{"report_id":"9a57e29a-bbee-4ea3-9e4b-c4f7f0119785","version":6,"status":"done","tags":[],"date":"2025-10-03T10:27:53Z","url":{"schema":"http","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"title":"Đọc Akugyaku no Black Maria - Chương 12 - Cả đội tập hợp ! Chúng ta có nhiệm vụ ! - Cổng Light Novel - Đọc Light Novel"},"submit":{"url":{"schema":"http","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T10:27:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":21}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-28T22:14:23.990054Z","alert_count":0,"request_count":2,"received_data":131516,"sent_data":1031,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-01T04:53:40.312929Z","alert_count":6,"request_count":2,"received_data":171926,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-09-29T02:27:40.268599Z","alert_count":1,"request_count":1,"received_data":2959,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-09-29T02:27:41.015895Z","alert_count":16,"request_count":8,"received_data":415357,"sent_data":3673,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.hako.vn","ip":{"addr":"104.21.18.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-03T03:16:05.99154Z","last_seen":"2025-09-03T03:16:05.99154Z","alert_count":0,"request_count":2,"received_data":245554,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-09-29T02:27:40.295066Z","alert_count":24,"request_count":8,"received_data":12269,"sent_data":7857,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-01T11:21:03.813992Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.71.252.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-09-28T22:30:31.748184Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":2,"received_data":36058,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-28T22:11:36.689828Z","alert_count":0,"request_count":2,"received_data":694698,"sent_data":877,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i2.hako.vip","ip":{"addr":"172.67.191.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-03","domain_rank":0,"first_seen":"2025-09-03T03:16:06.000448Z","last_seen":"2025-09-03T03:16:06.000448Z","alert_count":0,"request_count":2,"received_data":245544,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1.bp.blogspot.com","ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":115961,"first_seen":"2012-05-21T13:44:19Z","last_seen":"2025-09-29T00:14:11.729019Z","alert_count":0,"request_count":1,"received_data":133935,"sent_data":514,"comment":"","tags":null,"fingerprints":null},{"fqdn":"docln.top","ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":1077378,"sent_data":17386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"bugscrawled.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":891501,"first_seen":"2025-01-19T06:33:20.439278Z","last_seen":"2025-09-25T20:31:21.235769Z","alert_count":3,"request_count":1,"received_data":99442,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-01T00:47:42.887723Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-09-28T22:47:07.461516Z","alert_count":6,"request_count":2,"received_data":77705,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"docln.top/scripts/plugins.js?id=b612d946b32459430eed3066ed15adf2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b612d946b32459430eed3066ed15adf2","sha1":"f9cc3cdaa65e330a92f88089ecfbcfda145072e0","sha256":"d5a1f112ec426a3fcb16e8273c831524f192e59372445a2337aa204b46a9a673","sha512":"5542b2aacd1adf60d12c6307df9f3f270d614d3a345a3857c20e264e194af77935786cc05f30d8ad093425c3a2b4225c71fbe199776f6ba3b31c5bc4768da8c9","ssdeep":"3072:c8QSFTFcxqJHQJLDx1QultSzWwV3rz2AdVKY88YMm:/Fg1JLDxOultSzH3raAdoj8YV","tlshash":"07043acd72c5b07247a761ba407f510ab2376959a80ec410f129f8e87c78e9e523be7d","size":183249,"data":"","first_seen":"2024-06-09T13:10:02Z","last_seen":"2026-02-20T09:25:33.854091Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"10580ad0bc3ea7ac43d556702a16299f","sha1":"f84fe31960c098db1f541e63327043a2e864cb1f","sha256":"fc4d427083f4ce04bdfef5f0f7777887673c4ea791e332102df4f232175b0035","sha512":"da1f9fda5762332ac24402b8b25cdbe1fb537e6bb38bcd9553025c427ceaf826991f95ada669dcccdc893e1fa60fc1e5c892ab88f6e5c018d20a90903f065a8a","ssdeep":"","tlshash":"c7b09bc458c75900c2173591c035543761341661917e4465173de3949533116e15cc9d","size":128,"data":"","first_seen":"2023-04-12T18:09:08Z","last_seen":"2026-04-04T17:27:35.351277Z","times_seen":5469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f4feb849b1d98b93a48ecaf3666a5d6c","sha1":"7f74bc64e1d8454df4ee84db8e4129b8f0378b09","sha256":"55b92e1ffd8e18aedb7a91ee4aa5210b1bbe22b3f2994a374e2a01841a8f3787","sha512":"2ef24c8dae8f2bfb5a316ebea46e6dd0c62942dc16a3da8e4ab2097c4b56b7cf6e1543cd6cc8eb968f53a7c934271f3b8f2e77b185e64855d405f236abbfa924","ssdeep":"","tlshash":"f4c0809558c70d14c1033595c136507f33353621d47e9564573dd350a53711af56cded","size":191,"data":"","first_seen":"2025-08-31T20:54:43.339772Z","last_seen":"2025-10-03T10:28:04.81948Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ee793f046235eac36f0e73d9a01213d5","sha1":"e5a9641edd175da21bbe273be6433751b89ca186","sha256":"e415237bc7214a50b044f08500615b9f7a02d92c588e93988224a8f05b8af864","sha512":"e102b71596a51de031989699a00483ae8c77275ae704fad0de3032cf2b092115e459cd537bad5c1bb4ab6973bde8ff87bb5c66adfdbf9996523fef7a7db20608","ssdeep":"","tlshash":"7db092d458c65a00c3233991c03a953b723826a191be88a96a3de3a4993311ae15ccae","size":126,"data":"","first_seen":"2023-04-12T21:12:17Z","last_seen":"2026-04-04T18:07:17.297774Z","times_seen":5565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-96XMLJKYVT\u0026cx=c\u0026gtm=4e5a11","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd5429fc68f905a1b53377169080d027","sha1":"9d052ef24a8798910d79b2611af8bac11a56b9bb","sha256":"41b69b3fcdcc21fd3d0074b686173f8d18e89ba9d9c58af5d93dbddde93f9f7d","sha512":"d30ab3566d5728e23e66e6da822f64a65665be56e5462d4eb58f5318e301747256951e632b2bc086ed33317a7bfe64e6d13e4dbd3667b00f34bc81c4b1b44e07","ssdeep":"6144:/B9ZTP5DyYvRC1cZwtgk6dSLd6gyP1X+6Rcd:JnbdtvIcZwhRd","tlshash":"fa840ace73c674665396e478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":406265,"data":"","first_seen":"2025-10-03T10:28:04.807579Z","last_seen":"2025-10-03T10:28:04.807579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T17:41:38.127382Z","times_seen":10392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9161263f7df89e4cba758f98135b215e","sha1":"08e4b5c99a228d5fb837ebc0eebe8b0affae3497","sha256":"2da315b9f7d70f0cc7347a0b9d4c804ab69dedd43076be7a0eba83ffb7bacbc6","sha512":"fa4a6e63db8fa7db88eebdbd7171823cd876ba99a27f75f9084890d40c26041d7b350dac168bdf053259467db34d30e908c9757360de45fa54e617fede684fbc","ssdeep":"384:GbsjXR+XLiii2iqihiri3iRiFiPiRIGLRmOArt6flVYZHUcCcFYZHOYZHfmqadyV:RzR2uLHToOyY0KRI0RmOArc3WXWuWuq5","tlshash":"97923008047ed820c506702e217e2557b7250abb8d66bbd87f6d52481f8ddaf79b223f","size":19569,"data":"","first_seen":"2025-10-03T10:28:04.822248Z","last_seen":"2025-10-03T10:28:04.822248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e931a8ca13e920f18e1da8de98c73aa4","sha1":"1ab64b56ed5e3451b8a40ee29a5f55a7002d1064","sha256":"cc38ad2eafe0bc2a6c9e0e3fd3d676f6fd47c2a362c4150f92c55d32d7a93073","sha512":"cdcde3eec69376e4682223b7ed81a594ffc1900ec7262e0a2202768586458a6acb335768f99d41a708047082286f1e8c0769109185ddf293d5a166058e3a82bd","ssdeep":"","tlshash":"86c08c88210b0c7292eb6f010f2fe204b016222395e1c930391f73045f21e17d784808","size":179,"data":"","first_seen":"2024-06-09T13:10:02Z","last_seen":"2026-02-20T09:25:33.862663Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/scripts/app.js?id=a5a24eca66adcfc75cc0b2f62e2611db","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfa835fb8149aaf4e048d87af37a682c","sha1":"e3190fb90ee99b319a2b7cab76c2438e0a95f7df","sha256":"78ad56ef48de89d67c2526f674d29ff39474a06202c7e4598b22a4b0f83078ce","sha512":"9dedfdb93012c5bf8e8ec6665a67637192794d32bbbf3f4aa710610561e194b1dde242a4dc8bc82ae838e7436221d397948c56b8f3c7bb1764e94ee96901898c","ssdeep":"768:05CYh3v/czqxX426nAE7VT9qyTHjnGUMOOENT2gY:IbaTbHidJENqgY","tlshash":"d1d2d84db2d6b17603f7703a282f2602a2326e29d8058546e16ed4e51dbce5a3373f7d","size":30357,"data":"","first_seen":"2025-08-31T20:54:43.283397Z","last_seen":"2026-01-20T06:21:11.97899Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T17:43:04.719817Z","times_seen":292321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6cb27829dc176030fd8d623e79e0b771","sha1":"83eb57d69de8b51185e99cf1b47e89157947a25b","sha256":"65bbe50821838189cd2235295bdcfb48ce2a4591132192a7d90afa1c478d6a98","sha512":"d984e26d1b8ccf765d26ea600b5fe70d80743a43355a85c769d8479e0c51e1ba2e9af406ab3e32cfaecab5457989b411fea7564986d13bab68afdb5bd15d4ac9","ssdeep":"","tlshash":"5dc022c488ca0800c21330a8e02a403721301622827e04b68a3ca364883311ae26ccaf","size":191,"data":"","first_seen":"2025-08-31T20:54:43.317099Z","last_seen":"2025-10-03T10:28:04.825097Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e94a4a2705cce88cb19e7da9bc98289c","sha1":"21bb499783da8440d1ee6336072b119617a70303","sha256":"c1a7f2fac0d7e462343c6b5e6a74fb9193d503124f9ea1f8d7777768e5dbe9f9","sha512":"c39c54023a0321f64ef53311fb1018e3ea16a5ed7e792b22955884ede417e204bde02e4200debf512d2fc42214318f912efa77a12b1a2c40f433aeade33bd6e8","ssdeep":"","tlshash":"fdc09bc458c76b10c7533595d039983b733456a591bd4465263ea3589933116d16cc9d","size