{"report_id":"a0548ca0-1a23-4091-9be3-4c0faaf0e211","version":0,"status":"done","tags":[],"date":"2026-08-30T07:25:27Z","url":{"schema":"http","addr":"pandorajewelry-officialsite.us.com/","fqdn":"pandorajewelry-officialsite.us.com","domain":"pandorajewelry-officialsite.us.com","tld":"us.com"},"ip":{"addr":"104.21.16.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"title":"Socolive Gaea - Trực Tiếp Bóng Đá Socolive Mobile Không Giật Lag 9/2026","dom":{"size":1487759,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11437)","md5":"e47ff478a2e61ea2ef9c6fb07196ee9b","sha1":"24afd801d06f30a252ed30b476aba082aed4ce53","sha256":"4b63dfe589e3f5fadfdd9ab56c1eaccee7e022a13971e222aafaf3ae7fc1030f","sha512":"d269fbf41752dee73d3e1e2f861b3fd392b2b5fca596b76fdd20dba75228c4be755270ae9fe1b397621573dca85edee4d265e8fbfd1271a5fcc6ffe8995951e6","ssdeep":"6144:jF4o46wmlmlJmUmgBm9mjwmDmBSmqyWNbbCv:SpnIZqyiC","tlshash":"af6556b2509c251d54270fcce5bce72e2177e18dc5873088babd1f655bc5ceaacb21a8","dom_hash":"domhash35e5583c47e73fa7770010da55fcc110","first_seen":"2026-08-30T07:25:45.442813Z","last_seen":"2026-08-30T07:25:45.442813Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pandorajewelry-officialsite.us.com/","fqdn":"pandorajewelry-officialsite.us.com","domain":"pandorajewelry-officialsite.us.com","tld":"us.com"},"ip":{"addr":"104.21.16.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T07:25:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"pandorajewelry-officialsite.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"trafficvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"images.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"images.keovip88.net","ip":{"addr":"104.21.88.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-21","domain_rank":0,"first_seen":"2026-03-24T15:52:56.539915Z","last_seen":"2026-08-22T13:57:23.156802Z","alert_count":1,"request_count":1,"received_data":2717,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-odds.keovip88.net","ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-21","domain_rank":0,"first_seen":"2025-06-05T23:02:41.862537Z","last_seen":"2026-08-01T10:56:29.783739Z","alert_count":18,"request_count":18,"received_data":6097576,"sent_data":9085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gaea.tw","ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":52,"request_count":52,"received_data":17539020,"sent_data":26994,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"odds.keonhacaitp.one","ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-07-03T11:10:28.374838Z","last_seen":"2026-08-08T07:01:59.131558Z","alert_count":0,"request_count":8,"received_data":586478,"sent_data":3993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pandorajewelry-officialsite.us.com","ip":{"addr":"104.21.16.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-29","domain_rank":0,"first_seen":"2025-07-04T08:32:19.706808Z","last_seen":"2025-07-04T08:32:19.706808Z","alert_count":1,"request_count":1,"received_data":535,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"seo3-banner.megatech.global","ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-25","domain_rank":0,"first_seen":"2026-04-12T05:32:41.655648Z","last_seen":"2026-08-16T03:33:00.49548Z","alert_count":0,"request_count":14,"received_data":5148446,"sent_data":8126,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-08-28T06:19:38.517762Z","alert_count":0,"request_count":2,"received_data":7498,"sent_data":1058,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"octolink.vip","ip":{"addr":"172.67.176.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-01","domain_rank":0,"first_seen":"2026-07-11T23:17:08.580893Z","last_seen":"2026-08-27T04:26:55.188062Z","alert_count":0,"request_count":2,"received_data":1518,"sent_data":925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trafficvip.vip","ip":{"addr":"104.21.71.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-04-29T10:51:05.796953Z","last_seen":"2026-08-27T04:26:55.149802Z","alert_count":1,"request_count":1,"received_data":1521,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trafficqq.io.vn","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-12-15T06:34:55.801058Z","last_seen":"2026-08-18T18:10:06.47993Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"socolive88.club","ip":{"addr":"104.21.1.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":515,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-08-30T09:19:46.841596Z","times_seen":50433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bf0d655ba3d68db5e6e1821eec0d913","sha1":"309a878cad93f46d0335f7d2979215e21040e1f8","sha256":"058f60a177f305b47dd6729b7e5793ed5d1b7cf5637d07ed3ae0a0cb311fd70f","sha512":"19301ca09b1292d088de3cdee997c877caf624818ab1cd2217074ab0aa00c692ef898a9f8bc22aaa5afda6bb642e39e75d055d6ebb9faf27d8bbab4b4f166b57","ssdeep":"","tlshash":"f9212538e1f4a8b144bab1be272fee08393b0497b08d7f14358c0e496f584bc2a63557","size":1163,"data":"","first_seen":"2026-06-08T06:39:07.317011Z","last_seen":"2026-08-30T07:25:45.565312Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3995ad7245e540c0e0369e7e6db347e","sha1":"1d9ed925abb81713dd9ad415ab2b1051efd0c8c3","sha256":"97f53018e38aaf0bd44a3d5e50e78677c07517b5499921590f3b7f664ced0e1c","sha512":"2ab3807eea17c89de275530be3792b9ffd8398329f76b413defd9e95d27290050ff52d4bf1578a871c8c29b2a49d92d02d0c11e3a35ad4f02d3a76b4036cb915","ssdeep":"","tlshash":"99d0925a9484386d921391308a3c82022a514a071e296e28335e29083f5a30e0df29ed","size":219,"data":"","first_seen":"2026-06-12T21:08:33.517848Z","last_seen":"2026-08-30T07:25:45.567428Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a119b7a360807a9154c7d444d61d4235","sha1":"cd3327d3a03ad4aa89aa6f5d9849ce676b70b211","sha256":"0d307ddb361aad6ddd8e6f1c8b79fc0b252e843425c603c9423dddf8f37a8fa6","sha512":"495495cb24924268c6c2f5c6c4e0aaff6779b04d76c97b8ddf87b5d77a2892063e17ab590467c0349a400e87511a7e59bcb8e569741f3008dfa611de0f157937","ssdeep":"","tlshash":"39012bd35c5fa7571f09575e091f614a24ca2b92c9e3fb844a8261e018fb352c2c6c7f","size":690,"data":"","first_seen":"2026-08-30T07:25:45.569376Z","last_seen":"2026-08-30T07:25:45.569376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89887e0b1de8228a3c7cb28a9b7c4cb5","sha1":"20bc2a32db0e13285a625000cca40a5c434b6fe9","sha256":"93616cdf2d89ed3bc4b2a97af4901d55ee1c9efeea79c5237848dadcc98c6ddb","sha512":"9abcd28ab6c79ed84d81ed6668b7a804240c938c4402bcd3e1dd6bba6109107dcdc796f01f3a9e6ac6e392f7f8bfa55339751f471aca2a53fd3b43283196e8fc","ssdeep":"","tlshash":"caf05ca79a8a69b283dd02d47169321a501532c65666dd30c7426a9044f2e96d0d0ebd","size":456,"data":"","first_seen":"2026-08-30T07:25:45.570797Z","last_seen":"2026-08-30T07:25:45.570797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbe3e09a8c80b719c5006f9fc8d9deb6","sha1":"99caa7591b369c5d2016b5b0c1d0f9f870f2e23a","sha256":"e3365eacd45d13e0fa57fdd6bae737df560d605e858b3bb6c662cf1615dc6c70","sha512":"0db0d415e4c28694d8ad0ede7f9dff33d81f50c5897fbfd116216c930cc6b4234ef037082db97830f5706ecdb2f8e22b0a242a4040f5638fa2d6ee8a4a4d506f","ssdeep":"","tlshash":"692188b9632da12c91cbc186df34bfac9726313114447510eebf8d3991928a832aa61d","size":1292,"data":"","first_seen":"2026-08-30T07:25:45.572179Z","last_seen":"2026-08-30T07:25:45.572179Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c07dd03f01a591ce71b56339927efc5","sha1":"f797e4a47120341045330510f0a6971f0fd4bef4","sha256":"14bc02d80b3b61321ba0329c8a580264bb12517134339edb27b8013058ab8d5d","sha512":"0c07424210b001262c4a288134993f82b53342070570b47ebd108305cfda032e27126ee84fc4b405d9bb05ddfa88f7a9a63a7cc2a637bc86b84da950aa915363","ssdeep":"","tlshash":"9cf03064364a98dca07728a5fbbf527039863152b80de545bf9d34161f11271342e27b","size":556,"data":"","first_seen":"2026-06-08T09:12:47.865803Z","last_seen":"2026-08-30T07:25:45.573527Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-30T10:23:01.753168Z","times_seen":427864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-08-30T07:25:45.559873Z","times_seen":17620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","size":16237,"data":"","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-08-30T09:38:22.32191Z","times_seen":15822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/splide.min.js?ver=4.1.3","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0758be5332e68750471d7862fe1a6942","sha1":"be2bb3e06d111e4ee8fbd0353d9455b408d47f14","sha256":"fd62e97ce1efec8f038643c0fa0a54cff911926b8eab345bb14b1514c68e5c3d","sha512":"9a93cade9bd16eb1d7b94a15825dc4bb81a421459a1d986ef1b0e8984edfc10544bf1b0508d480aa9f72a16e32889e724ffc6b775892104e27731549c2953218","ssdeep":"768:xveaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cv:x5VfqpGvPqZWyNf0L0pvjWCwF3I","tlshash":"90d2d68cb2c1b42a279364f3a1af044b627b29455c0e5510e4eaf8f47c786bd936bddc","size":29803,"data":"","first_seen":"2023-03-10T00:35:49Z","last_seen":"2026-08-30T07:25:45.468642Z","times_seen":2781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-other-CJzWRXuu.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4f71f580bd8b29e30a31c330ee4f0a3d","sha1":"96faadf3f7881593b3270ee6f2fc834b2cbca8fc","sha256":"2679004b12d79f77af07f5bd597283ace01e7797597d267f27421d4033be1858","sha512":"59d9a19314fa8a17682f10dbe2a60d7fac3e8b1d73b5b1722949b8434ccbe1dddeff3e700cdf223e57ffef4787c3b0f100de4e0b0c1d6ca817b7a58fc024b05f","ssdeep":"96:Uaz5IabueXBCZxQjm4PRBCXma6nwGBGzQujZ1AFqLXgai3rGcaFZix0ArQ:7z3zU2nrnmdjAFqUiDO2","tlshash":"3b91a5fdb291702503a2f2f2411ff51b643587516c88517586aae7f13d708ee11dbf1a","size":4211,"data":"","first_seen":"2025-03-15T06:13:59.855109Z","last_seen":"2026-08-30T07:25:45.532191Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/hpps-banner-js-js-extra","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ade86cc4da1b7bfeff92ee34b43a0f8","sha1":"f50602b2191d950da9a968c4b73c4fbda415bbc0","sha256":"66a33322d03be573d0878fa9f23fa1a39c953f1e67acb45fe66a6ab064d8ccb5","sha512":"97cdb07955ecbf6ecd40ac6270de824945ff38780828901c6797911022c4a987326e92a14f5d71df617ffb76b66dafa42cb9ca77ac55ed820940859a765ad468","ssdeep":"","tlshash":"e451fcd3dc5fa7571b095779091f614a24ca2a52c9e3fb844a8651e018fb352c1c6c7e","size":2504,"data":"","first_seen":"2026-08-30T07:25:45.574663Z","last_seen":"2026-08-30T07:25:45.574663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/banner.js?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c3c77b96689f39805db7a7885aae580","sha1":"1ada4d3a0eb54107a7171cbd1826e68126c9e0fd","sha256":"0b02f7c85cc2f19e5092c31c88a2aad5d0401d78f0774d73edbadd7e82c5cb80","sha512":"24811117176225ed3741307f8f777e218f4b41e67f447f98b35b219e91a754e8788f301f3be3d8787ee5688955951f0ba88563c712b7bb3b4a7fbe0d734b6f14","ssdeep":"96:2TDihiuTDiiiKsIDmpQ5biryE7uO0MhFQEYid76l4jWctO5lkafE6hjsWgxfb3rn:2TDihiuTDiiiKIQ9E76MhEid7pKIglkd","tlshash":"c9c1748ea0f221735d27217d9b9fa61570a6a01b4444dd047d0e938a6f94f3a42b8aef","size":6021,"data":"","first_seen":"2026-03-26T14:57:39.883895Z","last_seen":"2026-08-30T07:25:45.513585Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/hpps-popup-js-js-extra","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"737ebe48629c339443c1b72e0ec5fe0b","sha1":"1e810c62dce0dfe72ed587d3f8783ea83d1c3daa","sha256":"b1b59aebb56636f5f85f39866480fec40b93b54d20843f1e296c1bbd52e1aa3e","sha512":"79d83eef2b5bddfb4781be8da59d62a4914028bc66a027ce065925f141d26b4f1ac52c67903b5191c01f1c22a1bb137e453c54b8034ab65bc6214036b33f1502","ssdeep":"","tlshash":"ec41dca3da8a68b2c3dd02f0316d320a401532c6d6a6dd30c3026a8004f2e92d0d0ebd","size":2275,"data":"","first_seen":"2026-08-30T07:25:45.575813Z","last_seen":"2026-08-30T07:25:45.575813Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-30T09:19:46.774188Z","times_seen":89890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/wp-emoji-loader.min.js","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"814f09140f372acf5a1899b1e9d33012","sha1":"8febbdc664bc083228a048dee66c12abcea8a505","sha256":"d22cbe04634b7a32b284600fc7da0f2ea2187e91bacafc4dbe94b04d383be784","sha512":"42c07c93032d0c1bd40030a850896037f2daacb992bcd6f303e053c3dc81112d5a990907eccddb542f05c2d33af8c30c627df228ce229387f72e754cdab77fd4","ssdeep":"96:wrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJW:ks7NAME0+eWjQvJB9","tlshash":"13a1b659eb7938df33fa01f3693a0d4beb604436e784d038c9ae631424b1893c375a0a","size":4878,"data":"","first_seen":"2026-08-30T07:25:45.576895Z","last_seen":"2026-08-30T07:25:45.576895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-30T09:28:13.305568Z","times_seen":45264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/odd.js?v=1784257330261","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a8b54be7fea923bae0591b76aa45ea","sha1":"fdefb858b5932d0f93a6969e5ed82ebbb0c94ec1","sha256":"5ade30cbc4d44470c71ff3a68a07662096e7321f8945e047a876292ba201d461","sha512":"270c9184f11fb8b6094d4ae072c08e49e118ae62e0977a6c4dd81c3e67def5da110bf387d9f2ca71b93e783aed42bce662a376e203472f569e352a105cd087eb","ssdeep":"","tlshash":"5401208e618059aa5d847ce9d52dd6a431b60349328ac7d0949c5d017b280abe53be8d","size":759,"data":"","first_seen":"2026-05-14T10:22:58.254433Z","last_seen":"2026-08-30T07:25:45.51712Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/flatsome-js-js-extra","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cba3e5c134b756179e6cd92d1e41d27","sha1":"87e031ac01ebff866634275e68014688e8630e40","sha256":"78ee3d3bda86577ba2da03b3b3177f4642209da6b4c421ce3b55c8fb12dfe1cc","sha512":"6b5d084ea00d1439e151e5c91d9f9a31189a4acaa1da837953426dc6c89a737289d4a245b387c850363e41267d3c15681f7dbede5acb87fe90a5fdd6cc683496","ssdeep":"","tlshash":"6e51be79e31da12c90c7c1b6df34bf9c87253131d4447110eebf4d39919286832aa51d","size":3117,"data":"","first_seen":"2026-08-30T07:25:45.578905Z","last_seen":"2026-08-30T07:25:45.578905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trafficvip.vip/js/qq.min.js?v=1.0.2","fqdn":"trafficvip.vip","domain":"trafficvip.vip","tld":"vip"},"ip":{"addr":"104.21.71.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47474b2ad6efc68d926982f755c5a40e","sha1":"45255f56b65f0705856e261bc7f918d6ebf9b160","sha256":"6c61257d440d9659be3d04dfa1273b53a98760f7bfa44c95a7797768f40fd44b","sha512":"5e99b768ed8b38b90833de396b58580d7dc017f37717d602cb464c5d87d22a8481201f1ab6d3e0d5a0e3c7f986d6b9e60db3b5851c721190ca19ff12f7472ca1","ssdeep":"","tlshash":"2701681e8df1e832502720ba699fa01871a05e1b4854da54ba0ce6fcdf55ebc062addc","size":770,"data":"","first_seen":"2026-08-02T02:20:47.160191Z","last_seen":"2026-08-30T07:25:45.534689Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/odds-Cyh55BP-.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"095906be9ddab527bb4ec840fa0c3196","sha1":"4c3e554644084930f3205f8e4d758cda85230ad2","sha256":"8702dc55353d9c9630c828450f9d5400ea04602ec4d58dae9e5fb1672246a97e","sha512":"a65e4e9d19ebc5f2d0bbc81f2d6c58fec258a83af6c11e390aa5b3f244238ccf6a63065e7cd8e7a728101239b10c16311a27348bfb3e2bedbbc996e4ea9ee798","ssdeep":"768:GALa42Opuq/J8Mlk2QSY+1rPCLliBQ/PxXJCfT02KsslyiqY01FLrPtoNOMyYcR2:la49S200BI8Jf/qVkTd0k411w71RoFj","tlshash":"5373955cc03d961cf820888cd87f822b641a795be219f8e5747f1f390734a5677a63ba","size":79878,"data":"","first_seen":"2026-05-14T10:22:58.316325Z","last_seen":"2026-08-30T07:25:45.550426Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/setting-CQlIWeWc.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3a09876b33ec854e6e3c90670d77d443","sha1":"64b4ee8e4e11631818ec952937796682afdaff0a","sha256":"78cfb6ff8a315b9af2198ef9a07e8fc228959c184ebfcd6afff4c4fd7fcf63e1","sha512":"517539dfe29cb3dd39ffaeaff24bd773a703e94efbf896913cc585d855019057acfbeda22aa920e44dd7822dab4cccb0c2de2be7a829c38d7d2e6b53efda21c5","ssdeep":"1536:LXnsZiZx5I6YvXVmWLI+++q++l4Du9zp0Armwtm4FWZHMENOcTN024DG0kV4ImRy:Lqe+++q++i7awDirjRlavkBEtH3","tlshash":"9f248554e109fedcf83699c89d6f400a345e2eaed26909d1e1bf3c150b7095e372af98","size":215947,"data":"","first_seen":"2026-05-14T10:22:58.308777Z","last_seen":"2026-08-30T07:25:45.49132Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-30T10:22:12.331561Z","times_seen":1039629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/guidePopup-D84pqyLe.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baab1b4881b84188983fa106c21ff1e3","sha1":"bf5bf59086a7d93ec0ff1b968a676f2b51d32ca7","sha256":"17434b142f626bc8453008c05df1671089a4721e70a4cbd5649c78d6158a24c3","sha512":"cc98ac98382b65e69aad695ee5115637a728ef3f3456cf6c9113e7bcf4ec3707d045878b123abb71f609aa9f3d4250c1ec817e0d5baecb73cb95693440e09b2e","ssdeep":"192:5luv/Ro93yzaAKtu6K3+rNK8G9Qrrp7nrp7nrp7nrp73PpnNJnNS5QQThYLY6s:5ov/K93yza1tu6K3wK89PxNJnNPQlYkz","tlshash":"f732c8e8b258f42cc56249adb57c5501f01be4b4bb1d98c0e1bc0f2f5978893b872bd9","size":10969,"data":"","first_seen":"2026-05-14T10:22:58.306794Z","last_seen":"2026-08-30T07:25:45.54855Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-react-DI6U0GXP.