{"report_id":"dc025243-c068-411a-b52e-bd32eb46db4b","version":6,"status":"done","tags":[],"date":"2025-12-31T10:22:11Z","url":{"schema":"http","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"104.21.12.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"timkiem.top/#gsc.tab=0\u0026gsc.q=sport%20i%20dag%20site%3Atimkiem.top","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"title":"Timkiem.Top","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"104.21.12.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T10:22:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn1.timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-29T04:06:58.325492Z","alert_count":0,"request_count":1,"received_data":52301,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"placehold.co","ip":{"addr":"104.21.47.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-18","domain_rank":47177,"first_seen":"2017-04-06T08:15:30Z","last_seen":"2025-12-24T19:55:37.431514Z","alert_count":0,"request_count":1,"received_data":1538,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-29T00:14:05.184038Z","alert_count":0,"request_count":4,"received_data":526194,"sent_data":2408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ep1.adtrafficquality.google","ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3093,"first_seen":"2024-07-24T04:17:49Z","last_seen":"2025-12-28T22:45:31.755921Z","alert_count":0,"request_count":1,"received_data":11227,"sent_data":523,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipwho.is","ip":{"addr":"185.111.111.158","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2025-12-25T20:51:37.573989Z","alert_count":0,"request_count":1,"received_data":1221,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn1.timkiem.top","ip":{"addr":"104.21.12.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-12-20T21:50:31.749443Z","last_seen":"2025-12-20T21:50:31.749443Z","alert_count":1,"request_count":1,"received_data":929037,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-12-28T22:31:21.710993Z","alert_count":0,"request_count":3,"received_data":145080,"sent_data":2080,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-12-29T01:21:43.190502Z","alert_count":0,"request_count":4,"received_data":1631902,"sent_data":1628,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tiki.info.vn","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-20T21:50:31.752202Z","last_seen":"2025-12-20T21:50:31.752202Z","alert_count":0,"request_count":1,"received_data":46222,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"bsky.app","ip":{"addr":"3.150.72.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-09-27","domain_rank":673,"first_seen":"2022-10-27T18:41:25Z","last_seen":"2025-12-25T11:19:43.16905Z","alert_count":0,"request_count":2,"received_data":1386,"sent_data":1207,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":738433,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"clients1.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":5018,"first_seen":"2013-02-01T13:08:37Z","last_seen":"2025-12-31T01:46:51.866994Z","alert_count":0,"request_count":1,"received_data":182,"sent_data":437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"timkiem.top","ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-12-20T21:50:31.763649Z","last_seen":"2025-12-20T21:50:31.763649Z","alert_count":17,"request_count":17,"received_data":241862,"sent_data":8918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js:4.1.1","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn3.ipad.pro.vn","ip":{"addr":"104.21.85.