":139,"data":"","first_seen":"2024-06-09T13:10:02Z","last_seen":"2026-02-20T09:25:33.873305Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01a4ecba1471b8db8c218a2d07b077ee","sha1":"eeae26cba53413392c6fb29f94a1d6874919be06","sha256":"7155486d3c2a795d1cc6234dcbcc877020ef5b4b352adbc7a13f5829c6b9db4c","sha512":"7310167c35148f35578a5c05db24aeac5fbdcf7aedf910910c0e0befcbe09895b8159d415ef52278b9aa8fa66ee6c437506c4ccb5ab3d26b8ddbc55508a8d5a5","ssdeep":"3072:gYwyP99xeip3tTv183sIWSiF6DPRNS4n+QxrA10Jfs9YcAo+:Pwy1nm8INUSpNS4n+QxjfZ","tlshash":"1ae308e9729ab17283ef117650bf420af3396884144f4028b62dd8ce3d3999951f7f7a","size":147400,"data":"","first_seen":"2025-04-16T13:13:48.08995Z","last_seen":"2026-04-04T18:07:17.111713Z","times_seen":1851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49e6ddc801a020b9acd642f0575b6e25","sha1":"d2e068a85ecb039664e82569a28d815a2ea1bac8","sha256":"e0495d3c44e7c535ff083029f6b8e814c38afea18c7728462859250ee37e8387","sha512":"f9f88fa96cc8b831334082fa2fbece237c13fcd595a23172d08037617d475037cb0d7f9f6159f9ed596c93f92d0119b07f73470c78fad8e73f7528ec5a60c350","ssdeep":"","tlshash":"7ec08cb68cd531401c493110863ce322049011238810c247340ce0a00f82301a418ac8","size":145,"data":"","first_seen":"2025-10-03T10:28:04.82826Z","last_seen":"2025-10-03T10:28:04.82826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/sandbox%20eval%20code","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T17:46:02.425893Z","times_seen":772502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T17:46:02.480075Z","times_seen":770952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"33bf03d8d7e7582471a6f463f5c48497","sha1":"6a933147cac0fe4bebf61759d907681bcb052226","sha256":"b3c9748db1b16c4d98a896997ccac45ed452f3f58215022243721f832e8b3f76","sha512":"6ff9e492ac3539d1dbec966ba073b520de88ca14cd7c160a3f5eac44083242e9da5cca9ce7736dab185c8de226b611e1f9203f628187bfa7744e028a7947c6a6","ssdeep":"","tlshash":"b4c02bc408c36f10c3133481e03d543b723412a080bd8476263ea358c633106d13cc9d","size":144,"data":"","first_seen":"2023-07-09T01:36:22Z","last_seen":"2026-03-17T07:40:41.301121Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"8dc622f8c7c29b31076e3632ca93ed43","sha1":"d7eb13d6c666cb7f82a8b582d6a2a6d6cdbd8ea3","sha256":"c3b41d0a76ca2d843c5bc6ace2b9712a0c56bbaa237d818cb99c14f4d7512626","sha512":"83db011e829f95cea189955fef66862df42bb1256d218d03f8bf325640ce00d2dc80a4be1a2312e0e8c825fcf7be0c3d3ed33479ec0767631b8300d0341e11c9","ssdeep":"","tlshash":"40c02bc018c77f10c7033580d039443b333812a090bd4466273ea3588433106f13cc9d","size":143,"data":"","first_seen":"2024-06-09T13:10:02Z","last_seen":"2026-02-20T09:25:33.871048Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bugscrawled.com/d5/6b/4b/d56b4bd6c3d2c1e161c4ab3c78c27670.js","fqdn":"bugscrawled.com","domain":"bugscrawled.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b8e41f5e5bc58d019652c0d1b4d683","sha1":"b4a8bdbe633ef43a63af98417a8e06155312f1bf","sha256":"2f871d62bfea3389328343801482707b3ad67ea66ac2bfaa54989a75fcefe8bf","sha512":"8f6616a0f595aa0a42b789ab7725d5bdf0c8b8331e2da2a7461e4d76255bf4b408a131b2b5e8a80a6c2bf7299f64c0e428629d2da309935503ef2160031a4516","ssdeep":"1536:YD5oAnYHPQztEx0oO9imwpmx+FxeCUz4uy5aP6GJtSvMjHISMho9gGg39gysYc4/:o6ZoOW9fkUT5AMsSYo9YTJcSYKX","tlshash":"d3a3ea88bfb1f06e23625477123f900be69e0e41649cda7ce513f8a52f9871bd07d5a8","size":98483,"data":"","first_seen":"2025-10-03T10:28:04.7755Z","last_seen":"2025-10-03T10:28:04.7755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac03859c0862eedef8369ea734d465e1","sha1":"233c32cdc801ae0ec06eb0fd5839cac8074212c7","sha256":"14ff951f4a3a75b99378bb2102853bb9346a4a4775d4d9a8e96fe3a894ddac4c","sha512":"26d2293678f4639556c0b332feba08c7b167ddcfd31e69ab9754194705051d80d2c6e1a154ab57c696b06c4a0411566deba194134f20375253243e24fcad6d31","ssdeep":"192:uXOmxAlyuOUwMiuR5/UiEh32ZIHdYYz5T4:ajSSMw12YdT5T4","tlshash":"bae10129b8e311959077217e2babf000ba67240b4485de54b85ccbe84fca52897a9b79","size":6991,"data":"","first_seen":"2025-10-03T10:28:04.833823Z","last_seen":"2025-10-03T10:28:04.833823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/scripts/service-manager.js?r=4","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d40878f40a10a3cf0140e5884732958a","sha1":"565b1babadcde9846e75c826e85db94b6c9a1e4a","sha256":"f3cef82979441fb766b88700b40e4e88088e9c87113b6e8a486451c3fba89e59","sha512":"2797195894df8cf88839c8d6d380f07b44ac77bb916521ddb68986232abf3ddc5d7264292bb5bc47fc4d38f836a0183d830746a2cf6d8188a196e8450f01c7c8","ssdeep":"192:Y+0+wkRtGysTcaeDojLA9ah1Ul632yDi865fFsFS037:g+Hvs5","tlshash":"3b32f1961ce3243155a7b0394feb800929794a132094ee107fdd4744afc677ccbebaae","size":11625,"data":"","first_seen":"2025-09-25T03:00:46.120763Z","last_seen":"2026-02-20T09:25:33.841017Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-34864968-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"249f419bdee6bbbb978233426a82a6f3","sha1":"5e3b5b442e27cd1b3157dca3818c784fd99d1912","sha256":"1ccaa4ddf5f9d0f1a75f23e9c0a54ce28598df8fd8e939b96af5fda0327c5c11","sha512":"487e7728e4fc10c15a72212d4c3fbcfa9c5ede13166f6c8e0ca655baec0bd6dcc86abf4af152bd98b20e6bd9e155614461e1adf6772b79f5bf1299559bd2b0d1","ssdeep":"3072:S0rV2o5qmTavsD0GIOU3Ty9durXx9COvCVf+cvXI6Egk6dSLd6I/EEF9TFf:fZTkDyYvRCLwvgk6dSLd6gJTFf","tlshash":"3d5408ccb7dab46283a36478503f014bb27b69d1f84cc894e182d9d52e74aa94277f7c","size":287245,"data":"","first_seen":"2025-10-03T10:28:04.780022Z","last_seen":"2025-10-03T10:28:04.780022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/09/62/43/096243c593fed93985c51808d117044f.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a06c144cec434ebce3ad60c39f9f3415","sha1":"72e9aab905e964fb5cc75460422b4ae5bd690af4","sha256":"91a0092af638e682f6b01c8d1700fc4c3d960b85b84e1c85ca91f8e3245792d6","sha512":"a5d236947c5a3351ba9e780cdf07a86955919a275802f0877e47611978805d0e777fc524bb87e2df1b9f4c0e5ca88f7ad5b0ce2711c59be7e0ab39446f6f9bff","ssdeep":"768:YpCxicwKzukjCm/hYE4JoYC3ouzBcXAnwrHpSFXcdDqxv1l2qo0uw7T3SPGw6RX2:YppUCQ37bwT0Rcd+9keSPj03W","tlshash":"d773ea4c3f95f1ad43a26073222f941bf12a1d51b06cf8c8d253e8bc6eb9769b536b14","size":76320,"data":"","first_seen":"2025-10-03T10:28:04.797826Z","last_seen":"2025-10-03T10:28:04.797826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"docln.top/css/tailwind.css?id=cf28c88adfbd0c7673a7244a32e9f917","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /css/tailwind.css?id=cf28c88adfbd0c7673a7244a32e9f917 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 16:22:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qu03i8OfElQQRt8sQ11LC7S7THxGVjHJ1Sn8IFlTbWHt4GBJ%2F7WApFhfZ2kx8b3ZxRsBF9jff%2BQTUi7DFbMVj2IypigmGms%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68bf02b1-a8ef\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf5b4d1d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43246)","md5":"cf28c88adfbd0c7673a7244a32e9f917","sha1":"7c20da337ddff157be49fa1f9363306fd4460f74","sha256":"4da8c5a2d308424a89d64a3c83f171ef23aac514edb2093593a2afa1d4a6373c","sha512":"140fb02960e683b9dbaab265a30c68c9eee53d1c9176bd4742bca317316e312913e3d53d65fe30ac57846215c766b974e8f00f95c95f1e926a0b342aff7c2403","ssdeep":"384:OfQRp5ElEbYXzMRzBaIgtdebu+NN01mwhwgytPRc3jcN:b5dbYXQR4eXNN01mwhwgytJcgN","tlshash":"6e13532da650003b7c2384fae258fdada12b71c5ee3a53f7ac9232009bd67f65d93154","first_seen":"2025-09-25T03:00:46.078139Z","last_seen":"2025-10-03T10:28:04.743877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/fonts/OpenSans-Regular.ttf?ac568e1f1b394b9786bdba436229c846","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:32.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /fonts/OpenSans-Regular.ttf?ac568e1f1b394b9786bdba436229c846 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/css/interface.css?id=79c79d86227d208a76333fbc02ff973e\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96428\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-178ac\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpHJpBdxbRmHS6mFFA2fqZ7u46IXoAE6ECVnBZnFaGZ%2FJ3%2BLcICOjZE2ICugawcQoFo5xicp9CGtataG%2BTHovHfm1HJ1zh8%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 988bbf6338e156c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96428,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu","md5":"5a798cdadc7cd321e3f72425b70bface","sha1":"dc9c07303a2392f9ee02fdb636814970753ac94a","sha256":"34ad67cfc362403e3baabe4ad0f4ef0b4b6b68e2f252dd703bbb1e10198188e2","sha512":"64bb667deca1552439932e8502de3032c6dc0e048a399568bd74fea74d9d6dbfd51571a0e4b2e36f98e2bd59ed3a2fa0077f03e20e1560a4472b10d9e999eb38","ssdeep":"1536:fL26+E8THZqxKuTJlD7qGrIJD5BmurUsb58igg90YiQvntZ1BabtX:Dz+EWaTXD/rIJPdQMjiQvtZvaX","tlshash":"59934b07d322bf359d1370fbc1520bc45557b844b70ac38f7aca97baa98619cca48a5b","first_seen":"2023-04-18T09:46:43Z","last_seen":"2026-04-04T15:16:04.613259Z","times_seen":337,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":485,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: af1a46c4efe9479941cd4126ab530cbf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":109,"dns":48,"connect":20,"send":0,"wait":20,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/img/favicon.png?v=3","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /img/favicon.png?v=3 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D; _ga_96XMLJKYVT=GS2.1.s1759487253$o1$g0$t1759487253$j60$l0$h0; _ga=GA1.1.193475066.1759487253; dom3ic8zudi28v8lr6fgphwffqoz0j6c=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed%3A1%3A1; pp_main_d56b4bd6c3d2c1e161c4ab3c78c27670=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 20288\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-4f40\"\r\nexpires: Sat, 18 Oct 2025 10:27:34 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aleGQU%2FPZtwYOFDlVBup8N3i%2FCSDdb44RsEyb4oTv0%2BivJJ77FyUVui1rc%2FIsuFINyGwZYXAxvqooCbhwufAMstApCtasQ%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 988bbf68792c56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"3b88a7957f1028a91d0e84d179f4335a","sha1":"73f3e8137c677e5d9fffab592c1f0fc160c13159","sha256":"f558c464a74cbf1ad420b31998b812cdef4da462e4ac22a7b41bb769b958cb99","sha512":"e7b895b8243864bf8eb0a995d5e0afab97e2feb9af0de92876651afa32502020b86f91c1fd6bd8dfb2b34e5bb3a9a1b746a1191a8b3232eff670a9692a2f7f0d","ssdeep":"96:GZ/I09Da01l+gmkyTt6Hk8nTgkY9WmrjwaNLwLvpAwjLyLfNXrNXtNGQaGvqcVU5:GS0tKg9E05TgkU3w0WuwfQf53E1x","tlshash":"7f920929fef0b1ad5559a1322ed624405d7703c3d6822c44b6ce8cdf6f21bde8d9b152","first_seen":"2024-06-09T13:10:03Z","last_seen":"2026-02-13T05:39:49.607064Z","times_seen":14,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/img/alert.