f691bfb1bb9.js HTTP/1.1\r\nHost: www.troubled-mother.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 30 Aug 2026 03:58:20 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnjOdmiruE8mn%2BzujJfEuHIwxducGZWUuETfoBmNHxaz1PnkzfoT9wI47kChfeTSdWhjKar6PVinmeD9IjZOGNsmaSIsZp2QZEeEbB0%2BnF8t2fRvbLtfuwe50ZNA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a330e05f3eda3e95-MUC\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Wed, 02 Sep 2026 05:21:12 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103681,"size_decoded":38188,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3ac9a30bac74f06364d657b73ef56be0","sha1":"158c27b787c582d019c6417bc7dd21bfc8612a50","sha256":"aa7fcc4e01865107d63192dc54b503b381db2eb0b9727e567697b80a82dc9611","sha512":"4cf22055730354ddf94339cf3cbb7edcfe958d96a34b8e53b94175a02395bdf1430793adefe6f3d1a781e9b06f817c28d5ab6f587551dc245af3e773fcbd8ccc","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvqR:OijxEQq3P5Enne9zkWHLu","tlshash":"7aa33361350b64fd2ad0c1e7eb6720886c295810e469cca1ecd1e7c7d6eb8e3429b5f7","first_seen":"2026-08-28T06:00:59.919253Z","last_seen":"2026-08-31T07:35:16.329313Z","times_seen":20,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":27,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexvietnam.mobi/","fqdn":"www.sexvietnam.mobi","domain":"sexvietnam.mobi","tld":"mobi"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T05:21:09.734Z","timestamp":1788153669734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexvietnam.mobi","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 07:43:17 GMT","end":"Fri, 27 Nov 2026 07:43:16 GMT"},"fingerprint":{"sha1":"FC:A1:A1:E5:DA:B3:C9:6B:09:FA:0E:61:3B:ED:AA:6E:7E:FA:8B:77","sha256":"13:5D:19:60:14:F5:89:85:84:C7:93:34:C2:50:68:A2:6A:81:1B:80:4F:0A:86:70:94:C0:82:19:43:2B:DC:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.sexvietnam.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 05:21:10 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://phimheovn.net/\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T07:22:52.629271Z","times_seen":18198138,"resource_available":true,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":6,"connect":267,"send":0,"wait":284,"receive":0,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/doggy-em-nguoi-yeu-cuc-phe-em-con-chu-dong-nhap.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.440Z","timestamp":1788153672440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/doggy-em-nguoi-yeu-cuc-phe-em-con-chu-dong-nhap.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13576\r\naccept-ranges: bytes\r\netag: \"4b5928d378419017701e75d4d18abd04\"\r\nlast-modified: Tue, 18 Aug 2026 08:21:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6419\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6mn4N1l6CkzUqHX%2F9Rvf9oSdTfyeWZDHwlS7mvkerqzm1Gdji23XAkIo5mtgWujjKvhPBt0Xyl22LJHnJNmXSxEIkMi6AEdWFWg2aianXknKZx4LqqqgXHFVE6p7WNHt7C7ypjamA%3D%3D\"}]}\r\ncf-ray: a3399724f8552efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13576,"size_decoded":14345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b5928d378419017701e75d4d18abd04","sha1":"c501253645343c43de5fe5e9d80a2069701e277e","sha256":"d08d8b12653882260de32ac3cad8cbfc38f0ada35c412e123c5d7c96729d3866","sha512":"a79316a773bce464d578975144873044ca905d9949ece192c41aa1926c347df46d04e7f651067e3f8aa2d4687367d926fee08bcc59302294708cf3c8717471bc","ssdeep":"192:CirArMU56NbvOWoenRK9q8Wvthn1JuFUvxsjceNCFchgaWW1q/4J/Jb7AkuS:CLrMUYNbWWfRuw18eJswswcdZ5JbaS","tlshash":"6652c07b93762b4edd5106449beb677c19a90c1f17ce33a4140f466322e4c9ea2318ef","first_seen":"2026-08-31T05:21:57.407727Z","last_seen":"2026-08-31T05:21:57.407727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":15,"connect":7,"send":0,"wait":27,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-japan.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.546Z","timestamp":1788153672546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-japan.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2017\r\nlast-modified: Sat, 01 Feb 2025 15:16:24 GMT\r\netag: \"679e3ac8-7e1\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":2617,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e99c24337865a4aa6adbfb14a570d07","sha1":"984387ea4dc8191567e4779ffc1ac630cbfba67c","sha256":"411b51732b505869308737d103643dc6ca2c4f6afd4ed335d0f06a75b74bc811","sha512":"bbadf1a695a799637d084e9429ab51b3514a8d3e7a6c9beb19be7b4f8b024875dcb421faca8d6d4332166cfc1dfa0de547a01031f9bdc5dbc6c6bf68fb4858ce","ssdeep":"","tlshash":"33416cc9578c6af7be126760de7ba801758d24fc53066b7d83989e72a60904e9610d23","first_seen":"2025-07-01T00:06:57.098599Z","last_seen":"2026-08-31T05:21:57.408985Z","times_seen":67,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-fire.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.550Z","timestamp":1788153672550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-fire.