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1616b574ff2d0f029be8522f1e6e3e1a","sha1":"5337b793373001914e03957686e0bb42d3a9919c","sha256":"fb05f17949ba6aa0f39594d46e2c3f61252f09c1c81c851621739c39d4283ca7","sha512":"fb47c66faa2315345ba9fbeeac03e3481fbc0c46d38b1b933a1b7bf07952661c2272acb433fd3f9021f1cb1f4f906727321a0a50b4f9a6cdfe757d4dd000f378","ssdeep":"1536:4zovve8aF08e/rzauY3elIX821Q6G5bLdi2aod++JKsBy0Z9WOlvMk:EovG9N93LX8X6GldzaO++JKsXZB7","tlshash":"63e3f9ec31beb6626ba3567610af1507733d28171c0c4860a111fd9e7bba40991bbfed","size":152071,"data":"","first_seen":"2025-10-24T13:28:17.483565Z","last_seen":"2026-08-30T07:25:45.498042Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5736a54ea2f7d768700c849aeb2b3f","sha1":"4c80335a09ea5134f7a0922b58c56a00a8d0db0d","sha256":"bec887feaec684bbc55998c457617df16605234f032386cd8068ad2dc8964a5c","sha512":"ece72dc5ec85a9e219c882d10411d848a2934b4f4d2fe6143cec5e349b5d4dc0b459e04563b44be0cad18092126729a4e47eaa2ca919d0a3f5433f4705d66e94","ssdeep":"1536:X/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Mmlz3JZt6w","tlshash":"cf23635eb241363941cff1a7622f464ea273206d140180acf8a9ecd65db9c8d743bf79","size":49913,"data":"","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-08-30T09:38:22.324178Z","times_seen":16393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-30T10:22:12.339777Z","times_seen":951385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/js/popup.js?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a2401b240a4b0b696fc54556410997","sha1":"2f776df3c35bd697450077125b088fa0f0b63565","sha256":"836a6717ef71f74067374fcd3760ad15a77cad2815cfbb5055e422c8d9ce17c8","sha512":"35d634c731d802d2ff41735ae79c45ad8afc678bcba239c068e4e609c4a78e3ba6df6df2e9bfa5e9a562eac027f9c12025f2bb6f5e01bc65a41d6c3b40d9c502","ssdeep":"96:7Te9syLWIlR260IyvHE+RsROZazlkBfrcNLvaQ0igB9I2czhL2s6ylc:HyLWIlR260bvb1azyaNjaZic3Wc","tlshash":"afd187e870e770514277b07c4feb90697235a803620ecf507c2c53916f94a7a97b27ae","size":6281,"data":"","first_seen":"2026-03-31T08:31:00.751058Z","last_seen":"2026-08-30T07:25:45.555973Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-axios-Cm0UX6qg.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9d103b8a3da52f44127b7884756d8840","sha1":"360eb8c64f2f050f5f92f956938e94bf398545c9","sha256":"834daf1d33cd08f613a39c2fa8fb019d3ba53f737f71213f5031a5d494b0377a","sha512":"63cc0d86518cdeb2abb15670e58961c5eaaa955dddccd7e549dabd7c9f4f7cfed5a13e8d5ed1afdbb0b063f2eb05baadbacfaa27c4fd78106de736e61eb8914c","ssdeep":"768:ljcZZh+JqZPpninNKwEzAzLDFcojn+O3Ud/o1KVyz1hbK9BqOBcYVef9NpAT/bJF:lYI1eQE","tlshash":"5cd208c5b6d1b06243ea61f4406b4902f33aa925744d84e4f16c9cdb3cb640a87bbfbd","size":29744,"data":"","first_seen":"2025-03-15T06:13:59.832841Z","last_seen":"2026-08-30T07:25:45.470722Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/js/flatsome.js?ver=a0a7aee297766598a20e","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f13719c0342913a1990f6ffff131bc5","sha1":"1bfdb4055f5960d97decdf88f16a250f5568173f","sha256":"1ce97f1528f3d41dff547488d8d57c66637423dafb1bca9fe5c48861b2739725","sha512":"b060a6ca9f4f4bec1f9e169b3c03bd2af3789c112ce63aa279d218d5d9258dd20d3ba723fe3e251dcd520612aacf3a35ffaa93bc65694e3273227cf8fd1021d5","ssdeep":"1536:c9wJq+5+Q8kNSBEpeLMEXmoEtZccPhtUaD3o1xj:qAzwLlgP4aDI","tlshash":"cb33d819b25070fe01ff61a7f13fa32432376525b0174054b52d98fa2d6ae5e22a3f7a","size":53856,"data":"","first_seen":"2024-04-05T15:17:42Z","last_seen":"2026-08-30T09:38:22.033606Z","times_seen":2100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://gaea.tw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"log","text":"FAILED LOAD:https://octolink.vip/statics/jsconfig.js","filename":"https://trafficvip.vip/js/qq.min.js?v=1.0.2","line_number":11,"column_number":13},{"level":"log","text":"jsconfig failed but continue","filename":"https://trafficvip.vip/js/qq.min.js?v=1.0.2","line_number":23,"column_number":15},{"level":"log","text":"FAILED LOAD:https://octolink.vip/js/shortearn.live.js?v=1788074692239","filename":"https://trafficvip.vip/js/qq.min.js?v=1.0.2","line_number":11,"column_number":13},{"level":"log","text":"shortearn failed","filename":"https://trafficvip.vip/js/qq.min.js?v=1.0.2","line_number":36,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074698722","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:58.727Z","timestamp":1788074698727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074698722 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:59 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnWe0pxUiolvvCxo%2BAVDRIWOpsDfhXobOMbT6idHRC6cfxVSbwbjqR29n5J8d49g43N9h4YXBGu6ah0b0GFaok3Svs0Wd1X6%2FyvmpgtbfHznkrU%2FYYbH7At6VaaUrDhXM%2FwduuhoKEI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f1309a20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35219,"size_decoded":3993,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074702723","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:02.724Z","timestamp":1788074702724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074702723 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:03 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78Z5lRaheX9eulNocIp2PkhP9Sh8jgemZ0OWWG6eABSDMMQFLb1vJo8II7wJGZwS%2FkK2HBUFEG4dno4boAlgZ%2B%2BOMxV5XnEIspsiuhm%2B%2FuSAJoKtRuTVQ8pjqN%2B1Vqzo0%2FRkHVgtc5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f2c0d0c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35452,"size_decoded":3986,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/css/splide.min.css?ver=4.1.3","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.052Z","timestamp":1788074691052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/css/splide.min.css?ver=4.1.3 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"138a-6a3b9fab-23261410;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRdI47PtntoGSOKLU2526bYU1Wl8LHPz22Iy3GYaqRD88vWoRl%2BzfDbIUOwZ6aJoEqA7WzIWhDd%2FwK6JMv9YY%2FhK6E28JSxVGRjoYoJQmaopeth6F3UWd4W6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5002,"size_decoded":2294,"mime_type":"text/css","magic":"ASCII text, with very long lines (5002), with no line terminators","md5":"f6a86e8018fc1f6ae254b339acbd1cdd","sha1":"9c256ac79696564334355f8c4b848590677fd583","sha256":"e6e2a25c4c1b69087d720776ff9569e9698c9ec52bdd5659c346bcaca9ce28d5","sha512":"2a1157a5ef95244bb91d86c9c8a42cf55bf0181fa341ea6a6f8667961505fe3406c5825c8ddc4e4dfe9caf8e3984e73bf751452ecd7c0ca5697eb42738d381d6","ssdeep":"48:rnF+gynUstetUM4CqYR24ZKOVebUilVtggB5D8IGZxeTyMg5fy5g5N9t3+GIjbM/:rnbsi4mBVYUqt1gt6OH56C5TjV","tlshash":"8aa1852241c53f9e94525b33299debedb0e98333846a427aeedfd11002855594fec6cf","first_seen":"2023-04-11T10:00:46Z","last_seen":"2026-08-30T07:25:45.464202Z","times_seen":8750,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/css/popup.css?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.053Z","timestamp":1788074691053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/css/popup.css?ver=1.1.0 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"d1b-6a3b9fab-251e6d03;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSy7JMFItoBHf3Z%2FEPsmFztpdTFeOkSKHa5vn39p97T44RF7kjDLFX9%2BtJT87z8P0D5U3b1rreSpgtsZovs0KqY70pFE8Z5ZVlGiwaqe86B0epF7%2BS3Wtova\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3355,"size_decoded":2068,"mime_type":"text/css","magic":"ASCII text","md5":"be979887246baccd2917fa09f07f9552","sha1":"9971f37f5f19e99e81f293d9cac0436e7a504196","sha256":"c6c87decf94ca1729d43cc08cc47fc4d3f8c9220f0585c1b88c20b22ac0a7e82","sha512":"76d7ac2c5c451ebca1ed0b7a404a822495424717052e9ee27cb33fd9c13aea3c4be80d8059d2b3cb513979bdbc929ebfba059ef4d83dae857c9288dc834e2521","ssdeep":"","tlshash":"f861ab93aad5214a302bc150b6b333fe79bd4401a30aef3556a433789fc7bc395a6360","first_seen":"2026-03-31T08:31:00.702638Z","last_seen":"2026-08-30T07:25:45.465636Z","times_seen":17,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/splide.min.js?ver=4.1.3","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.349Z","timestamp":1788074691349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/splide.min.js?ver=4.1.3 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"746b-6a3b9fab-24272b1b;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BM9wUxTPjYqHku%2FY0Dmnf9EB1cbquVyAlbu8VrKwXf1KFWjvY9xdFiROTm1FPYVMoETSjSI7DA972iXd5NUveSDNvmHDUS1hk%2F28egGbdfTK%2BP7cQINKmPkZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4eb0c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12607\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29803,"size_decoded":13684,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29400)","md5":"0758be5332e68750471d7862fe1a6942","sha1":"be2bb3e06d111e4ee8fbd0353d9455b408d47f14","sha256":"fd62e97ce1efec8f038643c0fa0a54cff911926b8eab345bb14b1514c68e5c3d","sha512":"9a93cade9bd16eb1d7b94a15825dc4bb81a421459a1d986ef1b0e8984edfc10544bf1b0508d480aa9f72a16e32889e724ffc6b775892104e27731549c2953218","ssdeep":"768:xveaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cv:x5VfqpGvPqZWyNf0L0pvjWCwF3I","tlshash":"90d2d68cb2c1b42a279364f3a1af044b627b29455c0e5510e4eaf8f47c786bd936bddc","first_seen":"2023-03-10T00:35:49Z","last_seen":"2026-08-30T07:25:45.468642Z","times_seen":2781,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-axios-Cm0UX6qg.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.783Z","timestamp":1788074691783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/vendor-axios-Cm0UX6qg.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-7430\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9pm0ru7f%2FZu%2BTVDhRFq%2BlDfntYdkIUa7YSUdu63fVCMBO3nZGmERuqYu4WEKTWGBneCVD2HScZwDG2g3hk4%2F55OromnzkMgydrCeQxxZAtXDWHebJtKXvhwpLqelXe8pi8YEB88ig%3D%3D\"}]}\r\ncf-ray: a3320ee7a8a20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29744,"size_decoded":12816,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12871)","md5":"9d103b8a3da52f44127b7884756d8840","sha1":"360eb8c64f2f050f5f92f956938e94bf398545c9","sha256":"834daf1d33cd08f613a39c2fa8fb019d3ba53f737f71213f5031a5d494b0377a","sha512":"63cc0d86518cdeb2abb15670e58961c5eaaa955dddccd7e549dabd7c9f4f7cfed5a13e8d5ed1afdbb0b063f2eb05baadbacfaa27c4fd78106de736e61eb8914c","ssdeep":"768:ljcZZh+JqZPpninNKwEzAzLDFcojn+O3Ud/o1KVyz1hbK9BqOBcYVef9NpAT/bJF:lYI1eQE","tlshash":"5cd208c5b6d1b06243ea61f4406b4902f33aa925744d84e4f16c9cdb3cb640a87bbfbd","first_seen":"2025-03-15T06:13:59.832841Z","last_seen":"2026-08-30T07:25:45.470722Z","times_seen":50,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2026/01/keo-phat-goc.webp","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.113Z","timestamp":1788074692113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/keo-phat-goc.webp HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"107f4-6967db4a-1216c0dc;;;\"\r\nlast-modified: Wed, 14 Jan 2026 18:07:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O56n4dFR%2F0k%2BwG4XP8IkggKfMaWaJBwj51yhHrC2uQJ%2Fr3CuyCfNaa01tipcNWDHLmaDDfzOx4GzhC1%2FcsIA2jM4T6hOlz6xZE5t%2FdGaUev8giLZVT7%2Fq%2B2i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9bb5356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":67572,"size_decoded":68654,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dd43d11fa06c59571c13f0b3594ae2cd","sha1":"5f447496592c906d1a3e05e552ea30236484b250","sha256":"3c451e9a7fd3fe6b54cdb70d88daaab2f338ef0af51e1e4c834dad21c69a51de","sha512":"776c1956ca9e8d00e5afe26753b790ac33118015f2373c7a4bdd17ae4c421c2ed492a5da11c23a823a8089c24457d90de46e9b729f1833428cff9a5c9884950e","ssdeep":"1536:s7fdKsoFNlDy0z5CM5nbnAF747asexZe8PCDRmEnu:sKFNSM1zA947aBxo8aD9u","tlshash":"d163026aa8aadf04d82d9f3086094c890c75ed55417477d4628b78ae8cfb25d4ce3fec","first_seen":"2026-06-26T16:59:51.849746Z","last_seen":"2026-08-30T07:25:45.473152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074692715","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.736Z","timestamp":1788074692736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074692715 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONnJSBWxA4q4UQnt4YssD3vFiivk4%2Foidu8FWgwHI1Xmr5t7Rpq7xB2dar%2FPUZH8x1k7CiwlyJ0n8zCUjiZH58oridiNUNVVH5TUhklgiMoQ0xCXd0sgx3rf%2F60QthCXPBHz%2BA9oUpY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eedcd0e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35219,"size_decoded":3993,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":564,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.925Z","timestamp":1788074692925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"58e0-6a502b31-619279e;br\"\r\nlast-modified: Thu, 09 Jul 2026 23:13:53 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYBGrVwhZcVwtA%2BYL6TMbsIeOBfUV4wd3yN6ye8gJo0VfPT6sgXYxbmgdXIi1trnZRmoSvrq%2FXL4hOyVQ%2FbW3gPV7YWZ01CxE3UH%2B1ME2tdYT1h1Ujraf7yF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eeecb8256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22752,"size_decoded":6013,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-30T09:28:13.305568Z","times_seen":45264,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pandorajewelry-officialsite.us.com/","fqdn":"pandorajewelry-officialsite.us.com","domain":"pandorajewelry-officialsite.us.com","tld":"us.com"},"ip":{"addr":"104.21.16.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T07:24:50.050Z","timestamp":1788074690050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pandorajewelry-officialsite.us.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 17:21:15 GMT","end":"Wed, 18 Nov 2026 18:21:11 GMT"},"fingerprint":{"sha1":"AD:A6:19:33:70:41:32:3B:72:0E:88:16:81:79:D3:5D:A4:82:3C:E2","sha256":"2E:A8:65:56:39:BF:7B:A5:40:B0:D6:DD:ED:2C:12:D0:9B:0B:AE:1D:31:13:BC:35:73:28:53:66:3A:A0:93:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pandorajewelry-officialsite.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 30 Aug 2026 07:24:50 GMT\r\nlocation: https://socolive88.club/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FltrlCwrJC4jdT%2BPEdSoCwU9nnLmy4M%2FbUoyE4tmzvgHMBhOU8Bb5XMT2WQ5ZvgX4q7LoRaBDt40kZcF6CnV15oxVlekIpRDoNAoL5%2Fl%2BS89gZHx7g%2Bb%2B1Ta6f6ZE%2BkFTuVk0Y%2BaG3Pm9kwbjzw1XiGFmJP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3320edd6fe35693-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":77,"connect":17,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"pandorajewelry-officialsite.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/09/socolive-truc-tiep-bong-da.jpg","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.112Z","timestamp":1788074692112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/socolive-truc-tiep-bong-da.jpg HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"160d0-68c4c62d-264405cb;;;\"\r\nlast-modified: Sat, 13 Sep 2025 01:17:33 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvmDH6sRX8mhOHCVmf2azJYiAalkxFhUzvS4yTdzhotT%2BIe9ju3JQccQbVwvj%2FgRvMr61iVBuOPgX8ueBllk2YbkGeExBDHhqxVo7lGblk74zfhoXqjcOL1F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9bb5256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90320,"size_decoded":91392,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 800x400, components 3","md5":"897a0887cc5b4934dbbff9c0de267879","sha1":"fa847c17176114005f1ce4a328d2411023c170eb","sha256":"12cb8c179ec6491e63ee676c8202e0ecef64756b58f58c8a969f7b910c475ff1","sha512":"cc6628385eb64009a27884b9ad5e66ac4063080291d6bc968624679360232cdba6c64d3b53a0875cc675c85fdbe4ec1f2c2f866126be49a31c395130718a04a2","ssdeep":"1536:2s7BVW/VrKzy+szYuCGStYTTESjYno0rmcJFBxj6VaxWQGdXM4fd4uhx:2wquJulEty5aTBj/xkXM4fd4uD","tlshash":"3a93023432423d7ffc9726ba6842e77cc02bb186e2ba085b49524db179d76119b5a04c","first_seen":"2026-06-26T16:29:27.116733Z","last_seen":"2026-08-30T07:25:45.476551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":754,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:53.059Z","timestamp":1788074693059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:36 GMT\r\netag: \"a184-69a6ed7e-274bd3bf;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cy1%2F8aguIB1wwRw0dS6TIyHhHU4f17ioMNMia7L9I1A7JDAYW6hJ%2FLDsU976orFxpSRaAF%2FnQw%2Bkvy%2BNRBRR%2B4fdIa0pZWUo6Y5C6DtQajuiZOJ5wnWLBRMs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eef9b8f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41348,"size_decoded":42430,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41348, version 1.0","md5":"1097956fa17313da073e6216a7ce860b","sha1":"205228bc618a378a36ef6200894c10aa1decda09","sha256":"7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec","sha512":"d2f56f8ac5c1d6923329a6f731d4363682a336496eb70b7b097f463e49ab98ac2b647274a3ec20d7100a423be87544ac0695664ffe7fb7e75b4794aad9838bae","ssdeep":"768:TGU5B51vUw+tWqAGDH4WfomxkTXmXCoGCUjNjI6kBt8rx2rKCyrFAPkzFe:awBAbUqAPdT8v/Yj/UrKCWne","tlshash":"08030281e1301fcbd501e8b666bfb868ead51e5458e312b596f3c614c05b0eba35cfc1","first_seen":"2026-02-19T22:44:03.51646Z","last_seen":"2026-08-30T09:27:18.160537Z","times_seen":18416,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":452,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074700722","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:00.727Z","timestamp":1788074700727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074700722 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:01 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igJG9jZQMH5pDqjUQ3%2F5EelzFO6O%2Bha%2B8nQznYFxqVi9CeXdQj%2Fu%2BimekC3SL8W7vHele3OxIhS2NoagSulbzKolWEQ0x%2Fk2QR01DNEMJWcblPaGyGzSDRIR4S5UotE8EV1ybYaxiik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f1f8add0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35219,"size_decoded":3997,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074718724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:18.726Z","timestamp":1788074718726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074718724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:19 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umblTJqw%2BvPOyFLTraAemwJPhl6TvH5WAF6LJ%2BqDYDlQVKxTDDXdVY6BavoJhQg3yqatckGBo7jVtQNxZw3SrhB4JRhLjahwUrJ4XbyJJYtJ5GbKTajmyzAHlOpwUYqsv8NucvxiIz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f900b6d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35452,"size_decoded":3976,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/donghanh.