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/img/alert.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 10476\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67bc6335-28ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3044719\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2JHWiPjkH2fxMM62tdp1zGCJux9E2HW8fZl8pcGfRCTyNJu3%2Fk2Kao7s9wcuJr6%2BuZmg1IHkL6abGK39THqF6sdJiOYGiweNETI7Cbllfk%3D\"}]}\r\ncf-ray: 988bbf701b81c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"ad654d90cb79106823ed06ee2b4455e0","sha1":"a43d2d45d4c00fe3cd52d79c63a106955cd5f656","sha256":"c54944d070a21b35fdd49be5ab0f42f91c6c5dbeaa5d4f049548d3a499cf1cd4","sha512":"a2da86172c22b6735b2bd60e122082fd7fd56a9142d845bfbb218bac3dfe6bd4fbb6a3b137bbd12eafa71ddd186a324d6bf5910ab0c9c79e03a937d2e33c23ae","ssdeep":"192:xS5knyObpkDIrrzxtDrU5jGgp349+HT0rVKTmmn6R5uznEB4rpwNyqxJU:YinyIpkin7yjfC980pK6nMnU6oBJU","tlshash":"8b22908e9bc05e413b889d4d6fe4a6a9ab8e4758c1e1f5441ef3c60e20843f5ca0a8d7","first_seen":"2025-05-26T10:03:00.763505Z","last_seen":"2026-04-04T15:20:24.415541Z","times_seen":732,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T10:27:30.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nvary: X-Inertia, accept-encoding\r\nx-ratelimit-limit: 80\r\nx-ratelimit-remaining: 79\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctBeBdnjfYCHgcvfU%2Bb35TxSCyLjcRRMgS10%2FStOYjMpzzUYFTZ8mgy3Icixn4RGf6p2qew6Llwo8df9Lj14H0tM4tSTC1g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; SameSite=Lax; Secure; Path=/; Max-Age=7200; Expires=Fri, 03 Oct 2025 12:27:31 GMT\nln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Fri, 03 Oct 2025 12:27:31 GMT\r\ncf-ray: 988bbf57c9e156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":48590,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10977), with CRLF line terminators","md5":"d55fa62bd6baa39badb15280e659fd09","sha1":"61c1f2ee57d33f9ae98e8afa669820ffaabc1b55","sha256":"7858d000762a043c84882e9362d497d25b6a27b6f9d28a770d67bf1db48adbaa","sha512":"248b030ca1230a36a60e6aa620e013a111340cba9a3ffbfdebcf96c44d3bf60c60a0c5ab27a2e279e848e7e54603b298c9bdc8898778924ea3ffbdeaeb37487b","ssdeep":"768:vN7R75WQQ0kBvBzClElJ0O5l4i2iK3aGBS:vZ/WQQd7zClElJN5l4i2laGBS","tlshash":"7223c71160e01026817bc2beaab8ab48ffd7501bc742df907aec57b39f72c549d1365a","first_seen":"2025-10-03T10:28:04.760792Z","last_seen":"2025-10-03T10:28:04.760792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":169,"dns":0,"connect":3,"send":0,"wait":512,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.hako.vn/ln/series/chapter-banners/13694/2dc2458a-7500-4983-b608-fedff1f93fba.jpg?t=1727447414","fqdn":"i.hako.vn","domain":"hako.vn","tld":"vn"},"ip":{"addr":"104.21.18.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.hako.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 14:26:41 GMT","end":"Mon, 08 Dec 2025 15:26:16 GMT"},"fingerprint":{"sha1":"F5:9C:B3:56:08:35:B0:92:83:C9:43:DC:28:34:75:EE:F5:8E:6C:94","sha256":"D2:AA:5E:31:62:33:8D:7C:F7:F8:E5:0B:07:BF:DE:FE:94:D4:9B:B9:7C:D2:5E:36:4C:2E:AE:C7:25:74:35:36"}}},"request":{"raw":"GET /ln/series/chapter-banners/13694/2dc2458a-7500-4983-b608-fedff1f93fba.jpg?t=1727447414 HTTP/1.1\r\nHost: i.hako.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 111706\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wMNCLUy1pITkdnUlf%2FxZFBunob5As11tNLjxbCCR6KCYnzzUFGyP8UqjZyGrdh0cz2enmjYHjhRNQYk5tS7lnUWHSYUYv9i8Nw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"d236c440568894bc14c4875ad9f1d7af\"\r\nlast-modified: Fri, 27 Sep 2024 14:30:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-ray: 988bbf61483d783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 970x185, components 3","md5":"d236c440568894bc14c4875ad9f1d7af","sha1":"232b419c79149384167a23727a402ea4d84f6018","sha256":"cf14e9a20db1e031dc68567e43e0340de2762197d4eacf3c48495b8d1ca8c83c","sha512":"8873aa90885678d146ef9d829e3610a8a03608aec342ac29f253e1b861a9500ce294a998b65fba98423207c27bdb986c68d3c48e3f0902beb1c087fa9061c391","ssdeep":"3072:42mTh1kA0iFy6BNzENwofX200czxAo04XY+D:PAgWzE+ofX20lzKtdG","tlshash":"aeb3127cc5ce1f2aea114732a1dbcb84db0d7cb5a247c76218614d36f6e266cd60505a","first_seen":"2025-10-03T10:28:04.76316Z","last_seen":"2025-10-03T10:28:04.76316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2186,"timings":{"blocked":953,"dns":793,"connect":2,"send":0,"wait":271,"receive":4,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/scripts/app.js?id=a5a24eca66adcfc75cc0b2f62e2611db","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /scripts/app.js?id=a5a24eca66adcfc75cc0b2f62e2611db HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Tue, 10 Jun 2025 08:45:02 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ail23jt1eGnivzfCw3YfdgT%2B7zAc8waaQqTI7tP6uaDPNHtkcqtD7CBepmOp1xJzFqm9evx5BlK5TAIvv8NYrh3A%2Ff81TU%3D\"}]}\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"6847f08e-7695\"\r\ncf-ray: 988bbf5c68a756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30357,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30202)","md5":"cfa835fb8149aaf4e048d87af37a682c","sha1":"e3190fb90ee99b319a2b7cab76c2438e0a95f7df","sha256":"78ad56ef48de89d67c2526f674d29ff39474a06202c7e4598b22a4b0f83078ce","sha512":"9dedfdb93012c5bf8e8ec6665a67637192794d32bbbf3f4aa710610561e194b1dde242a4dc8bc82ae838e7436221d397948c56b8f3c7bb1764e94ee96901898c","ssdeep":"768:05CYh3v/czqxX426nAE7VT9qyTHjnGUMOOENT2gY:IbaTbHidJENqgY","tlshash":"d1d2d84db2d6b17603f7703a282f2602a2326e29d8058546e16ed4e51dbce5a3373f7d","first_seen":"2025-08-31T20:54:43.283397Z","last_seen":"2026-01-20T06:21:11.97899Z","times_seen":12,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.8.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 74328\r\ncf-ray: 988bbf634ab356b1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e60-12258\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 83619\r\nexpires: Wed, 23 Sep 2026 10:27:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OFPhA6Y4xqwrotl9vG6UKuDNnlTo7tRjoIAj1UIezMGYge%2FGceb%2Fl9AV7PUMBgl6YuDHA8wLGb5mRvxYXVOzXyg05k8pv9H4B5j5QYQ2UIU0PNc%2FG6FQ1k61wBmRCnQf9Etv%2BLaK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74328,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 74328, version 329.-17695","md5":"64b3e814a66c2719b15abf8f7998bd73","sha1":"fa5c5d34c7c375aa3e101f0b8104b6cdbcacd6a6","sha256":"0fe6a4357505cb0d3ca8ba0671ad57df6b7410ca02cb8065eed58e2c0381e640","sha512":"55cfd5a0dd47ff9458243e62cc6cc92bc8c325910bb986a044c783c5c9ff4f9e39e00d58ae71d2fe7f653bdef47102b06ebde153ff78d0ffd505975d2f4cb543","ssdeep":"1536:zYwbikeCEBsqap2mAR1C9VDvMDRUzKafDJgpynKnpqCG1ojp0rmpprcz/7:zLbj3EBsqaRAoD0t8DipVoPqr87","tlshash":"e07312d3da1291cddf722944531735dc91e01ee8a14f9c6fcda8e9a9ac72f43860a263","first_seen":"2023-04-05T16:23:21Z","last_seen":"2026-04-04T14:46:23.737984Z","times_seen":3743,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/img/apple-touch-icon-114x114.png?v=3","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /img/apple-touch-icon-114x114.png?v=3 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D; _ga_96XMLJKYVT=GS2.1.s1759487253$o1$g0$t1759487253$j60$l0$h0; _ga=GA1.1.193475066.1759487253; dom3ic8zudi28v8lr6fgphwffqoz0j6c=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed%3A1%3A1; pp_main_d56b4bd6c3d2c1e161c4ab3c78c27670=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 20732\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-50fc\"\r\nexpires: Sat, 18 Oct 2025 10:27:34 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeiyEkAr04AmIAE%2BSGPo70PAOJIHFSs987JmyW68dpiG583cquVsGK%2BosrwrlyIsku4gPFSjW%2B0YLLjk1p60mXumXi5Hixc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 988bbf68792b56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit/color