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-31T10:22:15.147821Z","last_seen":"2025-12-31T10:22:15.147821Z","alert_count":0,"request_count":1,"received_data":296744,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":3,"received_data":310814,"sent_data":1458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hits.sh","ip":{"addr":"211.184.108.65","port":443,"asn":4766,"as":"Korea Telecom","country":"South Korea","country_code":"KR"},"domain_registered":"2021-07-04","domain_rank":1462953,"first_seen":"2021-07-13T11:25:21Z","last_seen":"2025-12-16T19:52:12.346512Z","alert_count":0,"request_count":2,"received_data":2770,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.38","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-28T22:19:30.36119Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":22592,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tivi.io.vn","ip":{"addr":"172.67.212.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-31T10:22:15.156029Z","last_seen":"2025-12-31T10:22:15.156029Z","alert_count":0,"request_count":1,"received_data":296887,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ocr.space","ip":{"addr":"94.130.69.140","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-11-11","domain_rank":0,"first_seen":"2016-09-30T09:54:16Z","last_seen":"2025-12-20T21:50:32.402926Z","alert_count":0,"request_count":1,"received_data":586,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"ep2.adtrafficquality.google","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-17","domain_rank":3229,"first_seen":"2024-08-13T12:56:28Z","last_seen":"2025-12-29T00:15:51.204546Z","alert_count":0,"request_count":2,"received_data":34546,"sent_data":980,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cse.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":24084,"first_seen":"2015-03-18T05:14:25Z","last_seen":"2025-12-29T19:31:51.920452Z","alert_count":0,"request_count":3,"received_data":142139,"sent_data":1580,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":5,"received_data":370036,"sent_data":2289,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pingomatic.com","ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"2004-03-22","domain_rank":53730,"first_seen":"2012-05-22T14:36:33Z","last_seen":"2025-07-25T07:11:29.279859Z","alert_count":0,"request_count":4,"received_data":18725,"sent_data":2372,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":2,"received_data":112102,"sent_data":1064,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a595eff495c43ba5a56dd882c02324","sha1":"f1cc04212bf9917989c1b98df0445125bb131425","sha256":"1520225a538d51d9bfe2ed8dd882544815c950377ea4d11965fffe76b3531b00","sha512":"2a68575747d8e17521288d1c9ffca16dc3161f1f1d89ec524d9b13195e5cc9c8148c528532e0a6163aee8df7e592db7c3b13d1cbe378db82b1094dee61fa5db7","ssdeep":"","tlshash":"5531bb1504770030547735ed9bcba286a345e01bb98ccc8e7f5dd305bf86646caeba99","size":1458,"data":"","first_seen":"2025-12-31T10:22:27.544092Z","last_seen":"2025-12-31T10:22:27.544092Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b61cf6f747f07dd127868dad7762579","sha1":"a5592ded64ccf47e2d81674b8abe1788c6c49a4e","sha256":"bd297e0eac6428890812a87d40250717aaa70489f48989e96744d4b9fc064e8d","sha512":"31ce8c1ded372c891737b31acafa74603e405d90a12da7d4e7988fb3722dd7b6e23c72042993c1ebb9e18433cb359d96887f798a79f7cbdeb7750d7379cbfb44","ssdeep":"","tlshash