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.067Z","timestamp":1788074691067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/donghanh.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"8b4e-6a3b9fab-8bd981;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BC%2FEbP1%2B%2BjMxqt5K66dGVqqLZbLJWBjl%2BEvt7t8ErWDbAuEqLLK8HKpsF81RiJU%2B%2BrrlFtwY7jx1YY13yAuECMaiCWIcyu9eCKbQASwvQMbECXXsP6RLxAD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee32adb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35662\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35662,"size_decoded":36742,"mime_type":"image/png","magic":"PNG image data, 1324 x 137, 8-bit colormap, non-interlaced","md5":"d1feba522937c77f2fd6645026f4f2d1","sha1":"a7e26446c065babb866c7a3ffb06ae6ad049c938","sha256":"94760f006a3129cf38303fc99ed56df4efb2554c00ec3fb192ab615ad33bd081","sha512":"d497593fbf46f5423c8a021a65762e1260a0dac1e737eec99a73f1c44c1de56a9490266e2170dffacc5d228d35d47244a1a2b19686f051afa38e24299acfc71d","ssdeep":"768:bZoBembMLTcupkqtt4odqbAjQql908K+qWn+LeIf:aem4Xcupkdiq8jQqL09+qT","tlshash":"22f2f1a581d37cc216ced1649e3159e40193166a83aa3e7fd7bbdb37a0a8cf084a451b","first_seen":"2025-10-10T19:41:22.643149Z","last_seen":"2026-08-30T07:25:45.482018Z","times_seen":240,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/Group2.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.071Z","timestamp":1788074691071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/Group2.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"24c35-6a3b9fab-17c6b25;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FiT4mxWQXU2dGwwxCS7g219k4KYjELmBQ%2BzyvaqnR0k1GxGL4enCmSbY2aySdZmM%2F2ALKVfsRsOxCXy3%2F8pxQXBR43ZzPUBFWTVsPQ7rMYzDZYdsouH0nPx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ade56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":150581,"size_decoded":151656,"mime_type":"image/png","magic":"PNG image data, 1682 x 428, 8-bit/color RGBA, non-interlaced","md5":"612e9d79035f3e72dbd90098c8c18415","sha1":"dbd131a4785e831f583b54dd050a10d97b457c11","sha256":"7d8e6a7a3345fb52b6da12873cda59ba3c2b389ca39c695fb95d68394b114372","sha512":"7c1999974f186cfb77b0a581cecab461d75ca71b80434481d07a1132b7fd5d6b4b36ecf4bd958c4baee10a2dfb5da5cd0c3e83f5bbebc6edfca972a2b9683fc1","ssdeep":"3072:rsbozIS8CxXDIviUUxlQ4qMAzhbhKkwZ24XP+j3exaLWqg1H5P8ZEzt8:rrIKX7UU44qMKjS24fSziqgt5P8Ay","tlshash":"9de3127b9dedb26cda4d13bc91f6de226137b596bf975f153827298ca0807e82970003","first_seen":"2025-09-24T18:13:53.449255Z","last_seen":"2026-08-30T07:25:45.484032Z","times_seen":297,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":943,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/12/v2-Logo-_-500x500-_-N8.png","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.363Z","timestamp":1788074691363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/v2-Logo-_-500x500-_-N8.png HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"71ea-6a4ffc73-2300d63a;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvkKKnZeJP3dcCDWVjez4%2FZqEb38kIYWx12s9zZq0Elhrf0zUrsPGSocCK3GAtcm63bS4NKRXewAQBS7Ia9xMPt2N8ZEO6YoHdS3FSHgORxbYz7JbS2nW72YxpioWeM3E16d8JJEzNfVE9%2F27B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29162,"size_decoded":30265,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"4a5304d2f8bab2fd3b474fe67256aa31","sha1":"749934b39afc9e2a59b480128b11f7b588b82b93","sha256":"49f67a991231cedaeb7491c41c59f781f4a4edc7c627a6d6ca63f5f88deef160","sha512":"ec97d2d12cc10d4739b94d78c2d5223e608601169eb5b5ff9adb3aed8ce8246296e30409dceda6d7d7fdd3b5aff215c1cd7e137925b6b4cf79f87310c5b896a5","ssdeep":"768:9QeDlr7TOWEqUt3sRCW503BBxgXnNBFQgdG88:9ZhCq4JW5yByNrQSGP","tlshash":"75d2f11c7ef19a9496fa7b216f3c948530c346818569d75a5036a8df049123fc7cbb8b","first_seen":"2025-09-27T19:34:55.587559Z","last_seen":"2026-08-30T07:25:45.486242Z","times_seen":297,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":59,"connect":14,"send":0,"wait":586,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/02/V.1-CPD-LOGO-200x200-RIKBET.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.369Z","timestamp":1788074691369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/V.1-CPD-LOGO-200x200-RIKBET.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"b9ec-6a4ffc73-8011f5d;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzuFyo2cP2uCa8174xGejflWMt2gvrfD6ueaaVORsJ8WlO2PrhsHy0V3NdglCws2ih6zWFJcdiojtTdtkLawA9Yo4x412mI8atjl9poJzKcIOaFrmK5wkmV6iWZtd9m2vx%2BvmV8UYnV6%2FsijL74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":47596,"size_decoded":48698,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a157131230c7fc9daf96d3ec4ffa0114","sha1":"005ecdb6c7da271d01a14f8d0043b0818cb23aed","sha256":"e86dd3230a8ebcfd949115d214494b3678ed65804b392270028f6902d9fec0e6","sha512":"568e53a3dad648a5113f810a2db1b424dfe8b112368e504cab482deb8dcb80b29d31a161df1cdf692e1c2df2f6310f5a5b3e92e9a22e299b34620a61e9c87c5c","ssdeep":"768:b0QDxzaXv3nMLiOscA3Py0tJhx1mBjD35B/sCmmJ7rnWiWqsw/x+xtRstGT+0K:9DxzaPM2/mZ3P/se1T2tRswE","tlshash":"aa23f12b841fe9d77561d63408cafaa049f9245294cdd9f26a1fe4e1c3c3a6e400ebc3","first_seen":"2026-04-04T23:37:14.944484Z","last_seen":"2026-08-30T07:25:45.487038Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":595,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/01/V1-D.Noo-LOGO-MAX88-GIF-LOGO-M8.gif-1-1.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.371Z","timestamp":1788074691371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/V1-D.Noo-LOGO-MAX88-GIF-LOGO-M8.gif-1-1.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"24a34-6a4ffc73-2100cf2d;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI9EOnSuvM%2F7E2wGou9TnfSgiRbtsZT0a%2BcywCHoN1qkxiM%2BTqRhM7Jcb7mggbXV8qVWgUU5xyWooleQFMI13LK%2B6o2mIjKm3uvyK4u344Exv6jh%2Ben%2FktBvGq38i3DmgFvtVuNZyrg6PpVoguY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":150068,"size_decoded":151181,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c91126d5e7b123a105f3c67571b1e4d4","sha1":"bf76a82be00d57b9f55f9a34c8dae88b765a8062","sha256":"941e53656aace0bb89fb1b797ac085a3ac5644f1d9fa1c805ebb6e11d8fbb371","sha512":"65e57dd993d3f7f5796195f3f6f1c440b02bec7314a46e041955e67e06ae8f333f6e80f458f100e68ada1cf867d1cb535c7ece5cba1b914c24f750f7e0a643cd","ssdeep":"1536:wtTXF+fZxnfqs7qkmh9XZzKzm/lgvPd6jmh9XZzKzm/lgvPd6jmh9XZzKzm/lgvT:wtR+Bx37neJ9lsaeJ9lsaeJ9lsaeJ9lz","tlshash":"42e30129d5322bfe97dbc8c6cd459e186c72bbaaa583be24de4c07d0841f548f51930b","first_seen":"2025-09-30T07:09:56.580857Z","last_seen":"2026-08-30T07:25:45.488576Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1587,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":566,"receive":954,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2024/11/manclub.webp","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.375Z","timestamp":1788074691375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/manclub.webp HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"4a42-6a4ffc73-170041f8;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yP8bhrSx1y7ir2YwKxGdmSVdfdtGRIv%2BoxOyofrSYs1cHHYoLMulAOE8oThHGHLoDRLoZHg9f3Rn8P6kZq2%2BsyLwhRgqkNpJCer5LeEbqMatbqmmLM5Syv1vZ9TV7g4SKAm6Ugi2%2F9H1bkiz7UY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599fc56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19010,"size_decoded":20116,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4202a649fc44c5124012123f697904cd","sha1":"f5e0aa7d08e075b9151cc51bc8bab5add7bb3865","sha256":"5fcb29dcbd5e0ea0d6a735aacaacbb2e8e0774294aa46adf42f8f9ff57d7c6c6","sha512":"366a4f803cf037ee939635c345ef8443f568bd150d6a51c42df61364527ca33001fbaa29764bd212f937c1663600fa080aa914d4b4073bb57f58c1dc56fef380","ssdeep":"384:X4nT+kBZKDpGCdbu9PtoEw5SQPYFxyDzGpgt4LXE5Fxc:qTXqG4buMV5SQPYFxUGG2YE","tlshash":"9a82e109c2b5acabe4af442ff26702f49f984ef6217cd7db122b51d27208f277164925","first_seen":"2026-05-31T10:27:47.188294Z","last_seen":"2026-08-30T07:25:45.490087Z","times_seen":19,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":600,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/setting-CQlIWeWc.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.787Z","timestamp":1788074691787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/setting-CQlIWeWc.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-34b8b\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3j17OzXYdqg17piPUU%2BwhD9Cwj6LeG%2BKS6RzhqYQExTaFp75DrTnsw3j2kgBIcZJAsOI%2FLkyO7mlZiARYXA6VJnwEnfhtvopKOEIOotZyITohTpJncUH3MtOHLaNoPjc95C4TDO6g%3D%3D\"}]}\r\ncf-ray: a3320ee7a8a50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215947,"size_decoded":48465,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64845), with no line terminators","md5":"3a09876b33ec854e6e3c90670d77d443","sha1":"64b4ee8e4e11631818ec952937796682afdaff0a","sha256":"78cfb6ff8a315b9af2198ef9a07e8fc228959c184ebfcd6afff4c4fd7fcf63e1","sha512":"517539dfe29cb3dd39ffaeaff24bd773a703e94efbf896913cc585d855019057acfbeda22aa920e44dd7822dab4cccb0c2de2be7a829c38d7d2e6b53efda21c5","ssdeep":"1536:LXnsZiZx5I6YvXVmWLI+++q++l4Du9zp0Armwtm4FWZHMENOcTN024DG0kV4ImRy:Lqe+++q++i7awDirjRlavkBEtH3","tlshash":"9f248554e109fedcf83699c89d6f400a345e2eaed26909d1e1bf3c150b7095e372af98","first_seen":"2026-05-14T10:22:58.308777Z","last_seen":"2026-08-30T07:25:45.49132Z","times_seen":24,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.100Z","timestamp":1788074692100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"72d0-69a6ed7e-274bd3b9;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nX75obCnyPbHkUdWRwkO1PVTW7t1jxLzRLbX7ofoxD%2Fme6jYfQ9HfiyKhVBTqgZGK%2FqAbJvCPBR3Xs7GjX%2BAaO%2Bc3IlkEp4LFMAKPSxo2nOB%2F54Mg5VjoX13\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee99b4d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29392,"size_decoded":30472,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-08-30T09:38:21.981804Z","times_seen":15401,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.057Z","timestamp":1788074691057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"15601-64ecd5ef-1336ddeb;br\"\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0zbnkkZN8wWm3x0YV95ng%2F7cSFeNEz02N58d8jdygDytKdCJTMrjDC%2Fv0H6ygof0q2PsDj3zjsovrDwneCk4r5oqXDjiSmNx2jsuhFuNT5hpHH%2Fy9551JkW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30673,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-30T10:22:12.331561Z","times_seen":1039629,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/logo.gif","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.076Z","timestamp":1788074691076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/logo.gif HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"4b2112-6a3b9fab-28087454;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aijkhv9QgkuTkQt6KmZn0zmsws76d77Hppe1JsMQh3VFqtyb7V%2BKPZtJ42ARJQAJQ9ojqSJS7U2y6sJLlh4h1aqgdEjZtAd43B1DAcvyTQUDu9zkEXUFeIav\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4923666\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4923666,"size_decoded":4924738,"mime_type":"image/gif","magic":"GIF image data, version 89a, 570 x 438","md5":"c5e31d328f73a7caeeda184608c8100b","sha1":"d946d5554e0b190ec73f288ffd4db10b7b7ed122","sha256":"ce7bb251b99c623a580cab4cd5bf5efcdf62e29e9ab726a5ce94d7c1f44fbc19","sha512":"9d03b145e3c86d9e003fb405010e746e147a268bed5ee10a1c15680c1446b75c9ee9031640647f8c1f26016f0161a4cbbb5b7a540a81187e8b0a5984c2d9fcba","ssdeep":"24576:zzD8xnJR6v6JbzMuUUZpxMcN9cT0lj1suCHYoDzMWFE9zl:/2rbYFGxM6c0ngJGb","tlshash":"bc253346ad07cf3983907ab658d41f4388269612e0f02f759f3a889e99539bd084b5ff","first_seen":"2025-11-23T18:51:10.670919Z","last_seen":"2026-08-30T07:25:45.493892Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":2243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/donghanh.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.077Z","timestamp":1788074691077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/donghanh.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"9488-6a3b9fab-28087453;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yy3fnOioBX5S7kiuiLI1u7fTaX3F4%2BkYZWUiVI3fr%2F0OsSshbUp%2BzchwYWlgmcshWJcbjdGZSGTV8QTzHuxacN5U7MBHi7HRiAJbM8erZ4z7U3Tlqa9ibwG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38024,"size_decoded":39096,"mime_type":"image/png","magic":"PNG image data, 1150 x 142, 8-bit colormap, non-interlaced","md5":"5fd3f184c752c38a6f44927c6eeb8024","sha1":"bb67f87bf6c3d005d5e26c6f0748af75ae91b042","sha256":"799e5625d609c6afabdba116cca46e031ebef05dfc6cdcbce0aa5cc5eb6ff655","sha512":"a089f744f4b3c7c14771823e3d344b4d3ab4037e626032adab5a13ce024c458dcb9c246a3218f26176e8f2a52ed4dac75e04aeb2e8d8cf24a40cdf509d6bb389","ssdeep":"768:7+cXF/EOPPl20Qa4JZSJgRoJWkzHk9niQRe0HSx9:7Vbl8NRmkRY0HW","tlshash":"8703f176a8e22bb3f81365b9117a5d69d861fe2303cb7d0ead3e72399a5041078d04ad","first_seen":"2025-11-23T18:51:10.706524Z","last_seen":"2026-08-30T07:25:45.494471Z","times_seen":45,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/09/logo-socolive-png.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.322Z","timestamp":1788074691322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/logo-socolive-png.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"13153-68c28fe7-26440564;;;\"\r\nlast-modified: Thu, 11 Sep 2025 09:01:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lw9XlXVS76Fsc72%2BfPaF77DCgeDDv5yEmt4%2BjAZI7sf1H%2FACR%2BYaAMukpuzQ56yGXzHJqGrPRWOX%2F5nVYi3DS9Kfth2BLZ9txQY2%2BT1j0eapjfkc1zHSXg2z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4cb0756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78163\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":78163,"size_decoded":79242,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"e19484b4eac3a1b6aeb91a1be14d37a8","sha1":"d14ee8942589304171485dc4523e115461f08c91","sha256":"9b52450f1049ab005309e2578d083b460f5071c902d764893c937846597e448a","sha512":"69677ec0ec0d5abc951d4dfa323887827c35b8beaf7f29f235ba508c69a409324ab10d2b24cf17bfa5d2661f50b59b2842d4fbf4ed5ff013823485a7a470212b","ssdeep":"1536:lrKhNnl8hmogPHVN3HarU96xx1d9NgnFJZEv7ovdfKNu6yCDPodPPmNe:lWbngmogPHTHQU0xxr0nF8vydf0xo9m0","tlshash":"ca7312320a7e05ce649f263217ce685ab416dfaddb9459311d7e7828f2f80242c7da32","first_seen":"2026-06-26T16:29:27.105766Z","last_seen":"2026-08-30T07:25:45.495069Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":730,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.343Z","timestamp":1788074691343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 01 Sep 2026 07:24:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSsN4rvUCEx3LZYcYwBGalRmz9DgvCVK%2BPcKPLhk6XdPYLATnDPDhFw35uMscpol3zctbcWhVrCxQq8%2BP%2FpplDZbhz%2B2YjBBFOfQXYkOOc%2Bx76zTeNssjwnH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\ncf-ray: a3320ee4eb0a56a2-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1280,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-30T10:23:01.753168Z","times_seen":427864,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.352Z","timestamp":1788074691352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"5db-67a4f0fe-61d0f70;br\"\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dVhczsb3Q6WylzUhVqHWdUdZ5CZLTZMzr9%2ByJqI8iRvI0rZ8uRwSRONeBckxjs1x9kNdQkEGUe0CIvJHOG0HPB653ZgR9YOHwhh4%2B5Ob5zbzauz31P8ys5h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4fb0f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1499,"size_decoded":1738,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-30T09:19:46.774188Z","times_seen":89890,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-react-DI6U0GXP.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.780Z","timestamp":1788074691780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/vendor-react-DI6U0GXP.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-25207\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUp9GaGoLoZSOd7FKER3d4EHAWAiJmd7H07epfKEY50LdssZ8ECwPOPYVUiihQ7mJDJVijhtTnKbJaqEw1kXeLMMsT%2BzS4yznvSBgvr4Vxi%2BvxAHiwSLaTXrjjQ4qRdsgy2BfTyYqQ%3D%3D\"}]}\r\ncf-ray: a3320ee7a8a00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152071,"size_decoded":50488,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"1616b574ff2d0f029be8522f1e6e3e1a","sha1":"5337b793373001914e03957686e0bb42d3a9919c","sha256":"fb05f17949ba6aa0f39594d46e2c3f61252f09c1c81c851621739c39d4283ca7","sha512":"fb47c66faa2315345ba9fbeeac03e3481fbc0c46d38b1b933a1b7bf07952661c2272acb433fd3f9021f1cb1f4f906727321a0a50b4f9a6cdfe757d4dd000f378","ssdeep":"1536:4zovve8aF08e/rzauY3elIX821Q6G5bLdi2aod++JKsBy0Z9WOlvMk:EovG9N93LX8X6GldzaO++JKsXZB7","tlshash":"63e3f9ec31beb6626ba3567610af1507733d28171c0c4860a111fd9e7bba40991bbfed","first_seen":"2025-10-24T13:28:17.483565Z","last_seen":"2026-08-30T07:25:45.498042Z","times_seen":46,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.103Z","timestamp":1788074692103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"72d0-69a6ed7e-274bd3b9;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WV2eY3RjDJo6x8hYQfwl5DJyYLgWjgtLIRohkbQEAP5BlMbt7G8Ztmn9Tt%2FfC9i5kcavCx7APmIbSNe2FbcIpn0WkRvoYjDq%2Fyc94RmETnHqJRAv1BjXHTaT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9ab5056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29392,"size_decoded":30473,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-08-30T09:38:21.981804Z","times_seen":15401,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/content.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.069Z","timestamp":1788074691069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/content.