RGB, non-interlaced","md5":"c993d61ff44cb5daf4d6a9a65775528c","sha1":"c538316a0beb528a734366a5448c77b932b196fd","sha256":"3dcd3a6451b585158d8807535efa393248a7ed2f22c0323869a437c166339c75","sha512":"351ad0e481f2ac7ce0224dd98f9d5ad89f857430cdca3ed5b0074dda53ec39765b6ec29786c19395f400663681a3c5d177055ae12114a072196d410aafa8080e","ssdeep":"96:xZ/I09Da01l+gmkyTt6Hk8nTWkY9WmPN8LwLvpuLyLfNXrNXtNGQaGvqcVCrfWSf:xS0tKg9E05TWkU8WmQf53GfWGiWZ","tlshash":"f0923925fef0b6ad5948b1322ec920404d3707c7d6812d44bace89df6f20f8e8e9b556","first_seen":"2024-06-09T13:10:03Z","last_seen":"2026-02-20T09:25:33.820954Z","times_seen":18,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_3yTTYgcRRTHqzciohAxh4gQYQ4KCu5sf81HJ4fgGleDcSckkRyCh-qq6tnK9HR1qrqnN3MxGAh7nHiKt97_7GYxRtGjB0Fm9bQg2IKwh6yIJ8GDBxHxJLM7uPEDH_R7r9-_u_i_H9St9XyPeMjp7vk31VDGMV1o1O3aC5dlwlVhasuXao5dt0_VLsuk6Z-qrU6THpx0PL9uv1h7TbCeWnBtx7Yd26ktSS0itbqwr0KmH7XduuO3604zqDd9rOp_DExuwVALfLBHjkHy6skfoyuQbIKk_8kZYXqZSl96tZ_HNFMaA771VtJLVJGgf9hG2kKUbM2-hjIVIXfmoJKt2Q5Qg43pDghlReaOP0CYbM2MIhxsHngNY4gEIX8CxWACEU8g6QRM3YTk3xCAcSx3kPTvLitd0OsHKp2qFXn0158gi4o8doIg6d_vLHYu1jqpSJZFhtWohFydQHYnSPNtZMM5yGIbLHsXkn9NFn47h6S_0TGxguS7z7miLfyo4cwHLc-d991WNB-EjM03ecBYqx3xluD7gGQ0ATUW8ukjLeSRhTy10Oe7Nc-1m14r8Lkd2bwZUuE2XFe4jabDQ7_NBHI2dT5Clo7A4hGYvoFU30BP3q6I9czb0PkXMCslDLdgMoIBL1EIgsIQFJSgkARFRlAMyk0eG9eUd3ls8tCZVXdWvXKssu463VRZVyQEVI-gebkh02vmJlhmjYeRIWM1TTTMyjENebme7pGnpmSthQffoSd2a3bQdH2PNQIvEjzwgnaDNZy23eaO07J9P4KRJaSZ2ycylBV5-tpVpLIi1p0lhHQbJt4Gk8dB82dBixJ0pcQwuRcn9RXaU3UtwFWJNHsE2XVrPd4jJ8YXLi2uQecl-vkOmQV0fNgXeTnWbvjXYKzD6KEXOpXp1BevyJWjJyHYzulfZv8yXSLVJa7KLwm68dr4girIxgVVGPJpJ81kXw5pJlVyMaOZOHLvDXG9UJqfPWNGH7zMpsK0vX9JmOwcTbhMuoZ8uCg5F3pJaSbI52fNZRGez83KYq6TPD13_pWls_1UC2OkSiagsiKP83fAZEWO_X50_2p4t96D1JN_7czSGzDpoXej_s4hTK3_Z4FYVuT5979CLHZOf_bHzx8Pf3gdNCxhxEOniP9gt27W0NUWaHYTSb_EQJcYxCVoPILJj4yzVO-c_tbbD4SxNQ5jbW2EsY5vHzA3crcm7HbgNmzG2y3fcZjnML8ZCL_NPKcZMCaQmWrl-83jfwYAAP__3QHTfQsFAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_3yTTYgcRRTHqzciohAxh4gQYQ4KCu5sf81HJ4fgGleDcSckkRyCh-qq6tnK9HR1qrqnN3MxGAh7nHiKt97_7GYxRtGjB0Fm9bQg2IKwh6yIJ8GDBxHxJLM7uPEDH_R7r9-_u_i_H9St9XyPeMjp7vk31VDGMV1o1O3aC5dlwlVhasuXao5dt0_VLsuk6Z-qrU6THpx0PL9uv1h7TbCeWnBtx7Yd26ktSS0itbqwr0KmH7XduuO3604zqDd9rOp_DExuwVALfLBHjkHy6skfoyuQbIKk_8kZYXqZSl96tZ_HNFMaA771VtJLVJGgf9hG2kKUbM2-hjIVIXfmoJKt2Q5Qg43pDghlReaOP0CYbM2MIhxsHngNY4gEIX8CxWACEU8g6QRM3YTk3xCAcSx3kPTvLitd0OsHKp2qFXn0158gi4o8doIg6d_vLHYu1jqpSJZFhtWohFydQHYnSPNtZMM5yGIbLHsXkn9NFn47h6S_0TGxguS7z7miLfyo4cwHLc-d991WNB-EjM03ecBYqx3xluD7gGQ0ATUW8ukjLeSRhTy10Oe7Nc-1m14r8Lkd2bwZUuE2XFe4jabDQ7_NBHI2dT5Clo7A4hGYvoFU30BP3q6I9czb0PkXMCslDLdgMoIBL1EIgsIQFJSgkARFRlAMyk0eG9eUd3ls8tCZVXdWvXKssu463VRZVyQEVI-gebkh02vmJlhmjYeRIWM1TTTMyjENebme7pGnpmSthQffoSd2a3bQdH2PNQIvEjzwgnaDNZy23eaO07J9P4KRJaSZ2ycylBV5-tpVpLIi1p0lhHQbJt4Gk8dB82dBixJ0pcQwuRcn9RXaU3UtwFWJNHsE2XVrPd4jJ8YXLi2uQecl-vkOmQV0fNgXeTnWbvjXYKzD6KEXOpXp1BevyJWjJyHYzulfZv8yXSLVJa7KLwm68dr4girIxgVVGPJpJ81kXw5pJlVyMaOZOHLvDXG9UJqfPWNGH7zMpsK0vX9JmOwcTbhMuoZ8uCg5F3pJaSbI52fNZRGez83KYq6TPD13_pWls_1UC2OkSiagsiKP83fAZEWO_X50_2p4t96D1JN_7czSGzDpoXej_s4hTK3_Z4FYVuT5979CLHZOf_bHzx8Pf3gdNCxhxEOniP9gt27W0NUWaHYTSb_EQJcYxCVoPILJj4yzVO-c_tbbD4SxNQ5jbW2EsY5vHzA3crcm7HbgNmzG2y3fcZjnML8ZCL_NPKcZMCaQmWrl-83jfwYAAP__3QHTfQsFAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1b206f2260498c932fe73d2008cd062c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.71.252.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://docln.top\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; expires=Mon, 01 Oct 2035 10:27:33 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d83845f3d3139445fa0e88972fa0dbe3","sha1":"5c4877c9f79edf758c144f9c8fcbad4576eed98c","sha256":"088c7a05e52ac2db731184986e02351929ed4e5406845965ae9ab4747c23905d","sha512":"07443e42a913625efdc7472f019b228fd8dfc8091d02e25400414791fd272510b98f94dcbb381b4e2ee6cccbec175d23215ee06aefa3c012d9e97eb06dcad3af","ssdeep":"","tlshash":"9b9004d0f044341113073015d007f3144554d07cc40100055d7544740d5fd030354571","first_seen":"2025-10-03T10:28:04.769943Z","last_seen":"2025-10-03T10:28:04.769943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":154,"dns":3,"connect":29,"send":0,"wait":29,"receive":1,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/fonts/OpenSans-Regular.ttf","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /fonts/OpenSans-Regular.ttf HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96428\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-178ac\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtcEN41nsaXQKwicnNJU7NjBUSKVpyaOp0EFzJujlybPgp5Us0fvorB58rrg5dRN6%2BSNpBEeSCkxyK63SlC5Lin8RZqbSB0%3D\"}]}\r\ncf-ray: 988bbf5b4d1456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96428,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu","md5":"5a798cdadc7cd321e3f72425b70bface","sha1":"dc9c07303a2392f9ee02fdb636814970753ac94a","sha256":"34ad67cfc362403e3baabe4ad0f4ef0b4b6b68e2f252dd703bbb1e10198188e2","sha512":"64bb667deca1552439932e8502de3032c6dc0e048a399568bd74fea74d9d6dbfd51571a0e4b2e36f98e2bd59ed3a2fa0077f03e20e1560a4472b10d9e999eb38","ssdeep":"1536:fL26+E8THZqxKuTJlD7qGrIJD5BmurUsb58igg90YiQvntZ1BabtX:Dz+EWaTXD/rIJPdQMjiQvtZvaX","tlshash":"59934b07d322bf359d1370fbc1520bc45557b844b70ac38f7aca97baa98619cca48a5b","first_seen":"2023-04-18T09:46:43Z","last_seen":"2026-04-04T15:16:04.613259Z","times_seen":337,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":514,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lora\u0026family=Merriweather\u0026family=Noto+Sans\u0026family=Nunito\u0026family=Roboto\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Lora\u0026family=Merriweather\u0026family=Noto+Sans\u0026family=Nunito\u0026family=Roboto\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Oct 2025 10:27:31 GMT\r\ndate: Fri, 03 Oct 2025 10:27:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17951,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"06fd3acf2e69897acb66acd9df28f12d","sha1":"468895415ff88136eebbfa297aea9ae5fe23f01f","sha256":"50ba3a5d012a0dfbc93be2d29499885d40d864928dda26a438de8d21904a81ae","sha512":"a55d534a04e19c47822ee0ed2902fffef2d883bc28c08d538c47f06d4f08b5b9f702f8c9b21d76fa53d5001d7897fd1650a9a2696097a714e5238884c92c2488","ssdeep":"192:10FelqI5bqGIwV4+zA/32hs2av2g2qy2KS8J3kO3xcyWIw+lp+VUwNlmNMNVNVkJ:2LkqY4sg9WUwclM6bQohDqY4XziY","tlshash":"03822ea104178400ab835cd223cf7e36fe5e92117440d179abfd9a9aecebca6537871d","first_seen":"2025-10-03T10:28:04.77159Z","last_seen":"2025-11-06T19:17:23.108106Z","times_seen":3,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":60,"dns":0,"connect":10,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/fonts/OpenSans-SemiBold.ttf","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /fonts/OpenSans-SemiBold.ttf HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 100256\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-187a0\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRIcWZTDChejWDwjLrxPHMf2z2DpKJ8Xtx4lfBDtaEt1IfeD2Bo%2FOuJQKgcGn9DvbMIVR%2Bwt1l7Q1kjbIaYITdz60PVp1j0%3D\"}]}\r\ncf-ray: 988bbf5b4d1656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100256,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2011, Google Corporation.Open Sans SemiBoldRegular1.10;1ASC;OpenSans-","md5":"096d8c73bb18e4328284f25138b47ac6","sha1":"7b92a6fcde1c17e8f3dc20ec4c2c768551a1660c","sha256":"c729fb9e9113b95da37edd1ee95a983d22c46b646fc2427641943ecd3b86e104","sha512":"fb41e849e13b900305ae9e54eebe4c80cfaca2e1fd34395e85e3cda3fe69488113e5bf96f6f8b0609a89110a7bb14129c4bd019ae5e33d5ffb5743d0f4e0e9b0","ssdeep":"1536:BTm08+XZVRkQ4sO6InBZG9s/0ug7udLXd6IzwZGzt1X:BTjFfeVnC9GUALXd6N81X","tlshash":"7aa33b07d362ff3aae0374bec2520f801597b444b74ec25b7dca57fad98a15c8649a0b","first_seen":"2023-05-05T06:08:47Z","last_seen":"2026-03-20T10:54:45.959479Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bugscrawled.com/d5/6b/4b/d56b4bd6c3d2c1e161c4ab3c78c27670.js","fqdn":"bugscrawled.com","domain":"bugscrawled.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bugscrawled.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:54:11 GMT","end":"Thu, 11 Dec 2025 20:54:10 GMT"},"fingerprint":{"sha1":"73:38:FB:41:DF:6E:5B:00:E3:F4:11:4F:5A:63:9A:97:73:88:7D:FB","sha256":"9D:96:ED:1F:9C:75:24:4D:16:E5:33:97:66:79:DA:24:B7:96:2E:D3:B1:AB:E1:B9:7E:0C:0C:09:3A:04:6B:8E"}}},"request":{"raw":"GET /d5/6b/4b/d56b4bd6c3d2c1e161c4ab3c78c27670.js HTTP/1.1\r\nHost: bugscrawled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 35593\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_BS-1183=1; expires=Fri, 03 Oct 2025 10:27:32 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: bugscrawled.