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 460\r\nlast-modified: Sat, 01 Feb 2025 15:16:48 GMT\r\netag: \"679e3ae0-1cc\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":460,"size_decoded":1059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de7ed17ea706061452256582b005ac18","sha1":"77427f6b47a48ffac17b521fe44fa99099729745","sha256":"dd8d2b66860c13e3dcf6b447689be505a4b2b3375542cf415d30f386f2e9a6b4","sha512":"3bba399c815bd19cdb8fc29b42938d46ffdfcec14f19abbbaef4dc8d83bfb8ff6498e4c87804ba90f5d75ffa1c3cbdef9927805eeba9c964cd2b0c34e14bb220","ssdeep":"","tlshash":"9ff05c39429c8928a9454720eb7db26502b9342d07dd407bd0a925b2d718c4aea1a599","first_seen":"2025-07-18T13:59:50.401208Z","last_seen":"2026-08-31T05:21:57.409768Z","times_seen":78,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/ban-tinh-day-lon-em-gai-xinh-deo-khau-trang-dam-duc.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.901Z","timestamp":1788153672901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/ban-tinh-day-lon-em-gai-xinh-deo-khau-trang-dam-duc.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13468\r\naccept-ranges: bytes\r\netag: \"7ef309e788f524197895d556b43c1e64\"\r\nlast-modified: Thu, 27 Aug 2026 02:12:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4718\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkjxCy4NqTaZMhEnp8v4AE0uxkAO7yjSMzxuMut2Qb6vS8CLB%2B%2FlDTwKZ0lyXN2DXPtl5TTsLmG9iBAgT8fbTkgUywkZ2ZDj59nl%2FblqnoLUV4uosdHlnwzt15SGfyuXRMnDueGCuQ%3D%3D\"}]}\r\ncf-ray: a3399727ae7b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13468,"size_decoded":14241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ef309e788f524197895d556b43c1e64","sha1":"4843b81d22c590b71153a9aae174c1a18ab1d62d","sha256":"53417ab680c39e03b0bcaa00000b1e7b35e6afe9389f5cf93edb230de7e77a03","sha512":"854959eb5570a1ad4f48fadc8dc80c2d3760cdc49328cb73e889ff6d7a1eab7faca531562b48659b63ed2731154b9416e73c04bbc8fa1a35b017096d1b5ed1ef","ssdeep":"384:uRfwRS6VWfnrklVgS8Y5mJlyeDjdIk8GhGo:uMCnrkZLgny8jdIcUo","tlshash":"9952d0b147c3637dbf8151162f86fd82f8885d428a2e224134544bff1f1b89eb70605d","first_seen":"2026-08-31T05:21:57.410843Z","last_seen":"2026-08-31T05:21:57.410843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-cn.png","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.545Z","timestamp":1788153672545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-cn.png HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 478\r\nlast-modified: Thu, 17 Jul 2025 11:38:56 GMT\r\netag: \"6878e0d0-1de\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":1073,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"3470c3c03115e06cf4d465b3642b3b2f","sha1":"b8b0086cc9adb190d65e49cac2ad0e21a1c9d5af","sha256":"90aabae90934e198bd74b11d8389655cbf8fa2a45d355423eabe374975353e02","sha512":"34617e5d4d0a5b3fd08c3c0529bd230b71f689252204e8e727e4a5dfaebc75eeb6f34937e1b5a5a1c16a1d33b295824879db3611478581248a181d3d74742206","ssdeep":"","tlshash":"ddf054d23b52d4746d6b6a1b26953241f47e103741b11c1328437034abd83c1e3822ea","first_seen":"2025-07-18T13:59:50.374096Z","last_seen":"2026-08-31T05:21:57.412564Z","times_seen":62,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/icon-hocsinh.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.549Z","timestamp":1788153672549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/icon-hocsinh.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/wp-content/themes/video3x/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 831\r\nlast-modified: Thu, 17 Jul 2025 11:44:48 GMT\r\netag: \"6878e230-33f\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":831,"size_decoded":1430,"mime_type":"image/svg+xml","magic":"SVG XML document","md5":"77202f7f59d10f8f56373bfb66bed14b","sha1":"5132a8db491168b7e838dfd4462c854f4b6ee985","sha256":"c0de32d937d3a55686969e99898cbe2e2e8b24b65c12ae2e575b00255fb51564","sha512":"892ff86ac249e5308a813280d3f93039d4234f6f74fbae4e0f1c9f717956b0f19fc7e1c18bb0b499d087d610ca58d301eff12abc8502c190625e6fc571c46190","ssdeep":"","tlshash":"9301efded3e44ceca507d362f3d03772405160a61e95f28994a7c1b8d14463c6c2fd9d","first_seen":"2026-04-05T22:35:59.177535Z","last_seen":"2026-08-31T05:21:57.414964Z","times_seen":38,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pricklyassociation.com/Yf2.xgphZiW_5k0lZmGnF-0pYqTr9sy_cumvlwkxP-TzgA4BZCD_MEyFMGWHE-xJMKGLNMk_MODPcQyRM-2TVUiVNWG_YYyZYaTbY-2dMeDfEg0_MiDjJkhlO-GnMo5p","fqdn":"pricklyassociation.com","domain":"pricklyassociation.