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"4090f-6a3b9fab-8bd980;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcJneo1zQqvQdn%2BzYLOJUxWwUMo7smZlewJuAuf4qABS8s2UU%2BMIih6oXrqgVGPpOy9VM0lkuq1SnUyUx3pDkCgeyXuwkiJ%2FQ85UuozkmiTwahih6ohKHLaX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee32adc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264463\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":264463,"size_decoded":265535,"mime_type":"image/png","magic":"PNG image data, 1824 x 1100, 8-bit colormap, non-interlaced","md5":"78c6a6ef9d9a202684d3009f047518dd","sha1":"e0fd6f329e8da1dd2ade9006badd1a2c4b86e915","sha256":"4f184a6f013fa577f9ea044fdc6da5a37b3f5c8b3514e181091f03f9e81a377b","sha512":"580fa5a9fad955f54517190b150f9aa1c8c7a764869716a64742bc8a610a586921e6d024ede5b49dc5cc464a775ab74bb49b839aacc53137072fb358a5821361","ssdeep":"6144:lvVRVso/F0Di8uXNwvat//aux+o2szgxaktSoOxe7:ZN/F0eE+/aEgQktMe7","tlshash":"6e44238d2ba46a2d95149a0c33251eea6d5644cd3ac2701dceb83ec266173c6d335a3f","first_seen":"2025-10-10T19:41:22.638186Z","last_seen":"2026-08-30T07:25:45.498663Z","times_seen":240,"resource_available":false,"data":null}},"time_used":1812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":1238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/CTA.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.070Z","timestamp":1788074691070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/CTA.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"1a298-6a3b9fab-8bd56c;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvHFgWfgOXpe7J66mOunzOyNz6d2Fr24IvAMSIcN%2B4T4rGAgNp4NAdbYcjbSQAZ1dNR9m6%2B7v43VgTnr%2BT8Cmkffh8PaJimZn%2BJ0AuEoQr4E8%2FHLxElmA0Qj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee32add56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107160,"size_decoded":108236,"mime_type":"image/png","magic":"PNG image data, 1210 x 432, 8-bit colormap, non-interlaced","md5":"e38953dba1fe09e8ac7cea19b57e1066","sha1":"1e9e5380b30c812240ebb482f36c607bc8f87656","sha256":"87b27676be9de5951e9307dac6cdc9039fc9bcaae1ba25d53c1aff1162d91bab","sha512":"9e3282b3a25e4c7d7aa01f5b1b569fb401eec00e3fd6f48cda84ea6b9223e48d9ed02954adf95a395f89ab5eb2848751aff2511f280ce68db2d94545f6d58b97","ssdeep":"3072:Z4kpQV2AwTeOqki9b4h4pA8Gs1FCL+4GGEu:akpQLwCOqkE4hf8GbEu","tlshash":"82a312a881c3a743880cc5245b7877d2ea60117edf0af1bd61eb47c693ba370c79b451","first_seen":"2025-10-10T19:41:22.591907Z","last_seen":"2026-08-30T07:25:45.500135Z","times_seen":239,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":853,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/11/background-socolive-bsports.jpg","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.004Z","timestamp":1788074692004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/background-socolive-bsports.jpg HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"dd4a-69158675-27421422;;;\"\r\nlast-modified: Thu, 13 Nov 2025 07:19:17 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYMBvlh3F2qS14UZspMhRFyYf%2ByX%2Fqhi1ft2ZxFig8dJthrfhb%2F2HmKcyv1RvxYqG0gIBdXs6UodEUid09VZrmRUNoU1Njv82Hjmcz7QBQ26A%2Fk8QZyTptjc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee90b4256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56650,"size_decoded":57725,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1200x675, components 3","md5":"552609a15d4da1c3d72d3dc2c0ced6a8","sha1":"8ea35ac37b7df54febfef9ade8f948ebfb315310","sha256":"7beadf1ecf32d85ca1ed8c52161a09fb293b7773adc288c65afee4aea230d7e6","sha512":"a89b151a30c06fcdd484c3b0888c8fd94c410fe5adeb17f74697cee71f00a57b26bba5ac60afff57d580fb0dbbc2c83954543ea482fe74a5462b4ee64e44317f","ssdeep":"1536:wJpgzwJo+f6E4FjrKFxlza41cGKjKyT4YcY:wJquo+f6bFS7l3Qz4YcY","tlshash":"1143f13c2320d92fe959cb7c92bb97a43606432c34236240a5b4cf4748b62ebbd5b5d7","first_seen":"2026-05-31T06:48:38.533118Z","last_seen":"2026-08-30T07:25:45.501634Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":560,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trafficqq.io.vn/js/qq.min.js?v=1.0.2","fqdn":"trafficqq.io.vn","domain":"trafficqq.io.vn","tld":"io.vn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.166Z","timestamp":1788074692166,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/qq.min.js?v=1.0.2 HTTP/1.1\r\nHost: trafficqq.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/settings.json?t=1788074692714","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.732Z","timestamp":1788074692732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/settings.json?t=1788074692714 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pbv%2B4VMX4nw1m06WXmO4vlwxMzWomeIRfxGvhISP3NNSfHU3bsyqWIy7H50MeTzrMGFR5ZSVPdbCQ4F76jNtzKyVk3wXocDMd4ytLrF56swJVo9g3BrUkR7r4p7BT6pwN0wBFwBBZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eedcd0f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5470,"size_decoded":1918,"mime_type":"application/json","magic":"JSON text data","md5":"cd05b63d3414c39cd8df6fcaef5d3bb2","sha1":"69f191de6b3dbb923915feec3410ab9aa0d7f00f","sha256":"e902f3fc6b67ab3b73d22ca99277ee15c8d4bf129feeeccefb64c730d1a90bf7","sha512":"24da137d4e6d829a2b61758e925772f3f162cb5362601dd29f91f4c7e38255088e6a2067751efa4c60c682a1f12cbbefd3e9aa4934930c21eac6b0132fb088a8","ssdeep":"96:bWSAaqJZQ5MTVPme74diwt8/HgWnr/zH9x04Ix0sAx0sIx0x9x0q3x0uvcx0jFcO:ydJse749tYrLH1+uDl5X3pEw1DY6h9W0","tlshash":"80b16c88c6f92ddb581b64b11cbb53dafc7119070918be257f3da25e3f1c12e6472229","first_seen":"2026-08-30T07:25:45.503434Z","last_seen":"2026-08-30T07:25:45.503434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":13,"connect":15,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.975Z","timestamp":1788074692975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.7 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"c2f9-68b4919a-2030f3e6;br\"\r\nlast-modified: Sun, 31 Aug 2025 18:16:58 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KZaleqwxm8yaHewqZAY%2FsKgZBohs51AtjWnDEGnlMk%2FKlKqTCJbb4ibBoKnGVJdXV0qw0il4CqzHM0FmpqGk49ThhdFQxrtnpZTKxPks3y5qIqXSOLLNgEg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eef1b8856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49913,"size_decoded":13961,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49913), with no line terminators","md5":"dc5736a54ea2f7d768700c849aeb2b3f","sha1":"4c80335a09ea5134f7a0922b58c56a00a8d0db0d","sha256":"bec887feaec684bbc55998c457617df16605234f032386cd8068ad2dc8964a5c","sha512":"ece72dc5ec85a9e219c882d10411d848a2934b4f4d2fe6143cec5e349b5d4dc0b459e04563b44be0cad18092126729a4e47eaa2ca919d0a3f5433f4705d66e94","ssdeep":"1536:X/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Mmlz3JZt6w","tlshash":"cf23635eb241363941cff1a7622f464ea273206d140180acf8a9ecd65db9c8d743bf79","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-08-30T09:38:22.324178Z","times_seen":16393,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/09/cropped-logo-socolive-32x32.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:54.261Z","timestamp":1788074694261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logo-socolive-32x32.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:37 GMT\r\netag: \"51b-68c28f9a-264404e8;;;\"\r\nlast-modified: Thu, 11 Sep 2025 09:00:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:54 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKTnTsXiNLUHaaadAX2%2FUu%2FJJYUvLALh9py6v98yGvzifV509tBQp384SHDuoxl6t0yz2F0yVfzR4o6qrwutx6nlbJob0gjX1lv8yJrQh5uvv33hUowMt2rP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ef72bb456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1307,"size_decoded":2378,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3ed734bf17dcafec6dc1d21fac44ec63","sha1":"cb6c51befdaf0df884522a801fdf5cac537c8b4d","sha256":"a5c381eb982f7e53fb48046cc871ac3b998ed19e7d3dec77b79e99f48a03e0cd","sha512":"1920c445102ded0a65c8e6c9ec8769994b6ae0a7caebfabdd90a35968969512c1c3759c99c65a5c04eeb2ec7f6e36883d50d460adf1fe1209279eb3766f545a6","ssdeep":"","tlshash":"5d21fbbacd56153f636e92e393771d9fd3d5587d12445dc46105cca2eaa0081465f1c0","first_seen":"2026-06-26T16:29:27.08885Z","last_seen":"2026-08-30T07:25:45.505399Z","times_seen":6,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"socolive88.club/","fqdn":"socolive88.club","domain":"socolive88.club","tld":"club"},"ip":{"addr":"104.21.1.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T07:24:50.190Z","timestamp":1788074690190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socolive88.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 00:59:00 GMT","end":"Tue, 06 Oct 2026 01:58:52 GMT"},"fingerprint":{"sha1":"54:D4:4C:A4:A6:EA:33:EF:9A:7B:5B:B9:46:FD:6F:F9:10:AA:97:EB","sha256":"05:3E:8E:18:03:0A:46:C2:9C:E9:4C:E8:6A:F9:79:00:F8:A6:CA:66:30:AC:2B:6A:B1:41:DA:0E:AE:01:5A:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: socolive88.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 30 Aug 2026 07:24:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://gaea.tw/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THOnduYUKLrrIoLKwutA98pYVjEuA%2FAjuN4%2BaT1LZTR4okA8kpljxI8Ce9IwG6VMga5lsFSI2XUDynRtkudhgROyO%2BKoTIfm8VD11GpsutFaqwCjKXh5cmTcIMUyouG%2B5tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3320eddecac5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":24,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/css/banner.css?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.051Z","timestamp":1788074691051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/css/banner.css?ver=1.1.0 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"b88-6a3b9fab-2326140f;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGEi%2FTojJjP5NEZBMkRuebp7HvNiHwna23icplPh7Jt5FWJ34u%2BLzZCe1d4OOT6mFJcy0nxJAPuoY3TBgtY5SnQ%2BZLI%2BXfhisHAietxqvvTFga1qohdN5ZAQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2952,"size_decoded":2217,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a0b6032c2b1273aa1e20fb6c6cf124e1","sha1":"7740fe085891c3e106f9d447b3763ae005533ff2","sha256":"685bfac55bc6a76974502e54d984171856e639a02f8eb6abf51f98e8fb768172","sha512":"c194171332048461198478e3a10f3e66a429923b26320e279f3bbf744fe77073452440493e405744dda1a0948af59e8ca94d03dca3c2ce1170e69697787836d7","ssdeep":"","tlshash":"d95132425ee090057009c17c6d965a6a77afe800d3cacdfdabe0606cdfad2dc96623c6","first_seen":"2025-10-10T19:41:22.749353Z","last_seen":"2026-08-30T07:25:45.508217Z","times_seen":86,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome-child/style.css?ver=3.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.056Z","timestamp":1788074691056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css?ver=3.0 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"12f-68b491a7-1355a11e;br\"\r\nlast-modified: Sun, 31 Aug 2025 18:17:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcrOyULjCoPxEFc1naszm%2FimRewZ5w7Q7lTSR5Fz9cjQulLWA%2BhR4kBbgDIHAks26AISufAVcoRtZRVWDI136YQO7i7eb%2BGVXehCKp5d9Ga%2FS54t5ehtpiSu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":1286,"mime_type":"text/css","magic":"ASCII text","md5":"97ea2d751f6f88abaa4144804c209088","sha1":"fe7deabd8c4a06e58816fd9424e17ad884cf778f","sha256":"61971a06f7ba6959fa232b1137d1de182bf156368ca45164f90dfb1a48941ab3","sha512":"014371a55720b72dc47ac433d2a6da81713918c9d44bf4c00d13160b361b57eeadcc378d9228693e0ee8cd423183a0e5e648c9374d725ae317c4a62068cb1379","ssdeep":"","tlshash":"f0e02bd064d19d0c5136530b047602c893b07b106776056ca08c3568c19ebc508f8ec1","first_seen":"2023-04-06T15:55:49Z","last_seen":"2026-08-30T09:38:21.8665Z","times_seen":8373,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/12/v2-Logo-_-500x500-_-G8.png","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.364Z","timestamp":1788074691364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/v2-Logo-_-500x500-_-G8.png HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"9aec-6a4ffc73-1c002c22;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3RuK0Dx7JeFnovDxouyKHCje8b8sWgVgDvU1cVl6lB5tm1LapOxHxuqQJ6iQAXtxBJGnNNBnfhwVGva%2BzIML72SuJetsesHUv0slDSNO6vr3UofSZIBh8KGKmke56LtjhlRymRowJxE%2FJcLbPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39660,"size_decoded":40763,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"5700fd8f2bd5501bf920c5940a284e3e","sha1":"c647b8fe95d0aa26d30dc4a9bd01ee424adf2722","sha256":"d3dca17fc6aa9f3697d03a83602c53f93a984051ea7c1ee76228ddba0ea34cbd","sha512":"58cb0dfe3709bd7e94ffb4ccc5e3b9b85491cb5d20714b11ebc3aad62a2fecea71924b3cee7fb23f4d359635b7c9c956b4fe1b3b1e771cda002f1d0aa9394970","ssdeep":"768:CBhWyDqdHf1PEmPnq9NoEA2gIlR/1UYOWZbZ/cPWTrz4mVap:+oyedsQ2gA7x/MWTrsmk","tlshash":"b2030195688e1d3d0a63b0f2e037506e50664afc77b7bf30d4a4c6e06c20499db4b8e7","first_seen":"2025-07-12T02:32:47.631558Z","last_seen":"2026-08-30T07:25:45.509808Z","times_seen":311,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":563,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/_dmca_premi_badge_5.png?ID=2e22ec7f-cd66-4b40-a37b-e03e50e94854","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.383Z","timestamp":1788074691383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 23:03:54 GMT","end":"Fri, 13 Nov 2026 23:03:53 GMT"},"fingerprint":{"sha1":"E8:3B:4F:96:A8:A6:FA:EA:37:D7:C9:35:E5:CD:E0:18:91:18:06:FF","sha256":"EB:14:F3:9A:CB:C9:C1:BD:52:EC:23:F3:98:AF:7C:A7:BA:3B:A1:F8:35:32:8D:20:7D:20:E2:94:6B:06:04:64"}}},"request":{"raw":"GET /Badges/_dmca_premi_badge_5.png?ID=2e22ec7f-cd66-4b40-a37b-e03e50e94854 HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5605\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31536000\r\netag: \"8ae3cdbd420cc1:0\"\r\nlast-modified: Thu, 02 Jun 2011 03:26:26 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:28:54\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/_dmca_premi_badge_5.png?ID=09afdbd4-079c-47d3-a199-39fec6840f96\u003e; rel=\"canonical\"\r\ncdn-requestid: 99428a1e55b15cb8e6694d230d635cff\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5605,"size_decoded":6331,"mime_type":"image/png","magic":"PNG image data, 135 x 28, 8-bit/color RGBA, non-interlaced","md5":"79c09cbe70a68739ee4a41407f06b432","sha1":"9ef601d1f938289163fe3b0b503fe58d6582e8d5","sha256":"ad3ee286844c46dba3f0d26e100f508c410b28f52784fbeec2d513ef6c6fda7a","sha512":"d3f24c4b1e2fb467810e712aaad6486763b545339bf2daee4b219e7a39b02b90235bdeb48bbc394f71c292eec013a344724f0d2aa1862a0a38c190265bddb342","ssdeep":"96:T+IJxJefWCVqAKGdF6JIVaFeDlGP8iPNgtfsp9+U1HO3HGapU22XIh0Jc:T+IrJOWCKGeeVag4PTKtUp911HAma/ec","tlshash":"56c19fd2cb6b89cafbd23ce8d47fc71251a2ca892457111f6e0174b06db3406293b96d","first_seen":"2023-05-02T17:18:12Z","last_seen":"2026-08-30T07:25:45.511441Z","times_seen":1610,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":29,"connect":1,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074706724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:06.729Z","timestamp":1788074706729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074706724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:07 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0etG51qK3OHHgmaJDcMGK4AY8KGAAcbsKo0PYws6mgHA6wn4k%2Fgikl2%2B8cakq5Pol%2F6v0py9%2FvABO9Ki0tn0y%2BOR8CfKE2QvY1JwDzP%2FqBuVnKlow%2FtVWPTPIldIJ9MnYg2gEMQQscM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f4508a40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35452,"size_decoded":3986,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074708724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:08.728Z","timestamp":1788074708728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074708724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:09 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3q5wsxxQEi70oc3e3jfIgOmQGrGDjITUexHv1Q%2FdI83%2B6E%2Fh6R%2ByyTjByQC%2BOSjnafLo%2FZzxdxrCG7lk1n%2BMvF6Q2o1An4XPNt7XsnRTfZsa%2BAxp1T1R1BkVPvFtZxjmvFIYXv29AE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f518ae10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35452,"size_decoded":3988,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074714724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:14.728Z","timestamp":1788074714728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074714724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:15 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlOmNBeE0U7lELBAia7W1BuwPBh%2Bb4Gpd5uJlo8TW9y5ayVDWXgDiGvAkmp8JGnepIkfayvCyjvWEtdnV%2Bnl%2B567BoTFuPekkls9YhEk5s4REe%2F74vTStmzUlAnIR2bmsnT49mygu18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f77080e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35452,"size_decoded":3980,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/bom-ads.gif","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.082Z","timestamp":1788074691082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/bom-ads.gif HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"6b35ff-6a3b9fab-28087450;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLGBkGr3I4RyDgmNdqh37lcJFNX1cS4N%2Be2to6kEWG3zmPFTkf%2FnDa0UW%2FM1asgTcE%2BsqkyA08AIux5WeDeybcJy69R%2BAaMd84bD3XRzqVmION%2BH0NbVrtWn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee34ae956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7026175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7026175,"size_decoded":7027257,"mime_type":"image/gif","magic":"GIF image data, version 89a, 540 x 540","md5":"ff283dd5573e20544b2ebe8671bfe90d","sha1":"13ce13c8b308333fc8030c6871f1e310d8b05cca","sha256":"29e1f9ee906dda2a4425331f400074a86a5af19c39a46f9848f50542dca80a66","sha512":"ecdc269aaa02adbdfaf29310a3947edd11e1d0e32b5b3c471c4f856df2a834e5c83e29f9ef652af6e605139ed41dcfab50a0190888dbfee57c785cb62c892a00","ssdeep":"24576:7XC+I3o+2KszEI2k3o+2KszEI2k3o+2KszEI2k3o+2Ksza:7Fao+XszM+o+XszM+o+XszM+o+Xsza","tlshash":"7325231a152fad92a89217d8e4078fcfcda9c42dcf723560c9be35e04a12f5e41987a3","first_seen":"2026-03-31T08:31:00.756798Z","last_seen":"2026-08-30T07:25:45.512046Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":2393,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.347Z","timestamp":1788074691347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.7 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"3f6d-68b4919a-8c7bf1;br\"\r\nlast-modified: Sun, 31 Aug 2025 18:16:58 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxTqAOOWAopu1gdadrvFr36Wp6HBwAJ7hG0VNZZWYEW254o2SD5yLVgfNVYYDJ6SQe9dhVi1CPlfYZyN76Xy76%2BRg4VirCRrbTls4BsvoimVRZaXr9uuJuA7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4eb0b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16237,"size_decoded":5754,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13072)","md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-08-30T09:38:22.32191Z","times_seen":15822,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/banner.js?