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cbb971f75f88985d5aa427ff9e8e1983\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98483,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98b8e41f5e5bc58d019652c0d1b4d683","sha1":"b4a8bdbe633ef43a63af98417a8e06155312f1bf","sha256":"2f871d62bfea3389328343801482707b3ad67ea66ac2bfaa54989a75fcefe8bf","sha512":"8f6616a0f595aa0a42b789ab7725d5bdf0c8b8331e2da2a7461e4d76255bf4b408a131b2b5e8a80a6c2bf7299f64c0e428629d2da309935503ef2160031a4516","ssdeep":"1536:YD5oAnYHPQztEx0oO9imwpmx+FxeCUz4uy5aP6GJtSvMjHISMho9gGg39gysYc4/:o6ZoOW9fkUT5AMsSYo9YTJcSYKX","tlshash":"d3a3ea88bfb1f06e23625477123f900be69e0e41649cda7ce513f8a52f9871bd07d5a8","first_seen":"2025-10-03T10:28:04.7755Z","last_seen":"2025-10-03T10:28:04.7755Z","times_seen":1,"resource_available":true,"data":null}},"time_used":950,"timings":{"blocked":361,"dns":33,"connect":109,"send":0,"wait":119,"receive":108,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"bugscrawled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed\u0026eb=bcc2bf15b54b9ef4041d8328a3a75221\u0026te=cb12021f3311658dba63bcdbf4a88a26\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d56b4bd6c3d2c1e161c4ab3c78c27670\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed\u0026eb=bcc2bf15b54b9ef4041d8328a3a75221\u0026te=cb12021f3311658dba63bcdbf4a88a26\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=d56b4bd6c3d2c1e161c4ab3c78c27670\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 436f3b6fb45246cd1c233cd76721cda0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":278,"dns":4,"connect":91,"send":0,"wait":94,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:52:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68bea754-107c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA59ULgiShsJ%2BEJzgAuIGGatDMxKUmJXV2WtO872NdwgJ9Ng03ESJjtbjkK3iCENQYDWYTR25BLuVaEwLBV14ybxKQhWrbJVRCdDjZVWUqA%3D\"}]}\r\ncf-ray: 988bbf6faa84c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"57c3e59bb9159f8aa5b7e1cd43443968","sha1":"d828ca77eb3cedf2217abcfe974557d0246b0aaa","sha256":"b6c7ff6b1139c986c372caed7aef0b3ee376dd1a8fa0df0de66fae65d305c5d2","sha512":"0015368fb0306e065cdbd39b0715abd1e691687fc5d7f0e8f54495e0e65e84064c55f6da5be734df52a6dce9582f68196fb699390b0b61f38d31350ec0216be3","ssdeep":"96:izMUmfZkCitWXFQiYYhZmnM0pfiu8UJwoKO/wCHmiXwkt0EmuC7a:QMZicXFT8nMM+ceY","tlshash":"3b91dc951b791608741fd0b73d12ab577b294483bf0fcd749bd1340c9ec629a86a3b8b","first_seen":"2025-09-14T19:10:24.66885Z","last_seen":"2026-03-31T23:50:42.898622Z","times_seen":249,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":33,"dns":2,"connect":3,"send":0,"wait":112,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Oct 2025 10:27:35 GMT\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a90fc2bf15e304ef3fa4e7f75b6a8608","sha1":"0f8c2853b49a7c206d75af99117482d80a60f869","sha256":"6e10be4b6befecf6f3d1ae34b727939e6da334a1f2d815fd325ba9c455520772","sha512":"0d1a14e11c436dadf51cc489592867eaff3cae2c4a95748d2a25614c984560ad3588fb95e2aaafd4060d4954594951d09e71ab36e9859fb8590198811f156fc4","ssdeep":"384:pwf5wgwPwrwyUw/qY4+w4wYwpwfMw1wWw6wyhw/qY4XwNwtw4wfdwkwDw3wyQw/P:pc70afUQRptmJKBLfhQE8YTYHw+fQQVl","tlshash":"b472ed91041700009b835ce223cebf35fe5f92117141d0b9abfd9b6badcbc6652693ad","first_seen":"2025-09-08T23:24:40.129975Z","last_seen":"2025-11-18T23:33:55.863403Z","times_seen":3582,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-34864968-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=UA-34864968-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Oct 2025 10:27:31 GMT\r\nexpires: Fri, 03 Oct 2025 10:27:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 102170\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287245,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2905)","md5":"249f419bdee6bbbb978233426a82a6f3","sha1":"5e3b5b442e27cd1b3157dca3818c784fd99d1912","sha256":"1ccaa4ddf5f9d0f1a75f23e9c0a54ce28598df8fd8e939b96af5fda0327c5c11","sha512":"487e7728e4fc10c15a72212d4c3fbcfa9c5ede13166f6c8e0ca655baec0bd6dcc86abf4af152bd98b20e6bd9e155614461e1adf6772b79f5bf1299559bd2b0d1","ssdeep":"3072:S0rV2o5qmTavsD0GIOU3Ty9durXx9COvCVf+cvXI6Egk6dSLd6I/EEF9TFf:fZTkDyYvRCLwvgk6dSLd6gJTFf","tlshash":"3d5408ccb7dab46283a36478503f014bb27b69d1f84cc894e182d9d52e74aa94277f7c","first_seen":"2025-10-03T10:28:04.780022Z","last_seen":"2025-10-03T10:28:04.780022Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":43,"dns":1,"connect":9,"send":0,"wait":31,"receive":21,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/fonts/OpenSans-Bold.ttf?11d42620ac71ab231c13032210187b70","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:32.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /fonts/OpenSans-Bold.ttf?11d42620ac71ab231c13032210187b70 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/css/interface.css?id=79c79d86227d208a76333fbc02ff973e\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 103616\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66f24cda-194c0\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcspsvjbBPApUSPY7Af0EJuhvL3%2FbQ2G41nEyovmLCcubrKfDoUk%2BtJd3N4sZql63l0k6STGY1kj%2Bjn3wsGXPjqtvHDKIqM%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 988bbf6338e256c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103616,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe","md5":"0062c34665a3fc0f2278cd4e955702ec","sha1":"0ad533c702f9ac1de717063040426858662cfbcc","sha256":"a7a41b04969454dfbe620bfbc7699647b2819d768374b3f0f90a714a0d80b199","sha512":"b8cb4bdbe06117f707b6204e24186033fcb2ec65f972abb446cb29c6ab9fbbf9bf22c1e7a745b9d462aab9aeea77a505e2f3c105544dce01f5bec33fe06a02a2","ssdeep":"3072:grqT6w+rgw8GJcXjFmHeJw4jtsoXqc12X:1T6w+rgw9JcJmHeJvjza4A","tlshash":"62a33b56db53bf39ec0264b6c2618b901223b484b74bc24f7fc856f6da5a0dcc548e97","first_seen":"2023-05-05T06:08:47Z","last_seen":"2026-03-31T07:08:52.261488Z","times_seen":132,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i2.hako.vip/ln/series/chapter-banners/13694/2dc2458a-7500-4983-b608-fedff1f93fba.jpg?t=1727447414","fqdn":"i2.hako.vip","domain":"hako.vip","tld":"vip"},"ip":{"addr":"172.67.191.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2cd6855e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 01:27:26 GMT","end":"Sun, 28 Dec 2025 02:27:18 GMT"},"fingerprint":{"sha1":"BA:36:DC:AB:43:A5:C6:DB:26:BB:5C:68:20:67:60:98:9F:10:DC:12","sha256":"CF:2A:E9:02:8A:95:9C:79:43:86:A6:37:B1:49:17:D9:ED:2B:A7:88:80:EB:AA:2B:8A:2B:E1:AE:EC:E9:DD:F0"}}},"request":{"raw":"GET /ln/series/chapter-banners/13694/2dc2458a-7500-4983-b608-fedff1f93fba.jpg?t=1727447414 HTTP/1.1\r\nHost: i2.hako.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 111706\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8p4kcunRarlv67E2yNhamOCjVeuvRwq7mxa2mH4fRkT%2FpbLhb0lEUecBEDO%2Ff3MoNt6tQFIkcpK4SudyvFNT%2BVytkgXxmvCID0t\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"d236c440568894bc14c4875ad9f1d7af\"\r\nlast-modified: Fri, 27 Sep 2024 14:30:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-ray: 988bbf650a2ca0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 970x185, components 3","md5":"d236c440568894bc14c4875ad9f1d7af","sha1":"232b419c79149384167a23727a402ea4d84f6018","sha256":"cf14e9a20db1e031dc68567e43e0340de2762197d4eacf3c48495b8d1ca8c83c","sha512":"8873aa90885678d146ef9d829e3610a8a03608aec342ac29f253e1b861a9500ce294a998b65fba98423207c27bdb986c68d3c48e3f0902beb1c087fa9061c391","ssdeep":"3072:42mTh1kA0iFy6BNzENwofX200czxAo04XY+D:PAgWzE+ofX20lzKtdG","tlshash":"aeb3127cc5ce1f2aea114732a1dbcb84db0d7cb5a247c76218614d36f6e266cd60505a","first_seen":"2025-10-03T10:28:04.76316Z","last_seen":"2025-10-03T10:28:04.76316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":272,"receive":4,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=096243c593fed93985c51808d117044f\u0026uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /sbar.json?key=096243c593fed93985c51808d117044f\u0026uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:34 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2734\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://docln.top\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; expires=Fri, 10 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 04 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 04 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Sat, 04 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Sat, 04 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\nu_pl19914198=1; expires=Sat, 04 Oct 2025 10:27:34 GMT; path=/; secure; SameSite=None\nslec096243c593fed93985c51808d117044f=[5967418]; expires=Fri, 03 Oct 2025 10:27:39 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2b419fa6e47fae55f2b0099c5e45fb8a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6249,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"f64c952b4b3eea8ba04c827c390df02e","sha1":"bbcdfefd6c9f6b8b1d7b363e85a17497c460971a","sha256":"18afdbc3fd2d66241a310b927fc3b066bacd07388b65a496d6cc044038b598c4","sha512":"950b5aa69e63f628639f6b63d8e3c04c91146b5b8bcaa5526403c92a2689910a2f694aa41292f48d274f387ea35340f5ecbf5a8406b226ab73f6bce1953e0718","ssdeep":"192:9za+bFOEropdx/O2tCdlK+bFOEr0pdx/O2tCdGy2:9za+bFOEOG24K+bFOEiG2FL","tlshash":"e8d14b2e100e21b29d2efb885f3b1cbb9d8644a7f535d82c887bdd4bd35c8221a21a10","first_seen":"2025-10-03T10:28:04.783378Z","last_seen":"2025-10-03T10:28:04.783378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":284,"dns":4,"connect":91,"send":0,"wait":300,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FBFmWd36oP%2B9uJsGykfLTUm6Kq3X4nAXBcP5uqQRL1L1px9hXPxpErxUdV%2BcSeuYuLL4QIPRJJtLsghTuF%2B81BylwaKAHsQcZ30bmpq%2BIk%3D\"}]}\r\nage: 934480\r\ncf-cache-status: HIT\r\netag: W/\"67bc6336-4ff\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf701b76c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3011bde2653e373d1150594a8bbd06d","sha1":"e47948cdb4d6ecf6257106805e690e3bf0211317","sha256":"6499ec40e3f2ac55bf1b5c9a2dbbc212adb74114645bccac0373074f98ef8a01","sha512":"068957d81c2ca296e44c3bbfb20bc6572d79b4e4e848cb98c84bb119cb7350633a9c32d250999216e75ce05c99bac9050aa4fc1c77a359cd40f5d8d6ab25dd25","ssdeep":"","tlshash":"ee21dbcc858f223ef324ff618973166067a423f6bb19c5bcb199a8157e1cb910c48e14","first_seen":"2024-05-03T00:07:48Z","last_seen":"2026-04-04T04:46:51.031282Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fcss%2Fstyle.css\u0026l=4220\u0026fd=148","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fcss%2Fstyle.css\u0026l=4220\u0026fd=148 