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.780Z","timestamp":1788153672780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pricklyassociation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 17:53:34 GMT","end":"Sat, 31 Oct 2026 17:53:33 GMT"},"fingerprint":{"sha1":"84:5B:5B:31:F4:0B:76:EA:26:22:EA:16:36:FD:44:B1:A4:B0:75:75","sha256":"1B:8A:97:10:5F:83:20:1D:BE:9D:2A:15:E4:C8:86:5D:82:60:2F:80:25:23:84:4F:47:7D:43:02:DC:0F:26:72"}}},"request":{"raw":"POST /Yf2.xgphZiW_5k0lZmGnF-0pYqTr9sy_cumvlwkxP-TzgA4BZCD_MEyFMGWHE-xJMKGLNMk_MODPcQyRM-2TVUiVNWG_YYyZYaTbY-2dMeDfEg0_MiDjJkhlO-GnMo5p HTTP/1.1\r\nHost: pricklyassociation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 43\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://phimheovn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nCookie: uniqCookie=1e5e98151510e9ac61ea6ea65ef28eb5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"ref=https%3A%2F%2Fphimheovn.net%2F\u0026prevRef="}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T07:22:52.629271Z","times_seen":18198138,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"pricklyassociation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/anh-chang-buoi-cong-dit-hai-em-gai-hang-ngon-vu-dep.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.899Z","timestamp":1788153672899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/anh-chang-buoi-cong-dit-hai-em-gai-hang-ngon-vu-dep.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17634\r\naccept-ranges: bytes\r\netag: \"02c61ab577f15ac2e59ea320c07833a7\"\r\nlast-modified: Thu, 27 Aug 2026 02:06:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efFEcUzxJ%2Bt8F7JHM5ZtNJeP6ROlj%2F%2FgR5RA4OzKKQg29VkPFlevfM9x7a%2FWenJd1KHu4OpQtfKuUmROwG7hDEnd1Y4REon5MYJss1Nr29FBwqIWm4%2FlV88sfPLGc%2Fm9PkKKlKFVaw%3D%3D\"}]}\r\ncf-ray: a3399727ae782efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17634,"size_decoded":18413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02c61ab577f15ac2e59ea320c07833a7","sha1":"58829e79d02fd95b3bf0200fe605a33fe79c982b","sha256":"6e0845343f8a0ba333bab8db9ca07184bd16a1706236c66ccc5394616a38f5c0","sha512":"162331253d5176d0192131ddeea306738d943885439cddd73c9f482e870fc8fd9a1bb3cfa673fc234b0c417fe28efbb54ed5d34b453158d1e257cf72d3c43fc7","ssdeep":"384:Ay1a8DgdvswoUCnjUZsd8TClw+J7nmyMcG56jIgduw/uVDMC6XZNP/g/XTS69w:azCjLlJZ9Mb5Rhw/8DFaZNPI/XTU","tlshash":"8082c040985e359741b818563c769bef31689e48cb60f8a1d7fcb715278026efae3934","first_seen":"2026-08-31T05:21:57.41725Z","last_seen":"2026-08-31T05:21:57.41725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/main.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.447Z","timestamp":1788153672447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/js/main.js HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 23 Mar 2026 11:35:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c12568-186b\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6251,"size_decoded":2536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6251), with no line terminators","md5":"088fbf8901eaafadf173e9be81d9d14c","sha1":"4ae6585bb0dbfbc27c920c24e0cfd380bee985e3","sha256":"4413275b2d95d0f9eddf7f27454f13c7b4ad7fabce321896e8b0fcb6d64219f5","sha512":"ef649f75f9fafa4ad85684c71eab4076d7d95acef4447a029a3fdabbd9e0d8e1f39b20118a2550898c24075bd73c3817a43c29e76ae0a8bf404ac268f040f7f5","ssdeep":"192:5MskjnuV8AWZyLYydbit3qrZADnZpd/RIZky41kI:mz6WZyLYyJcCZkz20","tlshash":"62d151057be6d57c03ba1f295a3b41e6db128f57a992c78fd010fe186c44ea3ab9d034","first_seen":"2026-03-29T14:27:16.268685Z","last_seen":"2026-08-31T05:21:57.420313Z","times_seen":39,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/logo.png","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.454Z","timestamp":1788153672454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/logo.png HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 4946\r\nlast-modified: Mon, 24 Aug 2026 11:09:58 GMT\r\netag: \"6a8c2686-1352\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4946,"size_decoded":5543,"mime_type":"image/png","magic":"PNG image data, 378 x 54, 8-bit/color RGBA, non-interlaced","md5":"36d85bf4943aaa9a1e49dfd1c7e02cec","sha1":"9fbccc93c2a267a360a69caccbd1ca5c4598b133","sha256":"0ad428d5713adf19cd0403c162ece742f1d4a5dfbd0f8dc05117551a4844f966","sha512":"4a660d6737424d710b9895031d26f72f8ba4b0ddad9858f239c0e2c8c5382a6db93d7dc47714206a391a5077832caaaf3e1d4ed7dba360021dc2e1508a5d397f","ssdeep":"96:NMK2knmWIFHH3MNf3avHomHDUIgtjzP6TuT828o3wPYUIJyZlt//je4A5fFnJYtT:2kn5y7gjzPdA2v3wAU3lBjeV9mZ","tlshash":"6fa15cd45992b5d4de05fe441dd4ab43e33bebc49b805a01bce9d81704340fac5056ca","first_seen":"2026-08-31T05:21:57.421728Z","last_seen":"2026-08-31T05:21:57.421728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/choi-khong-bao-em-gai-moi-lon-vu-tron-hang-ngon-cuc-phe.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.849Z","timestamp":1788153672849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/choi-khong-bao-em-gai-moi-lon-vu-tron-hang-ngon-cuc-phe.