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.350Z","timestamp":1788074691350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/banner/js/banner.js?ver=1.1.0 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"1785-6a3b9fab-24272b1a;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4etI233r50rYO1Osd12mBtfrSP%2BwTjWrQFe%2FDovFnI44l1LRdPCFkQ19FXfxOtvJaFm3IUmXi1zbhPg%2BTDusaUpzx3tZnMhjpNhzTAXYKZryqq82qCyRxfRs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4eb0d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1779\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6021,"size_decoded":2853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6c3c77b96689f39805db7a7885aae580","sha1":"1ada4d3a0eb54107a7171cbd1826e68126c9e0fd","sha256":"0b02f7c85cc2f19e5092c31c88a2aad5d0401d78f0774d73edbadd7e82c5cb80","sha512":"24811117176225ed3741307f8f777e218f4b41e67f447f98b35b219e91a754e8788f301f3be3d8787ee5688955951f0ba88563c712b7bb3b4a7fbe0d734b6f14","ssdeep":"96:2TDihiuTDiiiKsIDmpQ5biryE7uO0MhFQEYid76l4jWctO5lkafE6hjsWgxfb3rn:2TDihiuTDiiiKIQ9E76MhEid7pKIglkd","tlshash":"c9c1748ea0f221735d27217d9b9fa61570a6a01b4444dd047d0e938a6f94f3a42b8aef","first_seen":"2026-03-26T14:57:39.883895Z","last_seen":"2026-08-30T07:25:45.513585Z","times_seen":35,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/js/flatsome.js?ver=a0a7aee297766598a20e","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.354Z","timestamp":1788074691354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=a0a7aee297766598a20e HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"d260-68b4919a-2030f3ea;br\"\r\nlast-modified: Sun, 31 Aug 2025 18:16:58 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaKCB0N3cNpKAHnCl5%2By2VIpvfJnKsNbaI9%2B1NSp3PrXH8lzOwWlxrrsKax327o0r%2FqbOiJ5AzK%2F4TVrrJ10RyzZDcNjZP81UtTELBcYE%2F1xFhbCmK5fdu96\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4fb1056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53856,"size_decoded":17095,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (53856), with no line terminators","md5":"0f13719c0342913a1990f6ffff131bc5","sha1":"1bfdb4055f5960d97decdf88f16a250f5568173f","sha256":"1ce97f1528f3d41dff547488d8d57c66637423dafb1bca9fe5c48861b2739725","sha512":"b060a6ca9f4f4bec1f9e169b3c03bd2af3789c112ce63aa279d218d5d9258dd20d3ba723fe3e251dcd520612aacf3a35ffaa93bc65694e3273227cf8fd1021d5","ssdeep":"1536:c9wJq+5+Q8kNSBEpeLMEXmoEtZccPhtUaD3o1xj:qAzwLlgP4aDI","tlshash":"cb33d819b25070fe01ff61a7f13fa32432376525b0174054b52d98fa2d6ae5e22a3f7a","first_seen":"2024-04-05T15:17:42Z","last_seen":"2026-08-30T09:38:22.033606Z","times_seen":2100,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.096Z","timestamp":1788074692096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"a880-69a6ed7e-274bd3be;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFI3b3faIMm%2B1%2FOrbq9wYSzFlnBNVNp1mg7PICsScAxm89wWF6Eix%2BDbxzKXIBlmxEwbMffZpnZ2T%2FEY2AemSy4O3ULzRNnnEXo88OeQeKGGhqciV%2BgIK0uC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee99b4a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43136,"size_decoded":44216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-30T10:22:32.472996Z","times_seen":279962,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":451,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.105Z","timestamp":1788074692105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"504c-69a6ed7e-274bcfb4;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0EYY6HqROIcYh5i7diivcSabvpzRROaqLEHXXaLCjVD7mLqoikjgCqqOU9YpXCt20ZG5M95ChpdIwStmr448OtcQr43n6Qsv4a3BbJ1ofxxH6mw91AsNRPU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9ab5156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20556,"size_decoded":21626,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-30T10:25:31.734928Z","times_seen":37539,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"octolink.vip/statics/jsconfig.js","fqdn":"octolink.vip","domain":"octolink.vip","tld":"vip"},"ip":{"addr":"172.67.176.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.167Z","timestamp":1788074692167,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /statics/jsconfig.js HTTP/1.1\r\nHost: octolink.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tv8Q6ZepRPLaZtGdxAKmksBmkx3kSvQjIixOESEJlLtcnxq0Cmej2cpEXkMYRHK7cSrHU%2BwTDfI3WL2zJy3eqWCnlESv73mN6fklMRBclvtqnMWsdRQbq0q8L9TLHu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3320eea4ca50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074694722","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:54.724Z","timestamp":1788074694724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074694722 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:55 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rM6vRYQKJrySUSM%2BOwHPHUCp%2BJfJ3y6jYfGIO78qQuXcXsxCIB28915q20uwt2YbLbN72tG4xbV17Q8CI21RhymULhezip%2BBEmrhI7isaM8%2BflXiZJIfJfbhsqfiEuU4eej4xohsm0o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320efa0ed30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35219,"size_decoded":3993,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.058Z","timestamp":1788074691058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"3509-6482bd64-1336dde3;br\"\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2tOu7UXD7PtSi7x6iFYGuiK45kEljqzIVvenMA4d1QtkApj3V%2B8GqP3%2BprvCNA5FSFcqnHY47oI%2BH2Hcaj0uZW7p%2B7w742FGp2JyPrTSKm25dMAr7Pb1UF5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ada56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4679\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":5755,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-30T10:22:12.339777Z","times_seen":951385,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/content.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.078Z","timestamp":1788074691078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/content.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"30a7f-6a3b9fab-28087451;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLN5qJep04GwywdVHFiJly61YHnGZMtek3rNTGRRPzrddQeAPAaPZda%2BnKDCxbsQZYTw5fvC73VXy%2F%2Fm4vPRV0GUamhWJlLQTSfU1Xz9eqx4XEDOYx3O2vuZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 199295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":199295,"size_decoded":200369,"mime_type":"image/png","magic":"PNG image data, 1744 x 1298, 8-bit colormap, non-interlaced","md5":"664e8b41f1c560badebb7ac6fb369e27","sha1":"7c4e7ac806f48baba5f4bd45075ba9a70764bdb4","sha256":"bd319fcae4ef656732ba7ece34c730f3dbc252e071f1e39de5c6a41cddb5c2ae","sha512":"c1aca2c1feb4c862daa2d28ff43bb795962ab73c7eeefd53a49dfbaed306db61665bb4447ac6cec0bd8b7cbff8ed44b9d5fe51217be504344cdbde7f3c13700a","ssdeep":"3072:61XgkJq8yRSqZOwkUnpcy3Z10PIQoFBL3W3NAabkDfXbaECwtK37:UgCqVAqElUpLj4ILFw9zECEK37","tlshash":"9414239c50907f3af58880fdbd64bc2fde73dad4864bb04a21e5b86320636970a771c6","first_seen":"2025-11-23T18:51:10.677213Z","last_seen":"2026-08-30T07:25:45.516519Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":1073,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/odd.js?v=1784257330261","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.356Z","timestamp":1788074691356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/odd.js?v=1784257330261 HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-2f7\"\r\nexpires: Mon, 30 Aug 2027 07:24:51 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kcjf%2F8NVE%2BNSSSppESlHqzI0g05lx3%2B0%2BKwrm4%2FrTP1jZ9XNTWsqqGNXhh%2BN46CpcNKc5zt56YU9OmVPwRCJ3a%2Ff4Mkfiq6DNtYv75LFOIsdJqbDjLx4aK3qX1pTFS1MyxwxT2VxwA%3D%3D\"}]}\r\ncf-ray: a3320ee50f8c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759,"size_decoded":1300,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (758)","md5":"c3a8b54be7fea923bae0591b76aa45ea","sha1":"fdefb858b5932d0f93a6969e5ed82ebbb0c94ec1","sha256":"5ade30cbc4d44470c71ff3a68a07662096e7321f8945e047a876292ba201d461","sha512":"270c9184f11fb8b6094d4ae072c08e49e118ae62e0977a6c4dd81c3e67def5da110bf387d9f2ca71b93e783aed42bce662a376e203472f569e352a105cd087eb","ssdeep":"","tlshash":"5401208e618059aa5d847ce9d52dd6a431b60349328ac7d0949c5d017b280abe53be8d","first_seen":"2026-05-14T10:22:58.254433Z","last_seen":"2026-08-30T07:25:45.51712Z","times_seen":21,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/11/socolive-link-xem-truc-tiep-bong-da-1400x481.jpg","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.360Z","timestamp":1788074691360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/socolive-link-xem-truc-tiep-bong-da-1400x481.jpg HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"17794-691585df-27421423;;;\"\r\nlast-modified: Thu, 13 Nov 2025 07:16:47 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKmqnpwqUs2PXV7RUc5g7vzvSac5SIMF6Qn3RAi0EaW07Ny7zaRGfrp%2FsybXUUzFjP32SVfbS%2Ft3xWAaR0H%2Bq9HOvh%2BIBk2bvQOZVd3W7sqLvyPP9LW5fsYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4fb1256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":96148,"size_decoded":97224,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 1400x481, components 3","md5":"a04b2edbfa1857d04e7f7db60cbf0666","sha1":"d0f4197d7ecf5f1aed5f6d5eafad1baa63047814","sha256":"f26df241de7c18d832b82b1e852f037e39eae855a54b5afd2974efd11f6fb010","sha512":"d5ada821e967504efbf75e6829caf675ee157bbe667628a77bfc3016d65aedc9db826296eb9b556340f788dd0be0085f4f89025df01bd6c9cf174c2be77aa008","ssdeep":"1536:mSNbDdyAvAjj5nTMlwjqU4J9t4qaWztZ9Q1pN6oTUBR++UIdBDIEoHToBM:mlA41TcU4J45WJCNOBR++UIdBdmwM","tlshash":"f49312d5f3f06664fbedde30ecee5471a98022918aaaa7915534c66db0e80d487cb00f","first_seen":"2026-06-26T16:29:27.046098Z","last_seen":"2026-08-30T07:25:45.518604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":825,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/08/gem88.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.378Z","timestamp":1788074691378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/gem88.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"e1457-6a911db7-1800fc9e;;;\"\r\nlast-modified: Fri, 28 Aug 2026 05:33:43 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5nqE0FxtEZX%2BJGlmSjFbYcr3x9YZoTCCmbGKLMb3uSF2U5cxhGtYsVADxJ2IBH18jy0%2F3WbiEH8OXnyBhZoswkm0zsoIdf4EmM620YT4q%2FGay0kUiPHrP%2FKMrcezD7ly%2Fhz28BB%2BY4dwyKunTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 922711\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":922711,"size_decoded":923824,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"72da72ac92bb29f436beae97d2b482be","sha1":"399d0f20ddb407430d607b852b6a9ae711604f9e","sha256":"792af89f4b806f546d0188efef42c84569635e3b82bf1c142364e10f811ce42f","sha512":"d21c7b5ec0db90881acb6016ded477b9cb91e2315ec8000190294d03f459a17f87ff206fe2828604738cbb1ac992eada5d44383517d38ec09d41504ef87d2da6","ssdeep":"12288:TbYa2pJuZ3d5d9/uZ3d5d9/uZUb2dNL8DFHL8DFHLnbD5RdF9bJ6QAJ6QAJR:x2pJ8Nb9/8Nb9/8gG8DFr8DFrnxsQJQU","tlshash":"6d152332d4bcf646b2c77a2d05b656fa6f13a6af92439228062b36cd551810f0393df5","first_seen":"2026-08-30T07:25:45.52024Z","last_seen":"2026-08-30T07:25:45.52024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2480,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":603,"receive":1811,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.101Z","timestamp":1788074692101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.7 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"1c4c-68b4919a-251e6384;;;\"\r\nlast-modified: Sun, 31 Aug 2025 18:16:58 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoi2r%2FXWcFxtMyHptYrOERxzxRuow98j5j5MgLLcJzjb4hXtzoC%2FNISM0VPtwOpnbf8pru9WVqlt22EGfEKqXPkWqmILQlMR6pMSd78oJEjBk29hhgivHuFv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9ab4e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7244,"size_decoded":8317,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7244, version 1.0","md5":"239a062dc84e13d3bf0264055163f5b8","sha1":"df819f2954a4738a6bf7adfc692e16cc09d15ef2","sha256":"bc425300c8a8a921a3d481e8b2395ef3c6cac4333b7326ceb1f5963fa6102b77","sha512":"538e9bd520386b1e83597c74cc22343cbf8c024bd645fb38586df42abc8dfb94763a2b332c091a9b88d4bd93e9c6be893b3bdb39a95ded59b07a0868872b3fb7","ssdeep":"192:I+1ZEes2m7X8Yb1ASJaPOCD9P2P3v5oOy:IsOzxb1AoamW9P2vv8","tlshash":"58e18ead66249e8ede70e33cd234f73a4cf87d204a9ea68be54bd2b506558ca091409c","first_seen":"2023-11-11T17:21:40Z","last_seen":"2026-08-30T09:38:22.147818Z","times_seen":4849,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.102Z","timestamp":1788074692102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"3804-69a6ed7e-274bd3bc;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5V8B%2BQPTT3EHsACwBz9gQfC3AkUpT4udYJleYIoeNRWQ2Q%2B54TcNpa7%2FCoj8mp5hMHpdLQoNG9%2FBkuw%2F0Nbg%2BLD%2FYxwWJbwTI%2FYqI2dLS8DIRzL49Xi3a3u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9ab4f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14340,"size_decoded":15426,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14340, version 1.0","md5":"3860f0d8108ecb52fb8d95248475c0f7","sha1":"ea12964a22c83d28a3afb1c29ad45ee75e7e2d52","sha256":"0b60bbe04e9c479444b31270a72179f53e400beee57b7dd176c08e5e2e716831","sha512":"51efa4c2f86eed9958227d7a87fb08eb795cd478e4889e63cf40ebcc1f199990fdaf79b64310d4698f1459eb913965b399833a9bac7b62fac78eefe9a3711703","ssdeep":"384:4V1aTNugYTIPM493neccqcvNCfsM+Qzvimq:4V1aT1+IP3nGOfsMwf","tlshash":"5852d0b6a2acc754f41af5b4b180abb8048b2302c591f1e95b18dc795a53534cfbcb46","first_seen":"2026-02-20T00:45:13.010169Z","last_seen":"2026-08-30T09:38:21.907501Z","times_seen":5784,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2026/01/keo-the-phat.webp","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.114Z","timestamp":1788074692114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/keo-the-phat.webp HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"ee58-696533f8-1216c0df;;;\"\r\nlast-modified: Mon, 12 Jan 2026 17:48:40 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1rPZOOQs7JgWtc3R0YS3urWyG9JCsySJdoEe3gYrjYQavDIJDnN06o3LAXgjEpdN%2BwZ%2FNs5cz7sSqIKd2XajF6%2BB%2FsT0yYPoC3k%2FS4o6Htw6Cy0D5%2F5hZQt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9bb5456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":61016,"size_decoded":62095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ffd29cfecf4d158d61260fe341fc7fec","sha1":"68fd5c00b9a033349dffd5a185435ac92849b4a0","sha256":"9c3a6282d261c71d8f6d5abba24c436affa21719e75557d6a534fcc4d7c9d82f","sha512":"16d0204ead6be6c8b72feacaf116992b44d8e06f34f2f47e17b1928250de394a70e7badf1d51eb35c451fd5f83659acbedb37c8480cd9e54e07c02b72faf3f97","ssdeep":"1536:OI6CTeRWIQnGHMUJ8cVtlz0swPNhRJAL9r55K+s:O0TeRWIQe78qtCsyPAL9A","tlshash":"7853029750b50439cc070ab48bc4fa0763f7ba016ac5b3e57a522da42dc9b2852cbc79","first_seen":"2026-06-26T16:59:51.837078Z","last_seen":"2026-08-30T07:25:45.523014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/gem-ads.gif","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.081Z","timestamp":1788074691081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/g8/gem-ads.gif HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"1a9e15-6a3b9fab-8bd983;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vtNt5ZGZkTQUC0Uru%2FiwGgfpckRbqx9HxCmmbFvhssUJZEH%2BuCLye%2BZP7QP%2FUwIKAqIiTZda6L5SaDqx%2BZMjv614Sp3tl4%2F5wNLefAhdZJOrv1eqfN77VsO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee34ae856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1744405\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1744405,"size_decoded":1745485,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 500","md5":"de3c31b01759b4cad7fba1d15869f400","sha1":"1b4b135af279d2a4ca1660bde29b428432912a3c","sha256":"cad18ef9148fb4953a2358064eb61123c570c51fc5fc11c2df467019113acc44","sha512":"7239bb6a5314434070bd2b72c858834588524289c96e84d50d63054f5e8cfb0488821ef63c2e847cf8eff878e3a1ca6af7e53797a09e248d364fe4928a0cbeb7","ssdeep":"24576:jHT/zk9HT/zk9HT/zkm3vdWKh7PLW7PLW5VNX5wXU:jHuHuH5fdRwXU","tlshash":"552523bf6b73a4c544ea70a3d806cba39d6f076dc5f2c6740b16311646af1496c3e42e","first_seen":"2025-10-24T13:28:17.492837Z","last_seen":"2026-08-30T07:25:45.524529Z","times_seen":38,"resource_available":false,"data":null}},"time_used":2424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":1880,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/05/GioVang.png","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.367Z","timestamp":1788074691367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/GioVang.png HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"10ba7f-6a4ffc73-b0268ea;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPm7VHLrBksh9e7eXcN2LtgJ%2FbWFedU6w4xaGehu9kASuVOUHSK1q%2BYhjVau4pvuTuzymsyz6ZkF0bKvhzIZNDXQe8ea5zpDmcsLezrCbiqqRbio1PlIZnyka4qHa4LHWLeFP5FKEWQf2PULSvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599fd56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1096319\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1096319,"size_decoded":1097425,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGB, non-interlaced","md5":"fed23d3f307abdbc6e6c647ac5df9c74","sha1":"120858a2ae02efe0e7373b170557a14713e71cd3","sha256":"60448d1d28427a152582b3faf4df4dc11da3c6541d69cbc0954d0632ede46c58","sha512":"846edb037e2e408cd9c48a6b7cac2252f1e9687d02764f70d8faa0de154ce205a09442a75c42e4b56c4d2762d3d0be909591047e775a18594ed1d8785a5c6f96","ssdeep":"24576:5s3nu/hQAhRRXnRBgcSWtiUGBboUGEVoMQTAqyed0ASjMs:y3nu/XfqcKUwoUGEVoHAqysjSf","tlshash":"ab2533901d0a5248fab1b336b8b8045cfd361f6065d165d80ea4036e5e78ca1bb7dbfa","first_seen":"2026-07-22T04:30:54.559976Z","last_seen":"2026-08-30T07:25:45.525178Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2398,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":568,"receive":1762,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/08/V.1-CPD-500x500-LOGO-BOM.