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fjs%2Fscript.js\u0026l=15505\u0026fd=116","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fjs%2Fscript.js\u0026l=15505\u0026fd=116 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_3yTTYgcRRTHqzciohAxh4gQYQ4KCu5sf81HJ4fgGleDcSckkRyCh-qq6tnK9HR1qrqnN3MxGAh7nHiKt97_7GYxRtGjB0Fm9bQg2IKwh6yIJ8GDBxHxJLM7uPEDH_R7r9-_u_i_H9St9XyPeMjp7vk31VDGMV1o1O3aC5dlwlVhasuXao5dt0_VLsuk6Z-qrU6THpx0PL9uv1h7TbCeWnBtx7Yd26ktSS0itbqwr0KmH7XduuO3604zqDd9rOp_DExuwVALfLBHjkHy6skfoyuQbIKk_8kZYXqZSl96tZ_HNFMaA771VtJLVJGgf9hG2kKUbM2-hjIVIXfmoJKt2Q5Qg43pDghlReaOP0CYbM2MIhxsHngNY4gEIX8CxWACEU8g6QRM3YTk3xCAcSx3kPTvLitd0OsHKp2qFXn0158gi4o8doIg6d_vLHYu1jqpSJZFhtWohFydQHYnSPNtZMM5yGIbLHsXkn9NFn47h6S_0TGxguS7z7miLfyo4cwHLc-d991WNB-EjM03ecBYqx3xluD7gGQ0ATUW8ukjLeSRhTy10Oe7Nc-1m14r8Lkd2bwZUuE2XFe4jabDQ7_NBHI2dT5Clo7A4hGYvoFU30BP3q6I9czb0PkXMCslDLdgMoIBL1EIgsIQFJSgkARFRlAMyk0eG9eUd3ls8tCZVXdWvXKssu463VRZVyQEVI-gebkh02vmJlhmjYeRIWM1TTTMyjENebme7pGnpmSthQffoSd2a3bQdH2PNQIvEjzwgnaDNZy23eaO07J9P4KRJaSZ2ycylBV5-tpVpLIi1p0lhHQbJt4Gk8dB82dBixJ0pcQwuRcn9RXaU3UtwFWJNHsE2XVrPd4jJ8YXLi2uQecl-vkOmQV0fNgXeTnWbvjXYKzD6KEXOpXp1BevyJWjJyHYzulfZv8yXSLVJa7KLwm68dr4girIxgVVGPJpJ81kXw5pJlVyMaOZOHLvDXG9UJqfPWNGH7zMpsK0vX9JmOwcTbhMuoZ8uCg5F3pJaSbI52fNZRGez83KYq6TPD13_pWls_1UC2OkSiagsiKP83fAZEWO_X50_2p4t96D1JN_7czSGzDpoXej_s4hTK3_Z4FYVuT5979CLHZOf_bHzx8Pf3gdNCxhxEOniP9gt27W0NUWaHYTSb_EQJcYxCVoPILJj4yzVO-c_tbbD4SxNQ5jbW2EsY5vHzA3crfmipC1WsxuU5fSgAeuZzcDzwlFo8X9gEbITLXy_ebxPwMAAP__WOs6UwsFAAA=","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_3yTTYgcRRTHqzciohAxh4gQYQ4KCu5sf81HJ4fgGleDcSckkRyCh-qq6tnK9HR1qrqnN3MxGAh7nHiKt97_7GYxRtGjB0Fm9bQg2IKwh6yIJ8GDBxHxJLM7uPEDH_R7r9-_u_i_H9St9XyPeMjp7vk31VDGMV1o1O3aC5dlwlVhasuXao5dt0_VLsuk6Z-qrU6THpx0PL9uv1h7TbCeWnBtx7Yd26ktSS0itbqwr0KmH7XduuO3604zqDd9rOp_DExuwVALfLBHjkHy6skfoyuQbIKk_8kZYXqZSl96tZ_HNFMaA771VtJLVJGgf9hG2kKUbM2-hjIVIXfmoJKt2Q5Qg43pDghlReaOP0CYbM2MIhxsHngNY4gEIX8CxWACEU8g6QRM3YTk3xCAcSx3kPTvLitd0OsHKp2qFXn0158gi4o8doIg6d_vLHYu1jqpSJZFhtWohFydQHYnSPNtZMM5yGIbLHsXkn9NFn47h6S_0TGxguS7z7miLfyo4cwHLc-d991WNB-EjM03ecBYqx3xluD7gGQ0ATUW8ukjLeSRhTy10Oe7Nc-1m14r8Lkd2bwZUuE2XFe4jabDQ7_NBHI2dT5Clo7A4hGYvoFU30BP3q6I9czb0PkXMCslDLdgMoIBL1EIgsIQFJSgkARFRlAMyk0eG9eUd3ls8tCZVXdWvXKssu463VRZVyQEVI-gebkh02vmJlhmjYeRIWM1TTTMyjENebme7pGnpmSthQffoSd2a3bQdH2PNQIvEjzwgnaDNZy23eaO07J9P4KRJaSZ2ycylBV5-tpVpLIi1p0lhHQbJt4Gk8dB82dBixJ0pcQwuRcn9RXaU3UtwFWJNHsE2XVrPd4jJ8YXLi2uQecl-vkOmQV0fNgXeTnWbvjXYKzD6KEXOpXp1BevyJWjJyHYzulfZv8yXSLVJa7KLwm68dr4girIxgVVGPJpJ81kXw5pJlVyMaOZOHLvDXG9UJqfPWNGH7zMpsK0vX9JmOwcTbhMuoZ8uCg5F3pJaSbI52fNZRGez83KYq6TPD13_pWls_1UC2OkSiagsiKP83fAZEWO_X50_2p4t96D1JN_7czSGzDpoXej_s4hTK3_Z4FYVuT5979CLHZOf_bHzx8Pf3gdNCxhxEOniP9gt27W0NUWaHYTSb_EQJcYxCVoPILJj4yzVO-c_tbbD4SxNQ5jbW2EsY5vHzA3crfmipC1WsxuU5fSgAeuZzcDzwlFo8X9gEbITLXy_ebxPwMAAP__WOs6UwsFAAA= HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+0858cbcbe609f0d88972c3d7326db333=5967418; expires=Sat, 04 Oct 2025 10:27:35 GMT; path=/; secure; SameSite=None\niprc_l:5967418=1; expires=Sat, 04 Oct 2025 10:27:35 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 984fcf798e6f875b5a018cd37c3d063d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/css/interface.css?id=79c79d86227d208a76333fbc02ff973e","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /css/interface.css?id=79c79d86227d208a76333fbc02ff973e HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 05 May 2025 08:13:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1c0iiYLlO5fOcE8SyE9TAfWekRgrHl1251hF5ZlJSJ046k71MTRQWdNT3v%2F5%2FoSEs9V4tLh3Q3n%2B3u%2FipMYUYJUt9XGWULM%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"6818733e-27a61\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf5b4d1a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162401,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"79c79d86227d208a76333fbc02ff973e","sha1":"54a4cf31361504efe538fc23d902358fc48d863a","sha256":"2cfe712137e495b0116c4b8aca1da9a28cbcae566d3445e7fe36442e1dbbfe54","sha512":"dbb7e9513602a2b8a212e7ed12a30ed1384d942554b2b53f713416d2d02645fc81c87f4242b8af708a51ffd4065c5155d6abb03a7bcc62e30f7665e7fcdbe2a7","ssdeep":"1536:AXo/0h+k3SYiTENM6HN26vo21ox7nIWS7fQIOt/u2e7Yf54MzPb+w:AXocck3SYiTENM6HN26AW9xES48w","tlshash":"6df3c883fa91240de16bc12af4a1bafd253b8105e7635aeff5173b74c7892c70661a0d","first_seen":"2025-08-31T20:54:43.245199Z","last_seen":"2025-11-10T14:50:41.177209Z","times_seen":8,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/scripts/plugins.js?id=b612d946b32459430eed3066ed15adf2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /scripts/plugins.js?id=b612d946b32459430eed3066ed15adf2 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Sep 2024 05:23:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9mwFbe2ncdvppXiCrGg%2FA7%2BQGJP%2BXKjgSIHJxNJgaAxpJUJWKsAldqCvyRIzcdfvU2vxrC8II7NjbogS0jN1UZA5T%2FVhH8%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"66f24cda-2cbd1\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf5b4d1e56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183249,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"b612d946b32459430eed3066ed15adf2","sha1":"f9cc3cdaa65e330a92f88089ecfbcfda145072e0","sha256":"d5a1f112ec426a3fcb16e8273c831524f192e59372445a2337aa204b46a9a673","sha512":"5542b2aacd1adf60d12c6307df9f3f270d614d3a345a3857c20e264e194af77935786cc05f30d8ad093425c3a2b4225c71fbe199776f6ba3b31c5bc4768da8c9","ssdeep":"3072:c8QSFTFcxqJHQJLDx1QultSzWwV3rz2AdVKY88YMm:/Fg1JLDxOultSzH3raAdoj8YV","tlshash":"07043acd72c5b07247a761ba407f510ab2376959a80ec410f129f8e87c78e9e523be7d","first_seen":"2024-06-09T13:10:02Z","last_seen":"2026-02-20T09:25:33.854091Z","times_seen":19,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 03 Oct 2025 11:15:31 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQQheMIiTOHa1nurKsWGjhatRjaXQPTHHBIymF8Ka3FQctZRATWwhArk%2BQn6THptVfFFuT32ybmRWfr8s9cn2VIlZ7Kl%2F%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:31 GMT\r\ncf-ray: 988bbf5c68a956c4-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T17:43:04.719817Z","times_seen":292321,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1509\u0026rd=1509\u0026fd=589\u0026bv=25.10.6722\u0026tmpl=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1509\u0026rd=1509\u0026fd=589\u0026bv=25.10.6722\u0026tmpl=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:33 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":332,"dns":4,"connect":108,"send":0,"wait":110,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a002b50f0cf1ecafdc606ac588f10c32\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/img/message.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/img/message.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 5402\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67bc6337-151a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3044719\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BODzLPOBxoXqN5GQcYoKpHFT0DYPFp5zi%2BDdyyFQfvIQoc86TuBo2Gv5fHbD2XiFjphact%2BK9%2FLBn%2F7apV%2FEB6v3Vw%2B1BbON0zcHtBVUWg%3D\"}]}\r\ncf-ray: 988bbf701b7dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cd733a315b8211d98f006e6ea0803f4b","sha1":"7d171c38df62cfdaa0c6ec35f8c37aa183c52b54","sha256":"ce16892d1608a82787b41a5402c081485e9af89ecfcc525a850bdf13ddce6b70","sha512":"62bbfe897924bc8210b9315fa36ac169730f98a2c338aa31189fcd0f4507afa68bbb5b1e5c4527fa645c8571583883b6eea0ac8938c312df64ea8edc72d6e44d","ssdeep":"96:MhuQ5xSlknmWIH2IsIKiHhHDH5E1opW+HriIjVPfog+AAaFh6iGVDRTyeJZ7:MEQvSlknJIKiBjHpnHriIjpTRFgiGxlD","tlshash":"23b13b84fe22de426519ea56a6f9ef035b3f52c99a81c481fcc59c57842007ed06cec7","first_seen":"2025-05-26T10:03:00.759493Z","last_seen":"2026-04-04T15:20:24.431314Z","times_seen":1169,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 09:45:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1T1E9kANxinVNx59Njoeo36zDpnjA%2Bei%2Fc0l7C1VQTkMu3Mmm5SaJxVbYa%2BgmYs4HYewiaezZfSWuUxJe1FU52JqpUzBxHnGLv7xuDbShoY%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68bea5bd-477a\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf705c10c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18298,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"139588a5efbf9627ae3cc44474788eba","sha1":"a1335983dcc2b66a6ad7ecec90863b9e6f177b3e","sha256":"a77e5d9379c41b86f3938aabba013a5a54e1ecb82574ef4a8bdf65d985feabad","sha512":"3aab7ecfb4c8488f667433a11ca769ab89eee5a5ae1ea4dfb6519ba959511017750e2b321f79eba9235f00c148efc719c24f28fbb7e5978cd407276ed02ea6fc","ssdeep":"384:KXCRXDIX3iOi8igiVi1i7iDiZiNi/IsLRmOArt6flVYZHUcCcFYZHOYZHfmqadym:DJDAyfx9Ekemg8/IKRmOArc3WXWuWuqi","tlshash":"9e827618147ec421c146b06e22bf5663b3200e6b9d66bae57f6d02480f8d8af75b537f","first_seen":"2025-09-14T19:10:24.593416Z","last_seen":"2026-03-31T23:50:42.882004Z","times_seen":249,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/scripts/service-manager.js?r=4","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /scripts/service-manager.js?r=4 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Fri, 12 Sep 2025 16:10:42 