":"fe31e04f14f221124e8920d9a35730996e58f34b3f85df49fa4c8b502f66927e8e26e9","size":1646,"data":"","first_seen":"2025-12-20T21:50:41.887257Z","last_seen":"2025-12-31T10:22:27.545623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfe6d98b064b2ba596ae498d497e1c9","sha1":"498e9f3590a7a0606494bfd224a207dbe43e1e07","sha256":"92babb5b59132c2c3d326b8ea36bf3615a349d864b297b924f7de674a4729652","sha512":"a9493bf38b0a452930b78de89e99abf8fec1e1cfe2678a139fe9e60957f50d350eb5a95a1bd37364bd291197af0d9db501c598d07bdf6c99df3e6755b4b323b2","ssdeep":"","tlshash":"35012b695ee4131a191274ad7aeea5103c38950200cdce1abb1ce7529f5493116b9add","size":845,"data":"","first_seen":"2025-12-20T21:50:41.86819Z","last_seen":"2025-12-31T10:22:27.547076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7104330e8aba1f0862bb76fd449ce75c","sha1":"e6ac5120e806147422533c139c9a3b741344b1fd","sha256":"a6a43199679d12280508116e1638c91ba73c0aeaf6473108aa7f6ba70beac552","sha512":"0c9ab21328bb36b2472b51afde6ecf31bb8de4c64670e7f86e0eb2230c79540f8eba53b72a1fa01ca88082ac1ff8579b828146ef0bd435cc036ce4b522635078","ssdeep":"6144:1RA28mx15eh1LS8t/CJCU/dnwq3pf+asOYHbRQ:1+h9l/CJCANLZf+asOG1Q","tlshash":"70345bdcb2e270315613f8b5d43f410ab076aa79f0498cacf695c6f5acb09890167f7a","size":243776,"data":"","first_seen":"2025-12-17T21:48:38.368103Z","last_seen":"2026-01-08T16:19:33.432264Z","times_seen":1943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d547457434535ef6d0aa8169cf5e1296","sha1":"687d2c1494edd6c54d71ec1c53df9aa38ee7b364","sha256":"774e3e3430f69f805f921dd8540aaac3a2232471a38735c470ceea6c3c32aa8b","sha512":"0125f1ea8dbc6f44f8bd99ce939b7914189b00b0bd9cd2ef7d64657baf02db67e1865260e09b355ea0dd5eea129b9e172309fa2870e115071c5ab8a4cbc43fc1","ssdeep":"192:w49WX4OUKIilcwmAF88JZemp+RKkciyrLEy5OE2mpO5Xhb2sk:l9WXgwmAy8rnp+RKjrp5OE2m0zk","tlshash":"0822b5cebe4cf0940224aa8809bf74ce141d8fae38846a05d3515df4ae9067d7fd9e69","size":10340,"data":"","first_seen":"2025-12-31T10:22:27.488455Z","last_seen":"2025-12-31T10:37:28.423651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33e6d8d472d66e912d142abea83b26df","sha1":"bb55eff4fb4c79d11d092339d4926c30dad99de4","sha256":"4b703039d5fd608ee4e797e4268099698b7a0e1f569d642ed78606e11730bec3","sha512":"6e3790810cbcd7a9153b96af29d25b0e050665dfab7a9bc5fdfa1129ccdfe307ff9661a0884512faa21bd7ae3aaaf2f9e1114ad0a34b91e449d29ada66826500","ssdeep":"","tlshash":"90e028da74110cb170dd05f533b1a11875532208a8095c32ddfdc9143c2c5c78c135cc","size":341,"data":"","first_seen":"2025-12-31T10:22:27.54846Z","last_seen":"2026-02-07T03:12:31.184996Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-08T00:36:01.124396Z","times_seen":777532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53a557946308585635eb80aec5326b9e","sha1":"544b125203bfbb516566a63c9ef3dc57e9c06df9","sha256":"eff95f5e15f8aa8c8b8c0f3aaeedba0091c1ec9732d78b6594c9ceb26c8eff28","sha512":"31c607e84c67799c8bce08e64fdd2c0164b164752ef3d7b1aaa9b2dda5b749e5064b44a66ae53109ccfdbdf7c6760bfc074502f65de4f4ed1fd6c50963885872","ssdeep":"","tlshash":"2621bb6e4c50822f2eb23edd285bb604fa235420e089e1d0c48cf9643979fd3882d9f4","size":1293,"data":"","first_seen":"2025-03-02T07:28:43.564096Z","last_seen":"2026-04-07T21:21:46.330993Z","times_seen":123080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d605fe9f291b88bebaa7b9b70a502e3f","sha1":"cb7a0614c336b453d9c66af0b0e05bf576a3afae","sha256":"c775d3df342caa1031c84a0519c196ab1d9168d5bc04f655e2c863692eb3ff6a","sha512":"532334e5fdd8976b63c1d792d36379c4caa6d9ecadd5117bc535