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.374Z","timestamp":1788074691374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/V.1-CPD-500x500-LOGO-BOM.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"35b70-6a4ffc73-b61a2;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vh9cnUOxbTSFRsD6BNrGDfI8J0a4wZm%2F8jVahou7wVxbvsNXzoeIJLhq0NSuYw8QB8hveM8m2AA1n3Bbd9YX6MhNWvgO5ZyWuTPPRcMuTt1rYVbUSgHK9iHTpP6xWxFU9isme1oWl4IErXEp%2FSo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 220016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220016,"size_decoded":221118,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 500","md5":"7228daf5fc10cfdfb721b41e865495b0","sha1":"5dbc0259ecf8298b00554e4be2d90717c527fedd","sha256":"dd93cbdfa9ffc2067d4c8c8ad268bfdb4f17292657860e321854df9acf636578","sha512":"c3a0bbe3d8bb4de45a05a1c45aad6e71d8c35aaedd15ece6524bf061ed4d6efd70fd6f404114537f28820d989fbdad265c6878f22e259f34c34e19a2c2002694","ssdeep":"6144:MdB7Ejva0Bps98NJusDBE/jEfu5DYW8Ak838AnYo:FuIJus+7EW5b8o","tlshash":"8e241341781d40e02c454390fb7d22fe6106e0ffafdd9e0498b9d4a93f892549bb96ed","first_seen":"2025-09-28T02:09:54.345118Z","last_seen":"2026-08-30T07:25:45.526613Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1745,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":567,"receive":1112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/08/net88.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.377Z","timestamp":1788074691377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/net88.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"173195-6a911dd4-1800fca1;;;\"\r\nlast-modified: Fri, 28 Aug 2026 05:34:12 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0N13%2Bqyg5Zuhbj1McLGaAGQUbUapN2VStEm1luvTclv4cZw3%2F8KRXeRJWmF8TMRsgSflPtHxb40ZHTQU63SYcdgDwuG4I%2BXX5r5u4FAIZnC2R%2BjPVm2opdO4RgRMjRsgzKJViYK68gbAz53L4vM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1520021\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1520021,"size_decoded":1521132,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"358027ce00c8e9d0fafc53dc64298ba1","sha1":"e6c4474501c3f01faa2dce2d3cb1fd69df0f1534","sha256":"2058ad5370a3780e8ce8d7159616e802cc0a12e73548de70378788a39285c8e7","sha512":"87841b3bf588c90cf7c496cc76f0b2bf43445a7a47898c2f285036d9e3ed98150c502ff29205d611db6a2aaa6a5217265557a8c066b51a0258a9497f62d0a454","ssdeep":"12288:ADsXx7Px7Px7Px7Px7MBtgyxiPAwE7iPAwE7iPAwE7iPAwE7iPAwE7iPAkdif5X0:AD6hPhPhPhPhVxxxxvU5XJ5Q","tlshash":"ce2523a9860c40cee33a93065bba7d60c87448bb51357b385693e32c49ff82b71b9dd5","first_seen":"2026-08-30T07:25:45.528074Z","last_seen":"2026-08-30T07:25:45.528074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2516,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":584,"receive":1866,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/12/keo-chan-le.webp","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.115Z","timestamp":1788074692115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/keo-chan-le.webp HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"10624-695367e8-281e924a;;;\"\r\nlast-modified: Tue, 30 Dec 2025 05:49:28 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xG%2FBiwRWu6yrkT39lYb3ygt%2FwXhWE4JkBkgQSts0buh13KS4VOlOblP0Uwl6hhBuqBSTBXD9kqAzn33Y8gAx%2FWyNSduVRm%2B12qGMdFo6HYyBefL6QfXNJRLm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9bb5656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":67108,"size_decoded":68184,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c8462e235263bcb8cf94475f23376ad","sha1":"517ebe454a02e1c564739b2a3fdb3d7ad247f471","sha256":"e4b185ff2ae961d06c4bb630bc3667603879514901c1454f6503034258c5a587","sha512":"58907419624f3776bece198645ad7d543d0bfd702e3f6f62c298dcaddccef228ad95b973f8ed6bb04a8ee9986e6a0ba994f8d2651e29bed0c853d313a2ef7d21","ssdeep":"1536:sOdDNMYHA+EfJFIo5Arv4MEVLrw7RhLOx:syxbHGfJNiv6VLrwdhCx","tlshash":"6b6302dfd6b39fe0015ca2e1f00facd7125d0542e8e51e44a9adc2fe4e976894126f8b","first_seen":"2026-06-26T16:59:51.851107Z","last_seen":"2026-08-30T07:25:45.529505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":656,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"octolink.vip/js/shortearn.live.js?v=1788074692239","fqdn":"octolink.vip","domain":"octolink.vip","tld":"vip"},"ip":{"addr":"172.67.176.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.249Z","timestamp":1788074692249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"octolink.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 14:51:52 GMT","end":"Fri, 09 Oct 2026 15:48:57 GMT"},"fingerprint":{"sha1":"0D:0B:85:94:15:1C:8B:DC:9D:1B:FC:69:21:4E:DB:84:85:1F:87:9C","sha256":"E2:0C:15:53:1F:AE:58:12:AD:3B:E7:FC:4B:EB:7C:2B:0E:3C:1E:56:EF:34:F9:EB:BE:52:4E:C6:EE:1F:FB:66"}}},"request":{"raw":"GET /js/shortearn.live.js?v=1788074692239 HTTP/1.1\r\nHost: octolink.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bRUKoAr%2FwG0NAo1jEN24KjsdTToD3Shrmhd3udubYS%2FQVacMH9%2FzGOph8RcSdxCH7uHryg%2FCojLxoWkV6ct90t%2FTscRLyO6ZLoG04AvOS1Z0yLooK%2FJgbei6ibOHDQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3320eea8cac0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074693436","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:53.524Z","timestamp":1788074693524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074693436 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7dq0EJUUAFyRh22KNmvBrxKFOliIMmGEKEFNrf8o1YbHpF4PNQtHRYL86W4%2B26r2IqD1KKEb5QOHGlOf2aqULQZAzJq3YciUaghE72j70uCuEluHR5ALZhBaS7KBa6a2LWFqLpMVks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ef28dbd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35219,"size_decoded":3987,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074710724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:10.728Z","timestamp":1788074710728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074710724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:11 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fqs9ufoHy8%2BbxVqfkO1XyBvhC%2BrsjxJmSynF23a%2FrBbIAXcZuX6oocBSceG1VziZD99AfffiCkOxkdA4BKiCS8v5UqNK6CdiwwvHLH4hb0OcFnsSgVJjOk%2FMi%2FUxlqXTWpvPVKayEzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f5e0c5d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35452,"size_decoded":3982,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/07/728x90.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.380Z","timestamp":1788074691380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/728x90.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"2ecd8-6a56ecbd-d00d23d;;;\"\r\nlast-modified: Wed, 15 Jul 2026 02:13:17 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5P2WOpvoLFSgNSk3l%2FGeVRdYhu8GXGPnunDeJh7H5sqieNxyGW2M9xIWz%2FcZ9YfkEKS%2BNVxZOKMmK96ImcoQsIbw7U5aYEZIRNYrWaKpP0cmXEp6eUUdlgx8t5PK8Ylp0RT7SV5POcH4ydtvsU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599fb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 191704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":191704,"size_decoded":192810,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"6589c153bd7b0c3d866444a7f42f3f6d","sha1":"34f659a9a653794610ebdbe07b2ff22b99011806","sha256":"18db71e83180fb7541c88e75242f546d32987ed91418b8aef85ac46ff8183e88","sha512":"da74b5a5e09227dfe0278c03a3f6dcd631f2bdc5e1b3b73a3c99d480a1d72030f4ab6b8f40cbc3a82494ceb2d75829e088949147ff23ee6aa8bf753bfa676eaf","ssdeep":"3072:Mjt511GaLdUbW5rRMpgCi3NkATIcDC1kz1MQiiLsVoxIYT8aG//N72cvH9JNT:MN1GKUKci3NVTfGna6YT8vhTbh","tlshash":"101423e8c0dd13a0ba6ac39d0dc469d11fb7b6e1781176e0696348fec09d37e7916238","first_seen":"2026-07-22T04:30:54.547331Z","last_seen":"2026-08-30T07:25:45.531423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1734,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":584,"receive":1100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/vendor-other-CJzWRXuu.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.785Z","timestamp":1788074691785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/vendor-other-CJzWRXuu.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-1073\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FpRwjA4sSAVVJiuZmPdlGOV7p%2FSgX55YcXQTyZm9i0lf3UPPRnDClq9P1%2BCfLaluw0IbWNRcJjVsNaKnIgoD4bk8rdA4DpJnqmuD1FzJ5Bak6cSxXqZ31F5ZfvxLCf39bI8L6pjrw%3D%3D\"}]}\r\ncf-ray: a3320ee7a8a30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4211,"size_decoded":2649,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3849)","md5":"4f71f580bd8b29e30a31c330ee4f0a3d","sha1":"96faadf3f7881593b3270ee6f2fc834b2cbca8fc","sha256":"2679004b12d79f77af07f5bd597283ace01e7797597d267f27421d4033be1858","sha512":"59d9a19314fa8a17682f10dbe2a60d7fac3e8b1d73b5b1722949b8434ccbe1dddeff3e700cdf223e57ffef4787c3b0f100de4e0b0c1d6ca817b7a58fc024b05f","ssdeep":"96:Uaz5IabueXBCZxQjm4PRBCXma6nwGBGzQujZ1AFqLXgai3rGcaFZix0ArQ:7z3zU2nrnmdjAFqUiDO2","tlshash":"3b91a5fdb291702503a2f2f2411ff51b643587516c88517586aae7f13d708ee11dbf1a","first_seen":"2025-03-15T06:13:59.855109Z","last_seen":"2026-08-30T07:25:45.532191Z","times_seen":49,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/30-08-2026/31.json?t=1788074693437","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:53.526Z","timestamp":1788074693526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/30-08-2026/31.json?t=1788074693437 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feJNPoVgi4LPC6G2h4nIC210RpoarclnlrHMepSPtA%2BIN3v5hdCarUD1aqd3q8QTHP6QdpQ2iDdTIH2PpeOXQ%2F%2FJLYfKMb0D7p7VO5mL91uFeaXyDdF6K4UGTtNQyKA6EDo%2FYMyR%2BTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ef28dbe0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2774621,"size_decoded":153814,"mime_type":"application/json","magic":"ASCII text","md5":"598783537b4affb09b57c6c81b421f0d","sha1":"869ed3705cb33c0f3400245e9a712a7c548c69ed","sha256":"d5eceb99de536d57a1be9616831fb3479db4539dc29add26dc8b169345fe5224","sha512":"88bb063c19d029273550b72b34c0d1402b63fdded89612845cde1ad298ca025f9ba190681dfb3679b2a78305c273efa74c22728a89eec3b15e0197a3fdb64d58","ssdeep":"3072:zNmPEFLLhPIlWZrqBILFQzhSd5D2yAF/JuOpuxwpAJ+xPPafyr0jC+KeU9iRW+5U:VWdx4V5Y","tlshash":"5d25ff6ce1bd0de314592074297f5242ba60125f0c993f507f0c9a8e2f4ce6fa9767ae","first_seen":"2026-08-30T07:25:45.532832Z","last_seen":"2026-08-30T07:25:45.532832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":844,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074712724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:12.728Z","timestamp":1788074712728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074712724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:13 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1t8mQmY6P0zqAhX%2B%2BOdf2%2Bt2V0YGjt6J8ZWUZirpO4ztqmhZ0FHHpYxfTkr%2F%2FogvprAzvatJhpJdycMyaXjqT3tw45GgWIOY5X%2F1YZLemn%2B6AP6gFKhVTHF3LhEMuqyd5tr1cBGDbU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f6a8e430883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35452,"size_decoded":3986,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trafficvip.vip/js/qq.min.js?v=1.0.2","fqdn":"trafficvip.vip","domain":"trafficvip.vip","tld":"vip"},"ip":{"addr":"104.21.71.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.341Z","timestamp":1788074691341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficvip.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 20:45:37 GMT","end":"Fri, 20 Nov 2026 20:45:36 GMT"},"fingerprint":{"sha1":"28:11:07:59:02:6C:67:BA:70:47:13:32:B6:AF:1A:37:7B:9C:17:CF","sha256":"4A:84:2C:30:71:79:E5:EC:89:0A:74:27:FD:AA:CE:B4:DF:32:1D:68:5D:FF:43:2B:15:B3:A3:39:2E:8A:58:B9"}}},"request":{"raw":"GET /js/qq.min.js?v=1.0.2 HTTP/1.1\r\nHost: trafficvip.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6c585b-302\"\r\nlast-modified: Fri, 31 Jul 2026 08:10:03 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJf20cAYoJaos7NQfyqS9eqj2ZQhMZd9yCC2H0xyZbt53yNkIzULNs2Ny2cLFHioKXzRa84Vw%2B8kKr3%2F1%2FQiOnx%2BIXUBtalQqsW40LzaxB7Edr7iJZ507%2FW%2B%2F6cQF%2BVCtA%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a3320ee5283f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":1109,"mime_type":"application/javascript","magic":"ASCII text","md5":"47474b2ad6efc68d926982f755c5a40e","sha1":"45255f56b65f0705856e261bc7f918d6ebf9b160","sha256":"6c61257d440d9659be3d04dfa1273b53a98760f7bfa44c95a7797768f40fd44b","sha512":"5e99b768ed8b38b90833de396b58580d7dc017f37717d602cb464c5d87d22a8481201f1ab6d3e0d5a0e3c7f986d6b9e60db3b5851c721190ca19ff12f7472ca1","ssdeep":"","tlshash":"2701681e8df1e832502720ba699fa01871a05e1b4854da54ba0ce6fcdf55ebc062addc","first_seen":"2026-08-02T02:20:47.160191Z","last_seen":"2026-08-30T07:25:45.534689Z","times_seen":14,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":26,"connect":20,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"trafficvip.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T07:24:50.256Z","timestamp":1788074690256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 07:24:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://gaea.tw/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0f4Hc202rw1jolde6KbyiORzXUG7xvRas%2FSqsuXenc3bBGdp9mZ5r5JRdYD85v0OUAI74fl1t9PB8SYWrQCyw4UIgeeUY2nGiKsEUcM5QSjFSj12cWSbXtd\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3320ede9bbe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134050,"size_decoded":30974,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11437), with CRLF, LF line terminators","md5":"5a056ed6296948a5f036a18668c4b3fd","sha1":"031aac5fbe17603752c26a41239463cff2be794b","sha256":"7f91c206814a5b96293a118648ad423d5752567df335499bf2e42ff2abd5a8f1","sha512":"27a5fd7959240eada2d351068955ff29131dc25a421e4630667f6ad8af598d0f0134e43afdc12cbc0d001499aff3798842980d653cca50f0c84afadac9fd76d1","ssdeep":"3072:AOsitFlQT66utUdmTmKKPK0DNm/b0jpbjOqi05S/sU4aFS:AOVg66ndmTmnb8AjpXOA","tlshash":"2ad31c3382992432027b42dd91697a0ce68a6227db019b91f3fe062ddfd2df5352378d","first_seen":"2026-08-30T07:25:45.535355Z","last_seen":"2026-08-30T07:25:45.535355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":0,"dns":67,"connect":1,"send":0,"wait":541,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/pink-flare.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.075Z","timestamp":1788074691075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/pink-flare.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"3aa0d-6a3b9fab-17a1491;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYrrBWOiihd8722B0mpL5wRzzO1pABdRxCg6Quq1pc7kkOIO26V%2FLk8183WL89EGA10m0v4t4jtC%2Bojw6D1hQZjJd0dfNu6jdkdYjOCbt2ffML0qXbcNp8va\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 240141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240141,"size_decoded":241212,"mime_type":"image/png","magic":"PNG image data, 1000 x 456, 8-bit/color RGBA, non-interlaced","md5":"fac94e454d1799eca9d68569ba850ac6","sha1":"b122dab34983014f93394f75068f4e247c71e25b","sha256":"15521376416311d82043b3cde3157facb5582d7a98d1a2919cce26e48b607d64","sha512":"f435fc9686eaa464eb5f8d17361685a634565866da84ce2e8c0dab9ddde11193a5db982a59f608abb4c36149874538ab3ab23c9672a1359b6274302c839e534e","ssdeep":"6144:4b2cu5Q3pESbC+I4mdqZZwcE1Gl1Nt8cOWi:4b2j+eSbCx4bZv178c+","tlshash":"783423deb46004523b61e648fe881cf3ce38ed8421bd11bfef2d69958c447972a7e952","first_seen":"2025-09-24T18:13:53.493716Z","last_seen":"2026-08-30T07:25:45.536909Z","times_seen":298,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":1154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/odd.css?v=1784257330261\u0026ver=7.1","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.318Z","timestamp":1788074691318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/odd.css?v=1784257330261\u0026ver=7.1 HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-15197\"\r\nexpires: Mon, 30 Aug 2027 04:50:39 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 9251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YY8%2F%2FQhimOCrkKM0lSopZHfLvQg4ljLy3Ybmmr6HWed6BMLtU9z7F88DOB%2Fjal2nxq1Gm0RTOThAtJdS%2FOZoU473fRn5YaITvbtpA3OktpSq1FW2vz0Nnp8Y34LSKE7yjFEUXb82sg%3D%3D\"}]}\r\ncf-ray: a3320ee4f8f78deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86423,"size_decoded":17672,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f6114dd088c8557c508399f82a8f77a7","sha1":"831260c2019317b81187e0915e4abcc9f34f069f","sha256":"a37fc74b32d038703dd4cbda1fccb24c1561c3586181a54c8fe8c2892c6959cf","sha512":"c4a1ecd29a24db9edf3c311ab8fe535709703af1351e133ee463e001070742e7f3cc8c5537b14efc8e2887f9f08de8329e273b11d09838a650c94abf45aa2fac","ssdeep":"768:k5deYNEkDDXpI4Sw25nJ+YevYUF+ieQcXKH9W1mTfOjpOb9/fxsAAcTHB2sGnL0d:GpIpugGFFMNHfPpjTUujxMACknNnjE","tlshash":"3f83c966e601221c796bd0bc7cb8ebdd6500b452d697aff8f4623f3a82c70d215b169c","first_seen":"2025-11-19T05:28:23.824216Z","last_seen":"2026-08-30T07:25:45.538832Z","times_seen":34,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":26,"connect":11,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/12/ricbet-DIGITAL-D.