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12430\r\naccept-ranges: bytes\r\netag: \"a1d563cf73e68cfea2810d34a0a74a24\"\r\nlast-modified: Sun, 30 Aug 2026 01:42:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6419\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSY6eUkoqmxHFU5VI0O6HNHcvx843HO2o%2B69rYyhweQnYGII8jm%2BqJ%2FYqSE%2BJ0w9LFBiBmTOv3M5j9ywadCxwusGDMqs0NIRM0BozXhGbHO6F%2Fo69jEIAGkUFQ%2BPx%2B76W%2F7Sl0PEPw%3D%3D\"}]}\r\ncf-ray: a33997275dbc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12430,"size_decoded":13215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a1d563cf73e68cfea2810d34a0a74a24","sha1":"a362500481d3b4ba226835a97e05eaff12894155","sha256":"8e12538824d42dc93ca47728fdb217dc651324e9b542993ca98c71ed52d016b9","sha512":"ae97e6031fc93a454364857e60ab10ecbea59ddaadeeb7cf005da8df3284ba4db02e1a6173a61a8e092f55a330687faad155aee63ab66074405780ec5e4a07ed","ssdeep":"384:1ak70OxtNduDO9LIZgaLZMQawnkMsafC8tERPNSxWB:Yw0UHuDaLIZVpFnklaK8qRVSxU","tlshash":"b142e09c50843029fccc61db6d2e727cbd25b65472658e099fe67dae20be00cbb0e0d8","first_seen":"2026-08-31T05:21:57.424578Z","last_seen":"2026-08-31T05:21:57.424578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/cap-doi-hoc-sinh-ru-nhau-hoc-nhom-nhung-dit-nhau-la-chinh.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.852Z","timestamp":1788153672852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/cap-doi-hoc-sinh-ru-nhau-hoc-nhom-nhung-dit-nhau-la-chinh.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18728\r\naccept-ranges: bytes\r\netag: \"9296458f40daba3fc0c467457b77a15d\"\r\nlast-modified: Sun, 30 Aug 2026 01:55:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6445\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7UUHMXdkGp1dB3W8O5PC4i7PfvrGoTAH32ZkTyxj96HLQRpllt%2F6VH8NMwvzcDbQCj45xT%2BzqGR4nFEHI9dbq%2BkHeoPmsjJEp%2FXDvMr7qh7MhO8dWLN9gUZhYHbK4VdxlHqsem3t5Q%3D%3D\"}]}\r\ncf-ray: a33997275dc82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18728,"size_decoded":19503,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9296458f40daba3fc0c467457b77a15d","sha1":"94d4269e264cb7adaae79eddfebe393bba04be50","sha256":"651d67c5776e39d6257e45c47652e8e847a3c664acd8a2d776560b29ad7346c6","sha512":"d105dff539486aa086bd847d95949071e879f3ccfa73cdd23475493e9bc1d4a3cf9cf4c6e42ea240582ebc5264f865bc2fd9e2dfde280b9fe96f2d1af4e3c127","ssdeep":"384:Pb3ryOnx+bp/Z1iFuThAqaKWkc+d6mgRhMSQlAyN:PbeQajTDajfptRl5Y","tlshash":"e482e12093ec799081d4e78dbc14ab76973718f11ee2e2b1ea2d76d42a5fec1c643b14","first_seen":"2026-08-31T05:21:57.425784Z","last_seen":"2026-08-31T05:21:57.425784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/anh-dam-sau-vao-lon-em-di-em-nung-qua-roi-anh-oi.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.876Z","timestamp":1788153672876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/anh-dam-sau-vao-lon-em-di-em-nung-qua-roi-anh-oi.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15212\r\naccept-ranges: bytes\r\netag: \"d1c48f5b584445b87fdccd36e78866ff\"\r\nlast-modified: Fri, 14 Aug 2026 04:18:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4214\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XS5pzrKhcmpqfgWQjQYj%2BopBQxCReXJHTp5l6%2BixlxPsYZbfbCrjImzfZVXUZzc92cgarsIoa4BgWTLbZVbKQlt%2BJ2fdUafk1eLXb6bcBikARx2JshYlJnAjhD5yfOGAVDRdHwgBw%3D%3D\"}]}\r\ncf-ray: a33997278e232efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15212,"size_decoded":15985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d1c48f5b584445b87fdccd36e78866ff","sha1":"306043520866c8ea3f6b7d612c4f7cb82ab127d2","sha256":"85a72bd08d90994a4b730e3cd2c9a75c4f66b3a5fa28eb7bf178f3507cf15efd","sha512":"2e56d6d515fe9dd25310124967e24e5ec831b8fdbe625ea87993c607df719cd205d25a0b183fbd518c00d4d7db25a458e0711a827e13481be1c764fb05697daf","ssdeep":"384:N+Ujx7UKODf2FbptisfbF7DxdS/eqI/jv4KRopiK:IUjxghCZNfbF7Vd8Cbv4KRoP","tlshash":"e462d061c9205aebec41e93a463f799dce12e46bf0f3f54e0c4da127850c883155fca1","first_seen":"2026-08-31T05:21:57.427735Z","last_seen":"2026-08-31T05:21:57.427735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/phang-co-em-gai-da-trang-nho-nhan-quyen-ru-cuc-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.886Z","timestamp":1788153672886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/phang-co-em-gai-da-trang-nho-nhan-quyen-ru-cuc-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7542\r\naccept-ranges: bytes\r\netag: \"db143f263035f1e6077db08401c5f310\"\r\nlast-modified: Sat, 29 Aug 2026 08:58:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1g4UeTSh%2FWWO4bvfWTv0fu68RPG4ObvLDWx%2FkPoZMXt6g857cEg3U60pDP%2Bl7%2Brmt8CjqlAAVUs%2F%2FNDK08o%2FAOgWVfam%2FND5yaoDkTyx4%2FTiDd305QXbmwabmbMDqOO8qD%2FG8dvYBg%3D%3D\"}]}\r\ncf-ray: a33997278e412efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7542,"size_decoded":8317,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db143f263035f1e6077db08401c5f310","sha1":"0a33006683e27f5b33647960754e8850a588249d","sha256":"cb759e833334cc2d9d3bcb1f2947b178f837515a67db0a86f146ed98ce9c3644","sha512":"9a24096368ec0fbac897cabcdc2453b24204f452582ef59a7fedec576730e6ca233167a73ebad73f8e788fd49a78bcbfecabeaaa0825a67f631cfff7d33b3e57","ssdeep":"192:naXvcTjSPL5BVjtiqzJMFmGNWQn31GpObRISEafgSA:aXvcTaL5roqzCmaRIOS","tlshash":"abf1bfb00c208e7c41b7851f722a3bd04f1d52e65a6af03953cec82a512659f239dcd7","first_seen":"2026-08-31T05:21:57.429194Z","last_seen":"2026-08-31T05:21:57.429194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/phang-em-sinh-vien-lam-them-o-dich-vu-spa-hang-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.889Z","timestamp":1788153672889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/phang-em-sinh-vien-lam-them-o-dich-vu-spa-hang-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18506\r\naccept-ranges: bytes\r\netag: \"8f41ef6cd8726905c07952ca27bf9dd2\"\r\nlast-modified: Fri, 28 Aug 2026 08:56:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ixH0a354mWqDewSbqBSJswFDm0RJxXch3WC5k%2B7IqpliHiy03thPydmJXQJrv5D9tv7MHQyi6GJK5hKX6Vk6k033KXDjvTXK4gbabgWZAtvyR4V7YCIjahzeKCtFCLnNRDCpMxT0g%3D%3D\"}]}\r\ncf-ray: a33997279e472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18506,"size_decoded":19275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f41ef6cd8726905c07952ca27bf9dd2","sha1":"f1953663fe03f4dd25527bb7da4a8326c3c08981","sha256":"f245a202300334781599ea38584cb0c690cc2e795274b919d0a00597f6c8cd3b","sha512":"57952d51a97f8b12aacf4e5dda244911122bf809695e7ef23f33eed2bd9a527232f60b0bff7a446d440a19c5655900fdff1035ef61f741e4d6f5782949130ed6","ssdeep":"384:D1QU3EYH556ZlEU4oxgwgW5Y4n4d8UAXmAxOLfzlGFC6Arjozj1SIMUhFQt:D18nEUVgwB5YF8UAmAILfzIhYjUh6","tlshash":"8882e092780e5e8cad3f631ac763b6b585975ed0c492d0c111b80723e226fb1e35cbca","first_seen":"2026-08-31T05:21:57.430732Z","last_seen":"2026-08-31T05:21:57.430732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/cap-vo-chong-tre-quay-lai-canh-dit-nhau-cuc-suong.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.895Z","timestamp":1788153672895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/cap-vo-chong-tre-quay-lai-canh-dit-nhau-cuc-suong.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13628\r\netag: \"0a387f53d83a344c7b0be94d4f3e4a33\"\r\nlast-modified: Thu, 13 Aug 2026 09:06:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4scd%2F7jlSsom26d3JiKMYqAsgeg%2F55EiOsTH2w9%2F782mE5zXFzToPMXa10mCfVFgx8%2Fw2JK1Ez55YKsGh99TRb%2Bw1zXbagdCSxRptfidUQ7qrMem5J1LsINlQLxA3CTiPt0g9Kuhw%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 4713\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a33997279e662efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13628,"size_decoded":14405,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a387f53d83a344c7b0be94d4f3e4a33","sha1":"260a6cc914d6a889849178b09e08a396a3828c21","sha256":"6663a645675080472d0e2f092c3a907f14deef6647e871e50eff19b539a7ac56","sha512":"91ee941bb8584e2131f17d1fb4ed05b34ef51e090dcdd3e4b2d689d5fada6db67bc149dfc096b2fd63b7169055863dee6ac27735e0fbadc5a40699fea9fcb0e3","ssdeep":"192:MnabLWwRX/nrpJpCFPocyOswH16jfOAJm2prvWgw0g6XOzPTn7X4/rdV2Gl:MamGXpOdHUf5ZvWgw0g6XoD7KpoG","tlshash":"f352c0c4e1f2088b20eba378b0ef913df871d516486aef7e0440dad8414967bb7b565e","first_seen":"2026-08-31T05:21:57.43259Z","last_seen":"2026-08-31T05:21:57.43259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/ong-sep-gia-dit-em-nhan-vien-cap-duoi-xinh-dep-hang-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.880Z","timestamp":1788153672880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/ong-sep-gia-dit-em-nhan-vien-cap-duoi-xinh-dep-hang-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15900\r\naccept-ranges: bytes\r\netag: \"8e01c7fa72d666dc7ef7e28324062764\"\r\nlast-modified: Sat, 29 Aug 2026 08:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4388\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6esUb2mpUsfDC7EI6Nyioqb7tdacd3DdLnH9vaGjjlCA2r45M%2FIPSaba0b2R2Z3czidn5J5ZQuMhJ%2BEs2rDbAXQL8277qzWWS4qdNiU5kJHFiqL1u%2BRu26%2FoU2KnxIGAeNerTQ13xQ%3D%3D\"}]}\r\ncf-ray: a33997278e2e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15900,"size_decoded":16675,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e01c7fa72d666dc7ef7e28324062764","sha1":"fa7b874479e48740714a6b02addee71fc78af2dd","sha256":"4d1989480d3b3058b5219604144c0c9df42e27a927e7106c54ec521d67fa85b8","sha512":"210f8515dc01793d5dd0439b7d05e1c65b97451b9bddf2ffbb48f07d2c80b79392b6c8b68aabcd6fc49e2ef587384b569c4d88b1558e8c794c26aa0818c361cc","ssdeep":"384:YLk3e1kXjDl28veIoVaQjrbTMWPauRX6VNS5N3XoD1ArHkZGQ:9SUjDlJvERrgduRqrS5p4mTO","tlshash":"9b62bfc59e69bbd75857edda3de83025aa510210323cf3a67826e08611e033eb679a06","first_seen":"2026-08-31T05:21:57.43404Z","last_seen":"2026-08-31T05:21:57.43404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/2-em-gai-hang-ngon-cham-soc-anh-trai-cac-bu-cuc-phe.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.884Z","timestamp":1788153672884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/2-em-gai-hang-ngon-cham-soc-anh-trai-cac-bu-cuc-phe.