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NVdIiRpebcf0OGRwWkm0A%2B57HsKa625ZSABK912DGJ7%2Fc1CMhZ7Ei%2BFDYJ%2Bs39s%2FqGE%2B8NcqzzYEied%2F9hSNsAtbx%2Bjeso%3D\"}]}\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"68c44602-2d86\"\r\ncf-ray: 988bbf5c68a656c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"d40878f40a10a3cf0140e5884732958a","sha1":"565b1babadcde9846e75c826e85db94b6c9a1e4a","sha256":"f3cef82979441fb766b88700b40e4e88088e9c87113b6e8a486451c3fba89e59","sha512":"2797195894df8cf88839c8d6d380f07b44ac77bb916521ddb68986232abf3ddc5d7264292bb5bc47fc4d38f836a0183d830746a2cf6d8188a196e8450f01c7c8","ssdeep":"192:Y+0+wkRtGysTcaeDojLA9ah1Ul632yDi865fFsFS037:g+Hvs5","tlshash":"3b32f1961ce3243155a7b0394feb800929794a132094ee107fdd4744afc677ccbebaae","first_seen":"2025-09-25T03:00:46.120763Z","last_seen":"2026-02-20T09:25:33.841017Z","times_seen":15,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Findex.html\u0026l=2217\u0026fd=153","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Findex.html\u0026l=2217\u0026fd=153 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=151","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fsweep%2Fdefault%2Fandroid-btn%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=151 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nCookie: uid_id2=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl19914198=1; slec096243c593fed93985c51808d117044f=[5967418]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Fri, 03 Oct 2025 10:27:35 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77382\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T17:46:02.350849Z","times_seen":714970,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":45,"dns":0,"connect":9,"send":0,"wait":8,"receive":9,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77382\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T17:46:02.350849Z","times_seen":714970,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":47,"dns":0,"connect":8,"send":0,"wait":15,"receive":5,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/09/62/43/096243c593fed93985c51808d117044f.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:34:59 GMT","end":"Tue, 25 Nov 2025 21:34:58 GMT"},"fingerprint":{"sha1":"E4:24:47:01:B7:F3:A1:0B:CF:EA:36:36:30:C1:21:5D:9E:A1:7B:BE","sha256":"EE:DD:A9:31:87:F8:15:E5:A4:69:BA:E8:17:29:F1:0D:59:DC:1E:48:E2:EB:2F:1D:FE:D6:5C:C0:5F:03:5B:01"}}},"request":{"raw":"GET /09/62/43/096243c593fed93985c51808d117044f.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 29944\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b86f2073fcfb22ccc8b4f6e94b884985\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":76320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a06c144cec434ebce3ad60c39f9f3415","sha1":"72e9aab905e964fb5cc75460422b4ae5bd690af4","sha256":"91a0092af638e682f6b01c8d1700fc4c3d960b85b84e1c85ca91f8e3245792d6","sha512":"a5d236947c5a3351ba9e780cdf07a86955919a275802f0877e47611978805d0e777fc524bb87e2df1b9f4c0e5ca88f7ad5b0ce2711c59be7e0ab39446f6f9bff","ssdeep":"768:YpCxicwKzukjCm/hYE4JoYC3ouzBcXAnwrHpSFXcdDqxv1l2qo0uw7T3SPGw6RX2:YppUCQ37bwT0Rcd+9keSPj03W","tlshash":"d773ea4c3f95f1ad43a26073222f941bf12a1d51b06cf8c8d253e8bc6eb9769b536b14","first_seen":"2025-10-03T10:28:04.797826Z","last_seen":"2025-10-03T10:28:04.797826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":276,"dns":0,"connect":91,"send":0,"wait":95,"receive":90,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c7e42d97272bb843b83b8eb5a3bdd451\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":97,"dns":37,"connect":20,"send":0,"wait":24,"receive":19,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.hako.vn/ln/series/chapter-banners/13694/63e71121-cb31-4692-bc99-5980c02144fc.jpg?t=1727447414","fqdn":"i.hako.vn","domain":"hako.vn","tld":"vn"},"ip":{"addr":"104.21.18.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.hako.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 14:26:41 GMT","end":"Mon, 08 Dec 2025 15:26:16 GMT"},"fingerprint":{"sha1":"F5:9C:B3:56:08:35:B0:92:83:C9:43:DC:28:34:75:EE:F5:8E:6C:94","sha256":"D2:AA:5E:31:62:33:8D:7C:F7:F8:E5:0B:07:BF:DE:FE:94:D4:9B:B9:7C:D2:5E:36:4C:2E:AE:C7:25:74:35:36"}}},"request":{"raw":"GET /ln/series/chapter-banners/13694/63e71121-cb31-4692-bc99-5980c02144fc.jpg?t=1727447414 HTTP/1.1\r\nHost: i.hako.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 132546\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yDZTco1Wjp6SMJcvXBVwjNFdi8My7HDb%2Bx%2BjwoVQKcGy1eN%2B82sGPvKCW4I1QoV61J3UpMqcqCu7R%2FiXfnzzYsEWZCztqdU9A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"18574d9e630c9ed3ec7b00618b4f546d\"\r\nlast-modified: Fri, 27 Sep 2024 14:30:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-ray: 988bbf61381d783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x500, components 3","md5":"18574d9e630c9ed3ec7b00618b4f546d","sha1":"fc7727a8af76351d65d76237f03d2e5bba336d85","sha256":"f23adf6446f4f8d30e1644fd31f6077de5d32c0e3fc3d9be50919236ac5e78d5","sha512":"04d1608f282fa9edd7c3ef5d0d80d30e3030a42d35a70b5496320fc99e20830f94bf55cd991fc7992e4c92051727c3a375f45950858f5fbc9ea229d45993ac12","ssdeep":"3072:4aZL42aHVCp+E78SodFU7FijCCqehsbQDVTg6X66Sat:dra0ykhijCwDDVTNII","tlshash":"82d312f4b69fde11e8b487fd31232aa56f6038bc9624ed5e5741b20733a2698248c462","first_seen":"2025-10-03T10:28:04.800914Z","last_seen":"2025-10-03T10:28:04.800914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2599,"timings":{"blocked":943,"dns":793,"connect":2,"send":0,"wait":272,"receive":436,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.bp.blogspot.com/-BLtpwNOxjYQ/WuRiVJRy9kI/AAAAAAABKAc/C08_YJNy4bQbc-C0Lt1P-NSPzwZRfoZNwCHMYCw/w215/default.png","fqdn":"1.bp.blogspot.com","domain":"bp.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:32.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:35:43 GMT","end":"Mon, 08 Dec 2025 08:35:42 GMT"},"fingerprint":{"sha1":"FA:33:35:78:4B:F9:B3:79:E1:3D:5C:D8:6C:91:05:B6:53:2C:F4:BA","sha256":"40:2C:44:25:FE:AF:88:0E:42:C4:C2:C9:65:4D:59:CE:3F:9E:EC:88:5B:31:56:9D:A3:41:EF:30:61:71:5C:79"}}},"request":{"raw":"GET /-BLtpwNOxjYQ/WuRiVJRy9kI/AAAAAAABKAc/C08_YJNy4bQbc-C0Lt1P-NSPzwZRfoZNwCHMYCw/w215/default.png HTTP/1.1\r\nHost: 1.bp.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v20ca3\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"default.png\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\nserver: fife\r\ncontent-length: 133465\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":133465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 215 x 315, 8-bit/color RGB, non-interlaced","md5":"e22f1f3986ca5806cca486063abbf649","sha1":"d0c45f5491298c185ffa4e75c1895f808f8c0cc8","sha256":"38051340f739ed1e4e2d98fe9517a9de898183e211c543c89187a4ceac30d646","sha512":"b5cc6b9b23f46776d1759f5e86c9f82243c12b0ad3ac2bc97c47f9062248cfdf780ff97301e596591936ea528240baf8092faf42f0fdd5768d76b9b5657275c6","ssdeep":"3072:qagJktRK24npjcCQ2jz99cvgfcVlPay93:uQRCpwxVY09","tlshash":"25d3129fd62f01d1cd23d7c6a3a467e28b2bab0991dc2e15497ec8abb54d209c708752","first_seen":"2025-10-03T10:28:04.804077Z","last_seen":"2025-10-03T10:28:04.804077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":52,"dns":3,"connect":9,"send":0,"wait":388,"receive":45,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-96XMLJKYVT\u0026cx=c\u0026gtm=4e5a11","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-96XMLJKYVT\u0026cx=c\u0026gtm=4e5a11 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\nexpires: Fri, 03 Oct 2025 10:27:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137341\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406265,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"dd5429fc68f905a1b53377169080d027","sha1":"9d052ef24a8798910d79b2611af8bac11a56b9bb","sha256":"41b69b3fcdcc21fd3d0074b686173f8d18e89ba9d9c58af5d93dbddde93f9f7d","sha512":"d30ab3566d5728e23e66e6da822f64a65665be56e5462d4eb58f5318e301747256951e632b2bc086ed33317a7bfe64e6d13e4dbd3667b00f34bc81c4b1b44e07","ssdeep":"6144:/B9ZTP5DyYvRC1cZwtgk6dSLd6gyP1X+6Rcd:JnbdtvIcZwhRd","tlshash":"fa840ace73c674665396e478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-10-03T10:28:04.807579Z","last_seen":"2025-10-03T10:28:04.807579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed\u0026eb=bcc2bf15b54b9ef4041d8328a3a75221\u0026te=cb12021f3311658dba63bcdbf4a88a26\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=096243c593fed93985c51808d117044f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=2e8e4f51-9732-427f-9bcc-6d9cc78fd7ed\u0026eb=bcc2bf15b54b9ef4041d8328a3a75221\u0026te=cb12021f3311658dba63bcdbf4a88a26\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=096243c593fed93985c51808d117044f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=10 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 03 Oct 2025 10:27:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eee9987d57d37b15cb2a3f76087a5de3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":331,"dns":4,"connect":108,"send":0,"wait":111,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOSycMHjmFO9901wdPEFEc96x7zBdhJ2Uz5qtUxDWLkLa35CPhJGXIoJJDzK8FzR%2B6f9VuJSw6Djc2lNuX%2F0eUihCnUDbGfuHtGahIfUntA%3D\"}]}\r\nage: 347367\r\ncf-cache-status: HIT\r\netag: W/\"67bc6337-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 988bbf702b8cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-04T17:41:38.127382Z","times_seen":10392,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.8.