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.368Z","timestamp":1788074691368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ricbet-DIGITAL-D.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"238d2-6a4ffc73-2300d639;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xs%2Fz9Fg6LYmUhcVkV6EQc5p2xnzgQNoBu%2BqGqltfQiC0jz86a932auZTZXHhv3zh2mM4rnIilybO697Z3VT5UoZuDJ7QSoDpsCTgThvsSj486ydEopoNZ2csOZ6UQEyw%2B7EClhMM0LzCDRAw93E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599fe56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 145618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":145618,"size_decoded":146725,"mime_type":"image/gif","magic":"GIF image data, version 89a, 450 x 450","md5":"13bb5e1b717aef26940406a8dd5504b3","sha1":"015af077eee188e3d728e9037404169d1bf7392c","sha256":"cf69644e25d07e135ab6cd0c17ad98f6e824c52fab60007a440a83914d0d094e","sha512":"e01c5cab24aec69ad6b67d4b86f5e3629e72608168a9f95fab3a35d50fefa85e5b7d4da06f0c94e72be1bd5f347fd009d65c5b8592816e66001b4736017a0aa4","ssdeep":"3072:6jxeEI4FQX2q48i+OrWknIgSRCpJS3/FkDEbtEKZEIfOdY97yvdPF6I5D:z4FA2qvi+CfnwRCpyFkDEaKZBma9WVtf","tlshash":"ace3120dde1f50c0a867abff1eddabf9326f0182cb7ae861865c9122ef3416466500c7","first_seen":"2025-12-28T20:34:38.837542Z","last_seen":"2026-08-30T07:25:45.540413Z","times_seen":123,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":555,"receive":925,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/11/socolive-truc-tiep-bong-da-1400x481.jpg","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.335Z","timestamp":1788074691335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/socolive-truc-tiep-bong-da-1400x481.jpg HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"1a47b-691585e0-27421429;;;\"\r\nlast-modified: Thu, 13 Nov 2025 07:16:48 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7bSUTzuGlK8klV2ZMoARTtT8qlm4ulRa8%2F%2FjU53ams8ZqngBtJKRavxKrr%2BXieRuhWzUdQuFj7J0aRIxtWtRsVDNWSjmw0Fol5mjF2nysxQiyC6U%2Bdl5%2BSa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4db0856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107643\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107643,"size_decoded":108722,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 1400x481, components 3","md5":"016a926409756326f465864cc23031c2","sha1":"5330cfb00b75c5cc3c6be633af4b7fa9c7eee4c3","sha256":"1f18043b0732011d2cc17cb07a8f5de04507c470504151b81a82b9a0a4429f34","sha512":"aaadb3a635bc7f0bd8dd8eee264b5f306bfc88074e8acfeae02fefdd8dd652f5243aca8d277aa16e9ab9205263c9303000a4b4e637937867a1c407c34df5fce5","ssdeep":"1536:mJoB9HoHo4dtrRIopaVuW1M0+Op4sGPwS861BfAFlZSzj0Qy3b3tyXRya6NV0SxX:mJ6Ij/rRgV+vJ71CxGwhyXRya6NxB","tlshash":"4db3f11badebf473ee1f8d7c4de24f457843049a92709e3a977c4d4ca0463a06d8a798","first_seen":"2026-06-26T16:29:27.102795Z","last_seen":"2026-08-30T07:25:45.541078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":842,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/09/socolive-xem-truc-tiep-bong-da-khong-giat-lag-1400x481.jpg","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.358Z","timestamp":1788074691358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/socolive-xem-truc-tiep-bong-da-khong-giat-lag-1400x481.jpg HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"1be55-68c4d69b-264405d5;;;\"\r\nlast-modified: Sat, 13 Sep 2025 02:27:39 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpJiTGW9Zlpgd6iGX098Lp7rPtl7Q3uYj1XH4FKNl5BKGkwzjEyLPm3gG0CJ9oBlQ7%2B1TyR0A6zk7YKkuz3hSczfs3H9M2koT7feZP1RCikZBF%2Frcjy7lqrS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4fb1156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114261\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114261,"size_decoded":115334,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 1400x481, components 3","md5":"b6b66a2bec07eb2c0245ca94c4e5ef55","sha1":"f062c2b51c2fab22d64a2b2bc32c2cdb540997f7","sha256":"3db80c07513a583704975e3b1bd5a8502f84fe9af628fc69541224d67aa3f7d1","sha512":"dd86bd7d7912c0315cc16a7a0e3f8253106ae701e67baa38be482f68d2117aa32f53b41e30ed51c3403ef1f2fb83536d817fec7aa2a3393644104ce12db34228","ssdeep":"3072:mzkpUgTkBe79Bzi+amGV2zWsI2HLAjXxJfuQOPA:j469BzXSP2rAjjf/","tlshash":"46b312b49d72d917f9a398b235a6120ef357ad1cb26813e681d5a23b1e84bf05f4334c","first_seen":"2026-06-26T16:29:27.053798Z","last_seen":"2026-08-30T07:25:45.542577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":861,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trafficqq.io.vn/js/qq.min.js?v=1.0.2","fqdn":"trafficqq.io.vn","domain":"trafficqq.io.vn","tld":"io.vn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.361Z","timestamp":1788074691361,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/qq.min.js?v=1.0.2 HTTP/1.1\r\nHost: trafficqq.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T10:22:55.324834Z","times_seen":18183271,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.keovip88.net/images/league/default.png","fqdn":"images.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"104.21.88.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:53.587Z","timestamp":1788074693587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /images/league/default.png HTTP/1.1\r\nHost: images.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 19 Sep 2024 01:55:16 GMT\r\npriority: u=4,i\r\netag: \"66eb8484-71d\"\r\nexpires: Sun, 08 Aug 2027 02:55:48 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 1916945\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHid8ly5GT3asyL2UKGLRVOHrYtj7tweJbtHyF9uP07c3lh6jRG9oCalguQ%2FSLJdMpbCoYrVzy9mKtt11Re%2B1G770CPR8HaemEdXBYDtux8XMKsSt6LVUEdy1aU%2F5metG36BI%2Bb7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=10368000\r\ncf-ray: a3320ef30a500daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1821,"size_decoded":2717,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"809dd77950f19419aed1f594981910c9","sha1":"a358a396399639fb5090ae10640957b8ad91de88","sha256":"bc57c7318112f5e4aad2bd89dc3dff789ce9f426b3cb1a560a397cc6eda86052","sha512":"35ea37fffc104f8dce527973784e0e4cf282e72d1de8b000eea00183b6d71c9e8f126232fdd899ff80f403cc0b48ebc905e3119c44f3a778c86373921ed15ad7","ssdeep":"","tlshash":"91310b3c1b670ad24c4d9e2b55bb74c6f44740e00441a0946d6c6a6f774b5b93275fca","first_seen":"2024-08-19T17:48:19.17367Z","last_seen":"2026-08-30T07:25:45.544059Z","times_seen":33,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":5,"connect":12,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"images.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074704722","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:04.726Z","timestamp":1788074704726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074704722 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:05 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhKXmF4h1Vc9MrZLcuaXtlc2HxgSKDqXkzbHuBQBQ0%2FB%2BKoS9Knq9iWw8usV8O7gngu6WK4MIvPd%2FyCsfabWhqFSKz%2Fa%2BIBopsa15TJjqfkxGQWNBJPzLCp3qLfy5vas4TmUGGt9LYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f388eb80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35452,"size_decoded":3982,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074716724","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:25:16.729Z","timestamp":1788074716729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074716724 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:25:17 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxsD7FVjCuezBZ9MTGPeq9sml4T5gMRizrhsXpxeXrGJmqDjvXeotNgcxYn2DJkB6wi5iEVY04Bg%2Fz3BwNVMVHGFzrbjOQ0uRFBRE6ffCth8a%2BeqwsKnVANlW7pg7KQNgHjY0u7oG6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f83998f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35452,"size_decoded":3976,"mime_type":"application/json","magic":"JSON text data","md5":"8584c2efe146366d069574d05b3291cd","sha1":"42d472c8f1d0b06a81345a9ae3894ebb3ed7da3e","sha256":"de1d1a9a473867abab99a39441790e65688cecdbaf6cb9ebe4539bcc19cfd983","sha512":"13d886fa104f4e2ef8d1a346efeff0ca16bf3ed12ec56d987474c2bd9e0d7484a84a74168ea308a2b5096a03c048165cd63e0f3b9f5508c416afdcd401010a2c","ssdeep":"384:tmkoZzZ7JhUUu3wg3/3OwxM+8uMWJJNuJYt:tloZzZ7XUU6wgP3Owm+pMWnNuqt","tlshash":"1af2785ce1bd0ce3148a20b869be5353fa60524b0c997e107f0c5e8d1f0d96fa5ba79e","first_seen":"2026-08-30T07:25:45.453717Z","last_seen":"2026-08-30T07:25:45.453717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/donghanh.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.072Z","timestamp":1788074691072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/donghanh.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"f15e-6a3b9fab-17c6b29;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2F4vpjJjGp879VtnoSZAY6gZJsesKMMZYJL5auiAGdHyGmwWXR6o9135SG%2FQdS6MVkk1zsGQQIiI00Z8It4uRYO0tloYPRBxdgyqqb505Nm%2FL%2F70FhRDYvUq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33adf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":61790,"size_decoded":62863,"mime_type":"image/png","magic":"PNG image data, 573 x 69, 8-bit/color RGBA, non-interlaced","md5":"8076e469806951531db0d5e7483b0518","sha1":"4a65e412bef59d1bd83c64f2fdd8a62e309be62a","sha256":"9b6d749c0e072c85546eacb5c23093ccea0b4a629b29ef0af847ae5d95f982ac","sha512":"aa5024097b5c18924e031f08cf1876ec88a4cba2baa4b43254064d9247c18fe9cd829a4a5032948874682247898cb411aa6afeb0560147116905331b66bb9d85","ssdeep":"1536:+sjysygUP6Wh+Gs6gKvCpgBZm92HYStRWiL/B4c0JcHBKgVY:+KAR4GsKvCi283x5aqHhVY","tlshash":"9553f273f0627c455a41a8bd21248e659356b0c747800bdf8381ffaeb26c22e59f5af5","first_seen":"2025-09-24T18:13:53.418273Z","last_seen":"2026-08-30T07:25:45.544664Z","times_seen":297,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/Group1.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.073Z","timestamp":1788074691073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/Group1.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"a2118-6a3b9fab-17c6b21;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rq%2B9chKsaGbWa2GQfFp%2BLzpfr5ll3nA9oGtezXKATHN3G1f%2F7eAVvJB8eQwmAAlop%2BQJv%2BjERptnR0W%2FfN%2B%2FxMrqQ0%2FHVT0cNtZzYj2AGY4NdjvOaUd81nH5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 663832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":663832,"size_decoded":664917,"mime_type":"image/png","magic":"PNG image data, 1821 x 966, 8-bit/color RGBA, non-interlaced","md5":"a1f412bbbc024d63216e68e93515d153","sha1":"2c896cfd78f239d991c19a0e8991bde2fe5c02d9","sha256":"0347ba0bbee63c9f4af46b41fd8ce9ec37f6eef37180657f38713c983a1ad650","sha512":"289d2e5985b82b371952f44cb27c9ef85a13ed1c884df95963ca03a841c8b599cfb108f6fdf081ff387726ed7d4d9dcec4df721a985c4c1c6c9276fec418f2db","ssdeep":"12288:/ewWNzM5LNu/iypRjvUQF5o6/zIhoelMNPWCU3LKwjvhLfE3hNREWN:/UzGpu/Npye5oQshoRJWCU3/Z8xNm8","tlshash":"3be41288f6d5aa6ccdef52b4ecd8afc2075a7d76cd2614d0360589668980f7c3236b1c","first_seen":"2025-09-24T18:13:53.464414Z","last_seen":"2026-08-30T07:25:45.546005Z","times_seen":296,"resource_available":false,"data":null}},"time_used":2260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":1674,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2026/01/Ricbet-728x90_2.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.382Z","timestamp":1788074691382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Ricbet-728x90_2.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"496ee-6a4ffc73-7009ac4;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BATEWvvPXWSYM5DUshREhNur0NJeETzgVpbiUW4RP4DlV3J5%2BAaWuDmx%2Bpo0hgPJjR9IvDKplwANdHlk0bSYxd9%2BSA2Uv3BVBFCS8yjySirziXSFjYTWV0oQu%2FU9ntyQDjwTIzP0Wg48NEVc4tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 300782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":300782,"size_decoded":301890,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"e035e4956304ceb44031d3a0d30b8ef6","sha1":"0bdb200c1aa20331d581e3ff47d1ff7ef79dae9b","sha256":"6141741015f022c0484be8a216e408be05e3f7a5294072fc42b84559fde0a2b9","sha512":"70d0d0db3f35231911af40f648ad0cc7a5c625ce698f79a8a09f7c909acbaa42aabb5aed2d25922e6258518115ce9c772da7a6139b18d435c423ee2782e1dda1","ssdeep":"6144:rlFPNdPt2GLZPrxyn/oRv2GpqEcHOt5KN19G/bt7WS9YCElRpa5ugB:rtdkGZzEa+mt5Y192JrqH85ugB","tlshash":"0954131b33ba358756c25ffa1835e0d8dde6acb4532c8d898c1fccafa5233424558d96","first_seen":"2026-01-13T02:58:05.741654Z","last_seen":"2026-08-30T07:25:45.547856Z","times_seen":51,"resource_available":false,"data":null}},"time_used":1834,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":564,"receive":1220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/guidePopup-D84pqyLe.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.779Z","timestamp":1788074691779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/guidePopup-D84pqyLe.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-2ad9\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RoJaRJzkvAKAVlm%2BsnMz%2BTzMdQZleaEw1nN5ZUhOC%2BQ5jtW8smc9shSpzc%2FfLC4w0C27Gw9TskqlsNDiRcFZy%2FzE3Xeobc25SucRdw6piRurOGoVPrCdaj%2BkdlPV7dlnC33iEpaAw%3D%3D\"}]}\r\ncf-ray: a3320ee7989f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10969,"size_decoded":4834,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10939)","md5":"baab1b4881b84188983fa106c21ff1e3","sha1":"bf5bf59086a7d93ec0ff1b968a676f2b51d32ca7","sha256":"17434b142f626bc8453008c05df1671089a4721e70a4cbd5649c78d6158a24c3","sha512":"cc98ac98382b65e69aad695ee5115637a728ef3f3456cf6c9113e7bcf4ec3707d045878b123abb71f609aa9f3d4250c1ec817e0d5baecb73cb95693440e09b2e","ssdeep":"192:5luv/Ro93yzaAKtu6K3+rNK8G9Qrrp7nrp7nrp7nrp73PpnNJnNS5QQThYLY6s:5ov/K93yza1tu6K3wK89PxNJnNPQlYkz","tlshash":"f732c8e8b258f42cc56249adb57c5501f01be4b4bb1d98c0e1bc0f2f5978893b872bd9","first_seen":"2026-05-14T10:22:58.306794Z","last_seen":"2026-08-30T07:25:45.54855Z","times_seen":27,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odds.keonhacaitp.one/assets/odds-Cyh55BP-.js","fqdn":"odds.keonhacaitp.one","domain":"keonhacaitp.one","tld":"one"},"ip":{"addr":"104.21.69.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.782Z","timestamp":1788074691782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keonhacaitp.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 21:53:43 GMT","end":"Fri, 27 Nov 2026 22:53:41 GMT"},"fingerprint":{"sha1":"AA:CF:62:4F:93:5B:0B:64:7D:BC:6A:D1:3A:31:04:A3:40:7C:3A:82","sha256":"49:B9:A6:37:A7:6B:0D:66:D9:5A:6E:25:1C:6A:41:61:79:1D:7A:9C:2A:04:8C:E7:26:94:20:A4:62:40:F6:FE"}}},"request":{"raw":"GET /assets/odds-Cyh55BP-.js HTTP/1.1\r\nHost: odds.keonhacaitp.