f01780552a6589897f1b9587f06e13ba6015516168fe0bf67574b22b47bcf961d4a57b59b48a","ssdeep":"","tlshash":"5b51440a22bf70324877a279938f635c39bd80077545de0a3feca5255f84f621a72bc9","size":2989,"data":"","first_seen":"2025-12-20T21:50:41.939451Z","last_seen":"2025-12-31T10:22:27.550687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"1bbd8df72c2c45764012742cd6df6727","sha1":"614ace433f7d251c2ac84967e50aabfa5a001c29","sha256":"4fb146887ae8bb0b552ff9ca9f0ae14f4b51e9a9c53525e7c5702c45b01bdc51","sha512":"71f874bed4d6552982368e6e487ebe434d8d143a979643e2f98ba4570cacd761f652e2ce9854bc0fc30a753fe0f8a4aa2da53246e43f54fedbdb9f5bd84df061","ssdeep":"","tlshash":"90a002d99daa70b81351a640963767326315d45589091195c2b041563c8d08ae5a9a52","size":62,"data":"","first_seen":"2025-12-20T21:50:41.931154Z","last_seen":"2025-12-31T10:22:27.551708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-08T00:38:24.422377Z","times_seen":330907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/_/gsi/_/js/k=gsi.gsi.no.Jg9UQrzps8E.O/am=AACAYMRU/d=1/rs=AF0KOtVrhmcfePGCfn0WwoTpFjcvjEyIMA/m=credential_server_library","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ded0264f7a739a5af44ec958a738a11","sha1":"d637274224ee0bc02c288963e97b332e5608a2c9","sha256":"9e6a1054dfff57d98599b7024651afdffe8ccf84373b25b2f0d27f660f5d96e1","sha512":"c8cbbcb284d8dc3701ba76f0fdc38f2eeb3b927fc43ee25f6038680e78af3b59a4d8e55f4edf87323de6d67172384946ade750dc9c876aef315f374e397d7187","ssdeep":"3072:WRINsYKPjF8mx15RfWrohbuySUNm9S8zB2H:WRv8mx15nhbJYXtQ","tlshash":"ac1409d8b3a270629363f9b1813f400bb17b68a9f4485cacf295d9d1adf19498077f78","size":201010,"data":"","first_seen":"2025-12-17T22:28:55.911724Z","last_seen":"2026-01-08T16:46:46.126033Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/adsense/search/async-ads.js","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb33bf1d0e29efb096584b3efcdafbab","sha1":"40ea2b5d3bc086f52fb98d9a8199513c244fb731","sha256":"9869d51bdf24e65c184bc4a300015db5560c0dde8b36ba7b525dfd43858f0edb","sha512":"33423a038d418d1594205ff26b6f606232d90f960025b19c0605c3c9e6c7d9e9b1aaafb0c72746e31ee1696908ddf49a78ec4d8f03a885516569dc6c9cbeec1b","ssdeep":"1536:swcENdVjrD2OBPBMQjtvgeQm8W1Kbj2P2Fgc9u6s5lLvOsTvALdSqbqGo9G6x763:6KjKJtW1KuPpM5LdSXEXN2O3","tlshash":"c2c32acdb7a1302243a3a5b5607f014fb139b966a40c84a4f199d8e87cb4dad4277fbd","size":129152,"data":"","first_seen":"2025-12-11T18:06:41.0283Z","last_seen":"2026-01-07T18:15:06.786735Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/cse_v2/ads?sjk=QIy1MLPSTlqnsU8nv3pAPA%3D%3D\u0026adsafe=low\u0026cx=035a66cbda310d0af\u0026fexp=20606%2C17301437%2C17301440%2C17301441%2C17301548%2C17301266%2C72717107\u0026client=google-coop\u0026q=sport%20i%20dag%20site%3Atimkiem.top\u0026r=m\u0026hl=no\u0026ivt=0\u0026type=0\u0026oe=UTF-8\u0026ie=UTF-8\u0026format=p4\u0026ad=p4\u0026nocache=6011767176526087\u0026num=0\u0026output=uds_ads_only\u0026source=gcsc\u0026v=3\u0026bsl=10\u0026pac=0\u0026u_his=3\u0026u_tz=0\u0026dt=1767176526088\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1286\u0026frm=0\u0026uio=-\u0026drt=0\u0026jsid=csa\u0026jsv=842209568\u0026rurl=https%3A%2F%2Ftimkiem.top%2F%23gsc.tab%3D0%26gsc.q%3Dsport%2520i%2520dag%2520site%253Atimkiem.top","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cd36b5efd860522c97963cb31627450","sha1":"456a607cce59a26aba69d9ff4d527ddf69019799","sha256":"e9c7be1d3b816f97c7c9a5510f85aae0dc722fa3fe929edfff1b249391a6652f","sha512":"bf061ebe158c078f5372631546b3077d1ce2318310562b0783e70c3d72308b645a1a29ba699f35b9c7751ca64d357968778b512f2655d17854baebd0cf830169","ssdeep":"192:xa9Rzcz1nUhM0SSpde9GoB0oR3zvB5iXBHBW7XLvuqeXnbzc61J9ac/pnKG:xa95BhM0vvoTmBqLuqeXnbYEJQc/pnX","tlshash":"3d32afc94988ac78ed0c8d745b2daf1599a8139160dfaf3147d7a2eb2db89e9e158020","size":11558,"data":"","first_seen":"2025-12-31T10:22:27.553834Z","last_seen":"2025-12-31T10:22:27.553834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/search/async-ads.