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11700\r\naccept-ranges: bytes\r\netag: \"c85776e8ca45dbfbc3827665ace341f6\"\r\nlast-modified: Sat, 29 Aug 2026 08:53:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4399\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDsYGaYdD5u4Xuj%2FxAJ1Q9BwCQBvr%2BHI49oR12FqrV%2FNgB5IwXe6JMHC%2FZ0TAEZIsYL6I1j0b5nDfmdOa2Of6COk6%2BaLENSFQK7UQucsVBw2wcCJezQxuZKNBKmjDBnvYYLfwHojQA%3D%3D\"}]}\r\ncf-ray: a33997278e382efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11700,"size_decoded":12477,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c85776e8ca45dbfbc3827665ace341f6","sha1":"1605e60729b5db0db6f5908ceae6c87c898bbd4b","sha256":"edca8773f833131c9686ec65ba842b555e461a01fbfe5b2a29281cc858faf0bf","sha512":"5129185c248d16259fde276e70403578fdcbc10f5f95c2e188dd5937a8ce9ab83f14e3e3d21ba34eda76e93b9c1d3c7bbf06958679d6c84a60effcd7c1a253e1","ssdeep":"192:zm30cUKCkBAc+AoEkG17JE4D98i+4bs0VWpKzuWn5WtS7ooRf2a9pmu:zFZkBR+FzGl+4DtbTcIs4f7L9","tlshash":"1732c014438da6c1e8947dbcf538c28d3bf63c15d49ae2d2ad1ebac2262002e1f551c5","first_seen":"2026-08-31T05:21:57.435575Z","last_seen":"2026-08-31T05:21:57.435575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/doggy-lut-can-em-nguoi-yeu-dit-bu-lon-hong-cuc-ngon.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.888Z","timestamp":1788153672888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/doggy-lut-can-em-nguoi-yeu-dit-bu-lon-hong-cuc-ngon.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11648\r\naccept-ranges: bytes\r\netag: \"3937ce3182bbf60d3cfa58c6c8536bca\"\r\nlast-modified: Thu, 13 Aug 2026 09:10:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4713\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je3MR3sB3Ki1kzX12lUJTL0GMne29rlJe8rsGjugbYfS9grF6t%2FW%2B7RFMMGmtOv5vlcgrCOjpbLyxVMsSPQeRoWiHj0fBGASLua%2FENJmUKpeYIzqoN6DfniM56rY2C8cDbcmcw3X2Q%3D%3D\"}]}\r\ncf-ray: a33997278e432efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11648,"size_decoded":12421,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3937ce3182bbf60d3cfa58c6c8536bca","sha1":"80361e34c27146f269f69c8ed215443379c4455d","sha256":"dd5f19899ff7daa1cd6a803d2216986163eab29ad7bf020adfb5c4334b754616","sha512":"35348d97866a65d577ce00da0db05d6be1d60adedcc173c93fb99aba06af762e862d0491d0de1eb8354bf0cd657099fccd57ff5b9bb83766bd9c1cc20cfea27e","ssdeep":"192:Ow+/mbb59v55tIXgt0j+ggZrjhzXqRaj/FUdnPc7z8Ueg3cr3ozNInpzwzZF:Ow+/mPv5jQ3gZrF3FUdnEMa3BzWzk7","tlshash":"6732b0a35f11db0ad150558bfb89e9c3fa04e9a3437f70c8f8e589d4301e19c83666b9","first_seen":"2026-08-31T05:21:57.43709Z","last_seen":"2026-08-31T05:21:57.43709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.haysexcdn.net/images/ru-ban-den-hiep-dam-nguoi-yeu-cu-hang-dep-cuc-suong.webp","fqdn":"storage.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"104.26.5.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.890Z","timestamp":1788153672890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"070184c8.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 11:29:23 GMT","end":"Sat, 21 Nov 2026 12:29:18 GMT"},"fingerprint":{"sha1":"C5:EC:38:F9:8B:D8:F1:50:14:8A:7A:5B:12:B6:25:53:1E:54:A5:88","sha256":"44:D5:51:FB:53:D3:57:8F:ED:39:EF:89:5F:21:21:A6:14:9A:E9:2C:0A:44:C9:19:89:A4:26:CC:09:47:E9:22"}}},"request":{"raw":"GET /images/ru-ban-den-hiep-dam-nguoi-yeu-cu-hang-dep-cuc-suong.webp HTTP/1.1\r\nHost: storage.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9894\r\naccept-ranges: bytes\r\netag: \"2908b62bdb727b1d844c9e9127a83e12\"\r\nlast-modified: Fri, 28 Aug 2026 08:59:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vasFL5OxCGZfahJUVSLyvA1Yt98Q32GtMIJ2tNbw%2BkF%2BNR4msWBUYvTH4D%2FqMhdvxbZ%2BWMUCVD8w0y1llk9gg5s11stht75LMZav10o1k4fpYz25cpTCeGZvtcUokv8ECkAgpvkAGg%3D%3D\"}]}\r\ncf-ray: a33997279e502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9894,"size_decoded":10668,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 410x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2908b62bdb727b1d844c9e9127a83e12","sha1":"2b5e99d219806536bc17829801a25f08ab61b418","sha256":"cec3c5fa94fd7bfc43dbdfe065ef4ec781d73653e0fdca66f458091c98d476c2","sha512":"623718701c28b223cd63a80dcef98d35644969ceafd0db4351cddbd7c82c094fd915569ed5b46024f2bbf035c3a9a5ee6df49715ac4ab79fe826e33af5e1da4c","ssdeep":"192:dlrkqfIPovInkeETEBM0EJm6ATuLeUZUFqiUd7ZfeejyU8vxQkYxDLsxZP74f/:7LfIP+a0Et6AS6EUM7bjyVvx5Ccxli","tlshash":"b812af4b8ec745e7d697891918af31bc822f180959d709316c2192572f12bbeb0be8b6","first_seen":"2026-08-31T05:21:57.43945Z","last_seen":"2026-08-31T05:21:57.43945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"storage.