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 9802\r\ncf-ray: 988bbf5b5b9856b1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e60-d78f\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 637472\r\nexpires: Wed, 23 Sep 2026 10:27:31 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5ySsG3VyyE64W4dEXXA%2Fjb4Iu9A%2FmOzG9z7P81YGd%2FkyYLwkW0EnOn0tEzDBKxP%2BPwD7YxvAknp2I%2FwqXSFow3Lpq2Pkwm3O7idoiQo9VYV6vtmEKPH4Or5znJira0kb1BVXDGoK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55183,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (54998)","md5":"77cbad34e5ce95e70847b074e05faeab","sha1":"50ccfd672cc8d4d4cff476204509c2fd51907ffa","sha256":"06d6e10886ed7de5561acab1935bce1c46174baa9cbd0bcb319aa3b69594131f","sha512":"aea425b5746e1f1b4f5a192da406712c751527712899b9f786f93d3c78d5fcde43314627cca3c2d62dee6f49845e0173b1a64d789728134607ab48ff185b1d1a","ssdeep":"768:nuC31UP18Pq4/vnU6UHJXkQCZ/WMQyjJKX7I9sGsQz5:nu5PWC4/vYH5BCkgc7qsiF","tlshash":"bd430bb8e54c41c9a731c44fbf82b2bc61b6f73ce5914d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T05:12:38Z","last_seen":"2026-04-04T17:18:32.57917Z","times_seen":3664,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":11,"dns":0,"connect":3,"send":0,"wait":18,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"docln.top/vendor/livewire/livewire.min.js?id=df3a17f2","fqdn":"docln.top","domain":"docln.top","tld":"top"},"ip":{"addr":"104.21.5.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:31.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"docln.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 03:33:21 GMT","end":"Sun, 23 Nov 2025 04:31:43 GMT"},"fingerprint":{"sha1":"27:01:1E:C0:B6:A2:19:0F:07:43:C1:E7:3C:7B:18:1B:78:F1:A1:10","sha256":"F8:51:FD:26:8E:70:93:E7:6F:F9:F3:D5:60:4F:7E:DD:0F:5B:E6:83:8D:1B:17:31:6B:D2:1F:9B:13:19:76:AC"}}},"request":{"raw":"GET /vendor/livewire/livewire.min.js?id=df3a17f2 HTTP/1.1\r\nHost: docln.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu\r\nCookie: XSRF-TOKEN=eyJpdiI6IiswaWNZMUpaTHVLUm5zL2ZGejVyVUE9PSIsInZhbHVlIjoic1RWTFJUaHcrZy9aVG55em5aMTlvVExSSEE5WWNGVS9LbkVLY3BWUWt5dnBOa1UxVFhzbWlXeEJKdnorc3ZHQjV6Z0NqZ0VIVWZXNVBLU0xDVklzS09tYkh0b2Z3NHU5SFJSV2FlTE16UUVSSGdNS0dSbDN1SlJHNlFneEViV0siLCJtYWMiOiI3MmZiNTljYzhkYzAwZGEyNDU2OWRhYmFlMjc0N2E5MDgzZWQ0YzA4YWVlZGQzYmEyYzliNTY4MDZiNTQ2ZjA0IiwidGFnIjoiIn0%3D; ln_session=eyJpdiI6IldTdjl1QlcrNzRxYS9JMDltS1Fad1E9PSIsInZhbHVlIjoiK2JnUHB5Y0ova0lsMUt5ZHFVQUl2NFYwa1pPZFRTTk5XaTJRYVgxQzZQLzd5ZnJMR0t3U01qOVVWNVFNZnM4WkJjYzFMYWszUk1pWEgwdXgxcXJIaVJERzF2cGtwVEtDQUhrblF4SG5nVWJteG9wSWZYOGpBNFNIaC9lMFlwaWMiLCJtYWMiOiI3ODU0YjE3YmY4ZDk4YmIyNTU0MzcyYmQ3NzBlZmQyYjM4YTNjNWM1N2VlY2NjMThjNzg5Yzk2MmYxMmZmN2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Oct 2025 10:27:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\nlast-modified: Sat, 19 Jul 2025 16:24:07 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KP45eN8hhoTtRnqsVQaHxAuHc0GEq1gfXtmviJj59%2Bfn1UpuFQzABOn5MzkeTMBxxzsx9df8%2F7aGaeEDdv7jCIdQ%2BPk0Xus%3D\"}]}\r\nexpires: Sat, 18 Oct 2025 10:27:32 GMT\r\ncache-control: max-age=1296000\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"687bc6a7-23fc8\"\r\ncf-ray: 988bbf5c68a856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147400,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45588)","md5":"01a4ecba1471b8db8c218a2d07b077ee","sha1":"eeae26cba53413392c6fb29f94a1d6874919be06","sha256":"7155486d3c2a795d1cc6234dcbcc877020ef5b4b352adbc7a13f5829c6b9db4c","sha512":"7310167c35148f35578a5c05db24aeac5fbdcf7aedf910910c0e0befcbe09895b8159d415ef52278b9aa8fa66ee6c437506c4ccb5ab3d26b8ddbc55508a8d5a5","ssdeep":"3072:gYwyP99xeip3tTv183sIWSiF6DPRNS4n+QxrA10Jfs9YcAo+:Pwy1nm8INUSpNS4n+QxjfZ","tlshash":"1ae308e9729ab17283ef117650bf420af3396884144f4028b62dd8ce3d3999951f7f7a","first_seen":"2025-04-16T13:13:48.08995Z","last_seen":"2026-04-04T18:07:17.111713Z","times_seen":1851,"resource_available":true,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":750,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"docln.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i2.hako.vip/ln/series/chapter-banners/13694/63e71121-cb31-4692-bc99-5980c02144fc.jpg?t=1727447414","fqdn":"i2.hako.vip","domain":"hako.vip","tld":"vip"},"ip":{"addr":"172.67.191.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:33.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2cd6855e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 01:27:26 GMT","end":"Sun, 28 Dec 2025 02:27:18 GMT"},"fingerprint":{"sha1":"BA:36:DC:AB:43:A5:C6:DB:26:BB:5C:68:20:67:60:98:9F:10:DC:12","sha256":"CF:2A:E9:02:8A:95:9C:79:43:86:A6:37:B1:49:17:D9:ED:2B:A7:88:80:EB:AA:2B:8A:2B:E1:AE:EC:E9:DD:F0"}}},"request":{"raw":"GET /ln/series/chapter-banners/13694/63e71121-cb31-4692-bc99-5980c02144fc.jpg?t=1727447414 HTTP/1.1\r\nHost: i2.hako.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 132546\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoHgicaF010vbb0GpVla2AtooT%2Fjlgh3GAg4iEO5yBAvm2J9z19c4HZzcOY8EzIuA8seWgqXLY58vaueIcoBSTKPjl7qOx4cFZol\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"18574d9e630c9ed3ec7b00618b4f546d\"\r\nlast-modified: Fri, 27 Sep 2024 14:30:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 988bbf650a24a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x500, components 3","md5":"18574d9e630c9ed3ec7b00618b4f546d","sha1":"fc7727a8af76351d65d76237f03d2e5bba336d85","sha256":"f23adf6446f4f8d30e1644fd31f6077de5d32c0e3fc3d9be50919236ac5e78d5","sha512":"04d1608f282fa9edd7c3ef5d0d80d30e3030a42d35a70b5496320fc99e20830f94bf55cd991fc7992e4c92051727c3a375f45950858f5fbc9ea229d45993ac12","ssdeep":"3072:4aZL42aHVCp+E78SodFU7FijCCqehsbQDVTg6X66Sat:dra0ykhijCwDDVTNII","tlshash":"82d312f4b69fde11e8b487fd31232aa56f6038bc9624ed5e5741b20733a2698248c462","first_seen":"2025-10-03T10:28:04.800914Z","last_seen":"2025-10-03T10:28:04.800914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":13,"connect":3,"send":0,"wait":273,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/sweep/default/android-btn/1/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2cPMRoMUwDf0OGAt44Rq%2BPRIGSyoZXNx%2BkdgJ0g0YOyd7AXMTD9xwUrlBabiwuUJI1wsLzRcguiXGbPLrhTeNBIfmeV2Vxdfp23FZI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 988bbf6eb84f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2217,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d21b3369c136b32da4247adc7cfc7056","sha1":"494534edf3c18bcab6bcb9582081439ded6fd9fe","sha256":"f5c419168292839cab1868c127220e25580b1edfba2b74e10efb97e49744d8a2","sha512":"9497ea1f7a4b587971a5593d02c4aaddf018d240cc9d1f0b9c6ed4ce87de0827862523da490221cf70c5771f4b4f07f76e2241871a6ca364cb167103afb401f0","ssdeep":"","tlshash":"6c41894a3de8c5b721c340d3bb352f52acc3e94b9906681077fd4a998fc9d51da83a07","first_seen":"2025-05-26T10:03:00.741327Z","last_seen":"2026-03-31T23:50:42.938783Z","times_seen":345,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":37,"dns":3,"connect":4,"send":0,"wait":112,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:34.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://docln.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://docln.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67bc6334-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBfm8iAf2wOI2cjE0FUk69Ra2nsWBA%2FnWe%2BKewXiFi7wsrkP%2F53dqRcBL4eMl%2B0O8s9jcp5Pda0O8bxloH4s9uznaDNV%2FHtugZ5HEk4T08o%3D\"}]}\r\ncf-ray: 988bbf6faa83c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-04T16:16:27.167609Z","times_seen":6237,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":32,"dns":3,"connect":2,"send":0,"wait":116,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/sweep/default/android-btn/1/img/confetti.gif","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://docln.top/truyen/2317-akugyaku-no-black-maria/c31328-chuong-12-ca-doi-tap-hop-chung-ta-co-nhiem-vu","date":"2025-10-03T10:27:35.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/notifications/sweep/default/android-btn/1/img/confetti.gif HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Oct 2025 10:27:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 206291\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Feb 2025 12:16:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67bc6336-325d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1265879\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO%2B%2FM5dmuoB6Nq9n5hML0A%2FQBVZUwS6YH8WaFJJ5qormT5bPw4DQYIWMQSN9jfxxK%2FBz43UUf4PwSMkY4tKtAKYI2iX4xZUP4hZiA4MbXMM%3D\"}]}\r\ncf-ray: 988bbf702b85c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206291,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 360","md5":"0b33face774f2203446507ce5f075538","sha1":"1dd3522529bce7739df0687f47f5bc84356698a0","sha256":"ac345899461d5634d25c47281b10e3c1886abb33019e2ce8140573a79e9f52f2","sha512":"58aa96c101e4a4cd0b2df5065639f0795b4ebb970f3a1e6c33a3a4566c3e8ae22038457f7eee59d70baaa03c63c369e9c8c88fc4dd7206c26fc6bfd602424f9d","ssdeep":"3072:uX7nWRsxeentKfdlIIn6vXDwyH005Z5JVaCFfXiceSPVUAV9FY7u:W7nWyee4fLII6vDFU8bfaivimlFYu","tlshash":"6c14e167d568498bca0931f02006167b6e79ecf57c78f87fb581b9825ebb42e35e1c02","first_seen":"2024-05-02T15:55:45Z","last_seen":"2026-04-04T07:03:43.891487Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}