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://odds.keonhacaitp.one/assets/odd.js?v=1784257330261\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Jun 2026 02:22:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a389c78-13806\"\r\nexpires: Mon, 30 Aug 2027 07:24:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPYksb%2F0k9NLYi2Rg1BxNJG%2BlT6MCEBxhvkRy8DNm3kEzJRcfK%2BIhTF2I3t6fmpOuGYglYik61b4SZ78e4X096zS3ft%2F6V0NQhU1n9qHirftw19Qtd%2FvygTTkZd4z8Y1qdOrSy61LA%3D%3D\"}]}\r\ncf-ray: a3320ee7a8a10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79878,"size_decoded":20349,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64840)","md5":"095906be9ddab527bb4ec840fa0c3196","sha1":"4c3e554644084930f3205f8e4d758cda85230ad2","sha256":"8702dc55353d9c9630c828450f9d5400ea04602ec4d58dae9e5fb1672246a97e","sha512":"a65e4e9d19ebc5f2d0bbc81f2d6c58fec258a83af6c11e390aa5b3f244238ccf6a63065e7cd8e7a728101239b10c16311a27348bfb3e2bedbbc996e4ea9ee798","ssdeep":"768:GALa42Opuq/J8Mlk2QSY+1rPCLliBQ/PxXJCfT02KsslyiqY01FLrPtoNOMyYcR2:la49S200BI8Jf/qVkTd0k411w71RoFj","tlshash":"5373955cc03d961cf820888cd87f822b641a795be219f8e5747f1f390734a5677a63ba","first_seen":"2026-05-14T10:22:58.316325Z","last_seen":"2026-08-30T07:25:45.550426Z","times_seen":21,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.098Z","timestamp":1788074692098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"3804-69a6ed7e-274bd3bc;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gr2NeK3RQbmcgq%2FM%2Fvw5rrwzdBNoYWMFzcOv5o%2Bk8PHTqYnHSimA2wK0WhbOXXIgIK246e%2F5S4T118aLpVzAmbU6RGYcTtgOj1boCQchdl1XyJb8O4Py%2FFX1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee99b4c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14340,"size_decoded":15427,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14340, version 1.0","md5":"3860f0d8108ecb52fb8d95248475c0f7","sha1":"ea12964a22c83d28a3afb1c29ad45ee75e7e2d52","sha256":"0b60bbe04e9c479444b31270a72179f53e400beee57b7dd176c08e5e2e716831","sha512":"51efa4c2f86eed9958227d7a87fb08eb795cd478e4889e63cf40ebcc1f199990fdaf79b64310d4698f1459eb913965b399833a9bac7b62fac78eefe9a3711703","ssdeep":"384:4V1aTNugYTIPM493neccqcvNCfsM+Qzvimq:4V1aT1+IP3nGOfsMwf","tlshash":"5852d0b6a2acc754f41af5b4b180abb8048b2302c591f1e95b18dc795a53534cfbcb46","first_seen":"2026-02-20T00:45:13.010169Z","last_seen":"2026-08-30T09:38:21.907501Z","times_seen":5784,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/live/31.json?t=1788074696721","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:56.725Z","timestamp":1788074696725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/live/31.json?t=1788074696721 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:57 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB0nvNFzwykyPNUl4P%2FoBFW8onTVvyViG1nDK%2F0Jw0wClDlC3qm9Z2CRoDePH%2BlxlAJRlzMVTe3w1fNcPV2XbEHKoujLNYfDHHp4QhUPojG3Bnq9nTYCS35CsJEsvBqr%2FugUbBek7lk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320f0688170883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35219,"size_decoded":3993,"mime_type":"application/json","magic":"JSON text data","md5":"03717df9b276478bf29b87191203aad9","sha1":"6f48b17e627200a3261e62f7d3254016a53e37f7","sha256":"b6853c9f968c2db44459e6167d226a63e8f13dd001ec082462e4b32be64dcc22","sha512":"7a306ea2034eb9bbe2c20f129f1e51eb236fa8a1940eeb92504a48e6517e22c733a14678b498de2df167376e79ee65a3429d48b859555e4c3b4648c4a419562c","ssdeep":"192:Ckm5/05UiSoZiietYfl1N+nG+AUmGh7WkGfrDd+J8aBiSUU1iaDK1U1BFMGUCBPN:tmroZCJlUUu13b3O5J8gMWJJfJh","tlshash":"90f2675ce5bd0ce314ca20b869be5343fa60924b0c997e107f0c5a8d1f4d96fa57a39e","first_seen":"2026-08-30T07:25:45.448344Z","last_seen":"2026-08-30T07:25:45.448344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.7","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.054Z","timestamp":1788074691054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.7 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"25095-68b4919a-1e1369fb;br\"\r\nlast-modified: Sun, 31 Aug 2025 18:16:58 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rMUt%2FTLZijVPpSjfbvjZfamjHTMU0IEoqNU2KXxB1lxWuBLpOJmRXQdU%2BbkiVH%2Bc2AVmBJwihbCbs6YxVsLiaoshuudATCkDJkw%2FGE98MTbeL7OmEK%2BxEUq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee31ad656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151701,"size_decoded":29118,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07752037befa9f1b8adab1bdebed6891","sha1":"1b033710dd902265b49885f91a8b174b0b611622","sha256":"f33b70f5f1d46edbe129750ed686fb7a56c300cd2053870f062124726414fb56","sha512":"15459eef956c86040eac3fca20e993b28d2af8b5c796a2d36e38c039a24bf5d1226ff7b3ccb4307683cfea2c7299f65e6ef9503bc3c703871fd8fe7af0a322d6","ssdeep":"3072:Xq5/324TXYK8Jm1LqCYD2Sx9JNp30dOeLWo0EADT+1zeckhNV5Q:ySx9JNp30dOeLWo0EADT+1zeckhNV5Q","tlshash":"d8e32b52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2024-01-25T17:47:27Z","last_seen":"2026-08-30T09:38:21.982805Z","times_seen":2255,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/cta-button.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.074Z","timestamp":1788074691074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/n8/cta-button.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"18c5e-6a3b9fab-17c6b28;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8NfHJ2fETAkkIN6KkqlxYMrPLGy41DOy06anhDFG89WXqRVd2zXA%2FxoGx1mioj%2B59GU3hmc8IGW9fBNV%2FCKk1bu43jhcqb5a7ZrdsXltKAh1MOB75lsJt6C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101470,"size_decoded":102543,"mime_type":"image/png","magic":"PNG image data, 509 x 144, 8-bit/color RGBA, non-interlaced","md5":"934adec7d5d65f3539afd2ead833fd56","sha1":"0c6713e6c17cad62b89d085ebab0ce9fecd8d931","sha256":"3e2cc10809380167cae72857081d6dce1d24465b2fca0397e2000a9cc58ab389","sha512":"623158d24d52f61aac9fd0eab5e753a1a7548ecd8b3a8798235e08e531173f9cef96a5ec6d003a7ee9e973d230cace99392f3585773ed75c66b3d08934bb58dc","ssdeep":"3072:q85mOaO08zKx/DtxdWlevTvgtooCN7q/Oq:q8QPO1zKNBuQvgtoNN7qmq","tlshash":"9ea312ace8d3673848e4f77d276cf9def5c485c86a29881ff4e1429447318d64a58b88","first_seen":"2025-09-24T18:13:53.466495Z","last_seen":"2026-08-30T07:25:45.553387Z","times_seen":298,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":844,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/cta.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.079Z","timestamp":1788074691079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/images/bom/cta.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:34 GMT\r\netag: \"4365d-6a3b9fab-28087452;;;\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyNrJIrVQ6hqE2thrhiewWueJ8hwUeX%2FKbFWGF2l0wVIKpMLDrEJAa%2Bz9XMtmI4PDIOoNFrmNqM%2B1sqElc%2Fkv7%2BryN3hs5wsX5KffxEPjH8XRtMJD44%2FT3x7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee33ae756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 276061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276061,"size_decoded":277141,"mime_type":"image/png","magic":"PNG image data, 1040 x 230, 8-bit/color RGBA, non-interlaced","md5":"50416bd8d5c13ad2c7acbd48937e1d67","sha1":"08e02db69016f1c510e830c13d57bb05509d3c38","sha256":"8a931646d7e729b98ff0374d988109c5f6518fe8c5b44d4077c0c2ff72e08238","sha512":"2856a6fb9b5b1fd2e985a92343ba00270a79619b24eeca6aba813d1b6de105ebe906a91686deb38194fd7798b377a606879a75367db3d168b2a852a6e47b52a1","ssdeep":"6144:ran4aGft5IBYbNr6T63FAjV7vSrxOAuCzuZbDl28:ravGmYbDFAjUVTue8","tlshash":"cd44237fb21deb20f743b47151bb8e5ee65608aa480214fab35676f532366dce0a440e","first_seen":"2025-11-23T18:51:10.701423Z","last_seen":"2026-08-30T07:25:45.555288Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":1323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/js/popup.js?ver=1.1.0","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.351Z","timestamp":1788074691351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/plugins/hpp-suite-seo3/assets/frontend/popup/js/popup.js?ver=1.1.0 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"1889-6a3b9fab-2742b35c;br\"\r\nlast-modified: Wed, 24 Jun 2026 09:13:15 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uc%2FSuVFdpDuinX2XUBKkvkdoZoonr6bmUsVyb3eLoM9%2B5z8jNiNHQ6RtZJF8n9ZPMf0lLrl2hMq%2BRYmHLRPrNFfwHhd0c%2BkgIYOEz6%2Bhvs%2BAtuLbbtJkjtL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee4fb0e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6281,"size_decoded":2578,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"04a2401b240a4b0b696fc54556410997","sha1":"2f776df3c35bd697450077125b088fa0f0b63565","sha256":"836a6717ef71f74067374fcd3760ad15a77cad2815cfbb5055e422c8d9ce17c8","sha512":"35d634c731d802d2ff41735ae79c45ad8afc678bcba239c068e4e609c4a78e3ba6df6df2e9bfa5e9a562eac027f9c12025f2bb6f5e01bc65a41d6c3b40d9c502","ssdeep":"96:7Te9syLWIlR260IyvHE+RsROZazlkBfrcNLvaQ0igB9I2czhL2s6ylc:HyLWIlR260bvb1azyaNjaZic3Wc","tlshash":"afd187e870e770514277b07c4feb90697235a803620ecf507c2c53916f94a7a97b27ae","first_seen":"2026-03-31T08:31:00.751058Z","last_seen":"2026-08-30T07:25:45.555973Z","times_seen":19,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.098Z","timestamp":1788074692098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"a880-69a6ed7e-274bd3be;;;\"\r\nlast-modified: Tue, 03 Mar 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKEOEFZ%2BtRxLFykDm8iTruWD45RrLKyt%2F6ZFcjV1ocwvuKugh0KV5RruSLR5uFXsylFliA7RpCX%2BkPx4Ou4kpCkPp2H%2FA9Tn%2ByU9FjJwRk9QgAnpdgzfJRGq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee99b4b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43136,"size_decoded":44223,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-30T10:22:32.472996Z","times_seen":279962,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/12/keo-chau-a.webp","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.117Z","timestamp":1788074692117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/keo-chau-a.webp HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:35 GMT\r\netag: \"10c0c-6950682d-281e9250;;;\"\r\nlast-modified: Sat, 27 Dec 2025 23:13:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLyH98pI5xWm%2FHNcEatGApeBu79%2F%2FS7pUE2KMIoouejD6ElGQPLCeKKdnNOwZN8J5V6%2FuU7SZ4vGdALSpEUnzaBqqAvt%2BmhQ4gJIT%2FP76YJRoeAp6OwgzoX3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee9bb5756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":68620,"size_decoded":69700,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"af4eb4e55fbbf38ce6f9f1968dc13b4a","sha1":"f7fd10dbd844735f57a5e4a76d2c4ba1e902afae","sha256":"0ea231d48d0fb826cfef0a06285ac578d4a2bc751ad6d6602c29f1b834aa56e4","sha512":"cf1a17d4cd618c1b46d5ccf4ea6be4706e530eada7b476c787f35a29d5ed26400e4d152dbb724220aa2cfbc0a8d7ecb2a712a88575fcab2302a4f23097db365a","ssdeep":"1536:y75fx/kDzJFoDni14bGXKLv01xZI2HLdWnzxHZkY:ydJ/k/DoDlIQ2HhkrkY","tlshash":"fe6302a7386a7b9ffbc1deecce43195493cc52cc851a017348e01388952e8bcdad95a7","first_seen":"2026-06-26T16:59:51.887638Z","last_seen":"2026-08-30T07:25:45.556584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":648,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-odds.keovip88.net/storage/odds/30-08-2026/31.json?t=1788074692716","fqdn":"api-odds.keovip88.net","domain":"keovip88.net","tld":"net"},"ip":{"addr":"172.67.174.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:52.737Z","timestamp":1788074692737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keovip88.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 07:41:33 GMT","end":"Mon, 16 Nov 2026 08:41:30 GMT"},"fingerprint":{"sha1":"C0:1C:10:A9:14:4A:21:AD:02:2E:1B:9B:80:03:33:6F:0A:DC:6C:4B","sha256":"64:40:28:3A:5D:92:07:94:E2:9C:31:3E:77:DF:68:B6:2E:D0:D0:22:27:2C:C7:A1:85:C2:0D:DC:4F:63:BC:A6"}}},"request":{"raw":"GET /storage/odds/30-08-2026/31.json?t=1788074692716 HTTP/1.1\r\nHost: api-odds.keovip88.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nOrigin: https://gaea.tw\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 07:24:53 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=10368000\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdfFI5urEm7uPFRueTdj5eU%2F%2FUCR%2Bq15kV2P%2B7MOU1S1b9ADV%2Br%2BF3cvxl%2FOtknMJ0u6wYHHhEIsoT%2FBR4zpI9UdsX7fSCMd4zTrSlZfeNmvkBPvROKx5W1OpicmswGlHLUX6v8x%2BTM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320eedcd0d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2774621,"size_decoded":153822,"mime_type":"application/json","magic":"ASCII text","md5":"598783537b4affb09b57c6c81b421f0d","sha1":"869ed3705cb33c0f3400245e9a712a7c548c69ed","sha256":"d5eceb99de536d57a1be9616831fb3479db4539dc29add26dc8b169345fe5224","sha512":"88bb063c19d029273550b72b34c0d1402b63fdded89612845cde1ad298ca025f9ba190681dfb3679b2a78305c273efa74c22728a89eec3b15e0197a3fdb64d58","ssdeep":"3072:zNmPEFLLhPIlWZrqBILFQzhSd5D2yAF/JuOpuxwpAJ+xPPafyr0jC+KeU9iRW+5U:VWdx4V5Y","tlshash":"5d25ff6ce1bd0de314592074297f5242ba60125f0c993f507f0c9a8e2f4ce6fa9767ae","first_seen":"2026-08-30T07:25:45.532832Z","last_seen":"2026-08-30T07:25:45.532832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1410,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":574,"receive":819,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"api-odds.keovip88.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gaea.tw/wp-content/uploads/2025/09/cropped-logo-socolive-192x192.png","fqdn":"gaea.tw","domain":"gaea.tw","tld":"tw"},"ip":{"addr":"172.67.153.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:54.260Z","timestamp":1788074694260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaea.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 01:36:56 GMT","end":"Mon, 16 Nov 2026 02:35:27 GMT"},"fingerprint":{"sha1":"FD:7A:EB:EA:49:25:7E:E8:B6:94:61:53:CC:19:D6:2C:B8:F5:9C:80","sha256":"46:6C:A2:FD:5A:E9:73:65:D0:60:61:E7:F5:31:32:A2:A2:FA:AB:7A:E5:3C:38:2E:56:44:AA:F3:E2:0E:96:1E"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logo-socolive-192x192.png HTTP/1.1\r\nHost: gaea.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:37 GMT\r\netag: \"324b-68c28f9a-264404e5;;;\"\r\nlast-modified: Thu, 11 Sep 2025 09:00:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:54 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1MyAMTMbBQXsN3TicnMkJg%2FIWSwMYoXUsr7UjuvuhGuPPz0XdiweysZvw3tiUcjnck4xvmBrK1P5KVOSWMqG3zynZJqaZ4BwaVEOL28TWroZYYDpHPIFvXL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ef72bb356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12875,"size_decoded":13946,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"585f4eedc251bc964ba44a1614513d52","sha1":"71de942486a2b573e1fb6fb765f66ecdb3be91d4","sha256":"a50428216a450818dd99d095843d86ef89cd20629e27c95543c623b183be0ab2","sha512":"ab8a0fc7c7472d21b8fa034367b21bbc4f92e6a1686c333f82fb10f8fb40f08375aa3e1ac7f5943ee211a3f7caf8029929b07248bdb50f2d16ec79efcb58f1f0","ssdeep":"192:f5ky9bYTIH3957RlriJUTAkA8NSvHAzqD+79tvZ8sHlU8Pqbc6hNykmFpj/uK:f5PDNtisAksvg2YesHlUQqbcsykmb/F","tlshash":"5242cfe1308eccd0bec845c3e298a5876f25ab3918c093e1f8b58218dd6e5d1cc938e5","first_seen":"2026-06-26T16:29:27.086728Z","last_seen":"2026-08-30T07:25:45.558417Z","times_seen":6,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"gaea.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.344Z","timestamp":1788074691344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 23:03:54 GMT","end":"Fri, 13 Nov 2026 23:03:53 GMT"},"fingerprint":{"sha1":"E8:3B:4F:96:A8:A6:FA:EA:37:D7:C9:35:E5:CD:E0:18:91:18:06:FF","sha256":"EB:14:F3:9A:CB:C9:C1:BD:52:EC:23:F3:98:AF:7C:A7:BA:3B:A1:F8:35:32:8D:20:7D:20:E2:94:6B:06:04:64"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 07:24:51 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: zstd\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:04\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: ea4f4454c5e85b13953b9cb62287b1c6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":991,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-08-30T07:25:45.559873Z","times_seen":17620,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":24,"connect":1,"send":0,"wait":2,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/12/V1-CPD-500x500-logo2-B8.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.366Z","timestamp":1788074691366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/V1-CPD-500x500-logo2-B8.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"4ac29-6a4ffc73-1c002c2f;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbzy4jsesCHO%2Fa1zs7W1SdL62AMvXrlmIMP0KxXtKfd9olt2s72PVt%2BYZNu9ta1Sy3%2FulhKhZNjiLUeS2pnGSDYhRNTmzgV89EC0194ogI3KlCLxM3y4wjT1Nk8CfeV2GazFXWH8624ZhDX%2Bc9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599fa56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 306217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":306217,"size_decoded":307326,"mime_type":"image/gif","magic":"GIF image data, version 89a, 500 x 500","md5":"cb6c3c74eba61b65d7922f1329549b4c","sha1":"486542e5b51602fd0c564579745a20a71b7e4ce4","sha256":"113672ba53695b2b8276ff362bc1cc784db584207cedba346d3c00d8059d6548","sha512":"866f7bd1852d569f37340b70af97c72037632b988e2e2f57eed0e009e419322f6a1b24a118080a263fdebc9072f248e90de53bd342a45c405b88651809f35605","ssdeep":"6144:v73EghW7fQdZ9VBqUjnNreyxqfLeMGXkn0qIEpbUQb4VzN4:v73Et7fCZ3Bq8NqFz0qjUQbSzN4","tlshash":"405423ff2665c3985059804a62529f74fffd200ee1558dd1bb0ed39abac8cfd85b0941","first_seen":"2026-02-01T11:18:33.936353Z","last_seen":"2026-08-30T07:25:45.560537Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1996,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":600,"receive":1327,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seo3-banner.megatech.global/wp-content/uploads/2025/12/VB-450-X450.gif","fqdn":"seo3-banner.megatech.global","domain":"megatech.global","tld":"global"},"ip":{"addr":"172.67.183.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gaea.tw/","date":"2026-08-30T07:24:51.372Z","timestamp":1788074691372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatech.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:20:59 GMT","end":"Thu, 08 Oct 2026 21:19:35 GMT"},"fingerprint":{"sha1":"B1:00:0B:E2:99:27:17:1A:F3:F3:2B:6C:C1:62:1A:3A:FA:AA:24:B4","sha256":"BC:94:EB:48:9D:EA:95:5B:CB:32:C0:DE:DB:4D:54:CE:5C:1D:72:30:34:E4:1B:37:72:C0:2D:01:10:9F:AF:8E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/VB-450-X450.gif HTTP/1.1\r\nHost: seo3-banner.megatech.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gaea.tw/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 30 Aug 2027 07:24:55 GMT\r\netag: \"232c0-6a4ffc73-1c002c23;;;\"\r\nlast-modified: Thu, 09 Jul 2026 19:54:27 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 07:24:52 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzrRoEfCXvjL8zyn%2FZ6gUm1IDBJQ1Q%2Bv4%2FgblRh2kn7562DfZe7aIMz6SKyGwjGSj2DC0uGR9ln%2F75KaL8s9tMIC1IZ9b5sO0rAoEJBQXfzh4Hi975okIQ7Qb07lwb9UPyWNc8cdXBilvt2CHGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3320ee599f456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 144064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":144064,"size_decoded":145173,"mime_type":"image/gif","magic":"GIF image data, version 87a, 450 x 450","md5":"2179d26be81da5026c3bf028b1cbad3a","sha1":"d82a00445af9f89e990b5fea1fd3f3c0dce243f1","sha256":"af9f1a7bdd153fbba1ab752debfbd8110e81f48146ec12c66d6b851fbcf17f22","sha512":"f52af039c2888da199fb4fe40bab11a4aa45edc43e6cedcece7282fb72693c9c4fd445cb5ed25e638fcb9f6e21054bcb4825bb2862491660fd2f055a47685c5d","ssdeep":"3072:9RXyUhg0qb5sHOaA2uIexpgso1bz55y4Z80w/ajNALAuVGt5:9RiU1Sf0DOpvybzny4Z8036Gj","tlshash":"0ee313cf90ad6612fc6b9f792fdc74e14a2c30c455e859262087c1a065fe42b43a9bb7","first_seen":"2026-01-03T17:49:47.222185Z","last_seen":"2026-08-30T07:25:45.5628Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":560,"receive":923,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}