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/apple-touch-icon.png","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:13.259Z","timestamp":1788153673259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_WEMR17WZ7L=GS2.1.s1788153672$o1$g0$t1788153672$j60$l0$h0; _ga=GA1.1.1674325725.1788153673; _ga_QT6SWXKSXZ=GS2.1.s1788153672$o1$g0$t1788153672$j60$l0$h0; open_popup=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 4334\r\nlast-modified: Sun, 30 Aug 2026 09:26:06 GMT\r\netag: \"6a93f72e-10ee\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:13 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4334,"size_decoded":4931,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"5f61cf4f72693cb4d6cda882173437e5","sha1":"5ab169aab5d658924b618e99cc96acef882a1e24","sha256":"b2a9da205404999c564ffc05b8aadbee23d28c8129dfad41f59e974e2c4ae700","sha512":"e3e8b430d57759053c97df090d5bc9afbd8f0801b473680a72a3c99a050fe43b41ffa75fdd56971ecf5f505905adb45952575e61e55dcce37d78e8e145001ad7","ssdeep":"96:8i4tJz7GJKDHP7CXYF5he3dNujrQTvjg1rdCrFrO6:d4tJ7mo7sKHQE1Zc","tlshash":"0a918ec96349b50ec0e33d91e28aa5318c8537dc5bbce41f833c855bdd9a08043e4a1c","first_seen":"2026-08-31T05:21:57.442308Z","last_seen":"2026-08-31T05:21:57.442308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/images/favicon.svg","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:13.260Z","timestamp":1788153673260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/images/favicon.svg HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_WEMR17WZ7L=GS2.1.s1788153672$o1$g0$t1788153672$j60$l0$h0; _ga=GA1.1.1674325725.1788153673; _ga_QT6SWXKSXZ=GS2.1.s1788153672$o1$g0$t1788153672$j60$l0$h0; open_popup=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1132\r\nlast-modified: Tue, 21 Apr 2026 02:46:04 GMT\r\netag: \"69e6e4ec-46c\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:13 GMT\r\ncache-control: max-age=31536000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1132,"size_decoded":1732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"964738ac90f8a13072e1314928e1f05e","sha1":"5089a12fd235a0910857c7ebd5bfc3c7e52ac4b1","sha256":"0d2626b28d5993895f75ad924d5532c32a0e7db7c4b8e8b3fdb70fc3bd07efe5","sha512":"5ce0219f00b8c4d70e1f70e64e8fc729cd074ae9eff7ffb9b9347698e1f43966d0c828856910af66e470aa379d2e6b96e57136cbfd6f68c97fbf4d493f321274","ssdeep":"","tlshash":"c721eec393b850b1eb7c83e20490d8ee4727b0a27fc941acde5899854b2329e35682c6","first_seen":"2026-04-30T06:58:14.066722Z","last_seen":"2026-08-31T05:21:57.443964Z","times_seen":31,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/jquery.min.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.260Z","timestamp":1788153672260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/js/jquery.min.js HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 04:06:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd659-1339c\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":28183,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"a8e7cabd4d49dfaf0146678ee147dfc5","sha1":"b19b077cdc2cf89c66a644f0305ef4959f8472bc","sha256":"39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa","sha512":"f0b10d35b5e6cc8fc66e3f8ec179aa47a57841a500c34fe9a2b3f3cb5f9d42826a0b424f1de756a1ed030ce4cbdae1c0e575c9c88b0fb623071fcea95656b2e8","ssdeep":"1536:QmGY6OI1mwxklLhClYsosYKq8s1PS0dakYBF0fIZ5+ONtQCcq6RXu:Hgm1ClYsosU88PDf4wyN6RXu","tlshash":"d87309ddb2c6b06247a760b9407f950bf236194d384d8910f229e4e9bc74a4e827bf7d","first_seen":"2026-01-22T11:09:04.33239Z","last_seen":"2026-08-31T07:37:55.084902Z","times_seen":5656,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phimheovn.net/wp-content/themes/video3x/js/jquery.lazyload.min.js","fqdn":"phimheovn.net","domain":"phimheovn.net","tld":"net"},"ip":{"addr":"5.61.208.88","port":443,"asn":198193,"as":"Television por Cable Santa Pola, S.L.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.446Z","timestamp":1788153672446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phimheovn.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 02:47:44 GMT","end":"Sun, 29 Nov 2026 02:47:43 GMT"},"fingerprint":{"sha1":"89:20:02:EB:31:30:E4:E9:28:C3:EA:2E:6A:CB:5A:D6:54:10:E6:61","sha256":"AE:5A:A5:46:57:AA:83:6B:AA:8E:2D:F5:09:79:71:C8:4A:9D:E2:46:6C:49:F5:BE:72:CC:A5:37:71:99:A1:47"}}},"request":{"raw":"GET /wp-content/themes/video3x/js/jquery.lazyload.min.js HTTP/1.1\r\nHost: phimheovn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phimheovn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 03 May 2026 08:05:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f701b7-29e\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nexpires: Tue, 31 Aug 2027 05:21:12 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":925,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1b4af2e205ef4adead1af4051ca18846","sha1":"6bb3f15124ec1e41eb7bcd2d7d1fea9fb8bc751d","sha256":"cd70be0e1560f026889a913260aac58aa0e8d220eb7de7028d69c446a0445c1d","sha512":"d56d9642da1b234cdbbba53d5c1e3e2a58ed68b1bd13dee808367fd1d9ab8f5b6b4d5480e68cc6e79d2aa6bb6705ce38a5ba0bb7be298f910c489ef55b65ec29","ssdeep":"","tlshash":"c401498e79be70bf4463227547af07053e580003000acd223f6c93d25f685297fa2e8c","first_seen":"2026-05-15T22:40:41.233723Z","last_seen":"2026-08-31T05:21:57.446599Z","times_seen":46,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pricklyassociation.com/bJX.VZsYdbGrlw0MYuWgcb/QeQm-9xuEZ/U/lAk/PYTVYZ4WOVTqk/wWMfD-khtANvj/g/5-O/TVABxJMGwu","fqdn":"pricklyassociation.com","domain":"pricklyassociation.com","tld":"com"},"ip":{"addr":"88.85.69.211","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.575Z","timestamp":1788153672575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pricklyassociation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 17:53:34 GMT","end":"Sat, 31 Oct 2026 17:53:33 GMT"},"fingerprint":{"sha1":"84:5B:5B:31:F4:0B:76:EA:26:22:EA:16:36:FD:44:B1:A4:B0:75:75","sha256":"1B:8A:97:10:5F:83:20:1D:BE:9D:2A:15:E4:C8:86:5D:82:60:2F:80:25:23:84:4F:47:7D:43:02:DC:0F:26:72"}}},"request":{"raw":"GET /bJX.VZsYdbGrlw0MYuWgcb/QeQm-9xuEZ/U/lAk/PYTVYZ4WOVTqk/wWMfD-khtANvj/g/5-O/TVABxJMGwu HTTP/1.1\r\nHost: pricklyassociation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: application/javascript\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nlast-modified: Mon, 31 Aug 2026 05:21:12 GMT\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: https://phimheovn.net\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\nset-cookie: uniqCookie=1e5e98151510e9ac61ea6ea65ef28eb5; max-age=1790745672; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uniqCookie","value":"1e5e98151510e9ac61ea6ea65ef28eb5","quoted":false,"path":"/","max_age":1790745672,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"uniqCookie=1e5e98151510e9ac61ea6ea65ef28eb5; max-age=1790745672; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37823,"size_decoded":13101,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23392)","md5":"3e1ad1f39e2f36c8a991e38e709ec2c3","sha1":"63afb0aa8e3e4330eda92032830747fd27046104","sha256":"fb6ea3f90976aa22036ac18a048b4c85c11f6e57557579aaa8cbaf689fe86756","sha512":"e4e9f630f87b22a6c5443582cfd06c2f7c58bd4454252105c275d22d7dd2bd62f8c535ff6a28c61105189c96ec7189818379dc9b84dce2ecc7d2ac5f63b46c66","ssdeep":"768:0lwiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLl5Bhbpp4Gj+OiG82IA1gyvk:0lHg7JpoIvECJZSboEBkleZ2ZcLlBppw","tlshash":"6403c6c871c3642642eb507d713b7208b23a1465642db028bc7ac8e4fc69e9f8577bbd","first_seen":"2026-08-31T05:21:57.448064Z","last_seen":"2026-08-31T05:21:57.448064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":21,"connect":17,"send":0,"wait":64,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"pricklyassociation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r2.haysexcdn.net/uploads/banner-gif-sc88-400x400-69784d.webp","fqdn":"r2.haysexcdn.net","domain":"haysexcdn.net","tld":"net"},"ip":{"addr":"172.67.73.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phimheovn.net/","date":"2026-08-31T05:21:12.821Z","timestamp":1788153672821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haysexcdn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 08:28:29 GMT","end":"Mon, 19 Oct 2026 08:28:28 GMT"},"fingerprint":{"sha1":"CE:E4:17:58:4C:B9:E3:98:A3:AE:38:51:51:CA:66:E3:69:68:B7:49","sha256":"77:74:11:FB:D7:55:FD:2D:43:20:6A:E6:52:F2:C4:31:1A:0A:81:AB:2C:31:AB:02:8D:40:A3:0C:1F:61:E4:E2"}}},"request":{"raw":"GET /uploads/banner-gif-sc88-400x400-69784d.webp HTTP/1.1\r\nHost: r2.haysexcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phimheovn.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 05:21:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 09:50:24 GMT\r\netag: \"6a8eb6e0-5efd7c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V01NToMi53Z4R%2Fd2CAfz5eiUEJi4XlMnLYNEb9uZXw0oCXvpQ4rXItr2KTfdIUn8cEFANDsYREnKxuGBZ7PlvUshy0taYjSfUJIT024jPT%2BBNNdT85ukN4RQSk9Nw3g8jak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a33997274d262678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6225276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6225276,"size_decoded":6226202,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b7a59ac4092fb883c4bee25f7d93d6f","sha1":"d0f6bd388c48d9038f663e2a676edec9b88f5abc","sha256":"7baba1bc0dfee8628ce744d23d2c63ad7125c7dbd2ce90ffd4295d273eb93ba1","sha512":"6db37f99f1ddd4c91e0dba8b7a771988a562507620054d9ffe256f8c187e3d3e609de4c59a8b6c74853b3c2c29438b027f1dceeb75ab29bb17126712f7dac882","ssdeep":"24576:vZ5zkC4MyCA4JxS42xYwIPdtyoPWRrUWMFbHJM3qoD7u:HzJnNWYwILWRrU31we","tlshash":"6b2533892713f780b74162fc0ea12d66d29bea957db4c40e5c1d713ea2ba841737b8d8","first_seen":"2026-08-31T05:21:57.44937Z","last_seen":"2026-08-31T05:21:57.44937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":6,"connect":14,"send":0,"wait":14,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"r2.haysexcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}