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd5eb5822dcfd65b587706b7d9ea40ab","sha1":"6f197951fa8dab59c539eff409748eff13112a43","sha256":"468ce4b06249cb3f61cdd9e4b432c76e3c5068af1b4ac0df722dab96f75b9a7e","sha512":"a5bf2ce7c7a1fc7f9bbbaeaad1609dd8b1616a859c2a80bfcade5336b53fb6ae2f15a7a3d5bdf0f325e0baa7fba0b7033c09591417b9090081eec99757aeea4b","ssdeep":"1536:qwcENdVjrD2OBPBMQjtvgeQm8W1Kbj2P2Fgc9u6s5lLvOsTvALdSqbqGo9G6x763:AKjKJtW1KuPpM5LdSXEXN2O3","tlshash":"abc32acdb7a1302243a3a5b5607f014fb139b966a40c84a4f199d8e87cb4dad4277fbd","size":129185,"data":"","first_seen":"2025-12-20T00:22:11.879148Z","last_seen":"2026-01-03T05:45:43.822369Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09d0567f68ee75603cdcc4bd32438513","sha1":"b45b77756a905e7872722313898e79f032f69e83","sha256":"a268126730de345242cd6ac16311e465dac44789ca82c77609983a93e2c466f2","sha512":"f0abc728495ac8e2f9608c3a81bd1884966d68549d06499c442f9185e4da8679d7a640160a59e26ded8662f427b9355d507403e254e662078d7986ff60c97ed1","ssdeep":"","tlshash":"fe3122b3f5b18db6423aa1c290b6558d30a2550d2b85a8c3bcde5d302f16e92ad0a4e2","size":1449,"data":"","first_seen":"2025-12-20T21:50:41.879527Z","last_seen":"2025-12-31T10:22:27.555097Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c722df0049c73ea66489f1edc396081","sha1":"819e062472f0ac4cbadc715365cddb817f606428","sha256":"e61c056e761ebd70c1e96329c98227013247c12cbc9cded870fe16fb2e65c316","sha512":"3363f76dfd0d6f5507fc5a473da46088638e63276f46f5d74a293ab970df1c1a9105a366afc5ed7444d25548660849d013070abbadfda668a2b9bb575923fac3","ssdeep":"","tlshash":"bcb012577dd02b31f4f72ea643d786bc345080c454c39a22371cdd016b2aee5193b5e8","size":113,"data":"","first_seen":"2025-12-20T21:50:41.859153Z","last_seen":"2025-12-31T10:22:27.556236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3fb92103c9ce438bc116c7ef84100f0","sha1":"7e3997ec16d8b49c41bf42804a123c12b9a63415","sha256":"915cb4d3f51709a0839e76218891dc1bce0e9c0229a97e508d144a027dad0952","sha512":"348d2b7082ddf262423c98bcce61ebebb62359f86cc08710faecacfe0345c94cecf0b2d24d9f6da8c8aa7a643f2f9c813d414a659b5aef69467cf2103c971591","ssdeep":"","tlshash":"e6a012744b000d320105c561369ce7802a7800c720415002802c04058ac0f4100b38a6","size":85,"data":"","first_seen":"2025-12-20T21:50:41.873109Z","last_seen":"2025-12-31T10:22:27.557432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c50c36f9effc715f65f190dcb2e0038","sha1":"6504c8bd42381ef1391855a6783774afd8c3e7b0","sha256":"b0d383f586ac8efe6839e1011d304d00777efcceea86ab05055af8ff872f288b","sha512":"110788fcd165d96d7d0353c69fa185bf4414d54cd974ce4c620f60abef330888ffa28243d97f6555fb242d31f11b2e64c5923248388987959b301253a5627bd5","ssdeep":"","tlshash":"3f61659671fb00b50053506a4b4f160eb7aa8617ec46e868bb5c82c05f03f84cdeb2fc","size":3342,"data":"","first_seen":"2025-12-20T21:50:41.93683Z","last_seen":"2025-12-31T10:22:27.558952Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f64e9d301c98964b2f97624b58da0109","sha1":"581b27097413a082f9789137c2a96db9ba50d956","sha256":"d0da482fc4ad552d05a1f886f034ebbc5f14039eabc093fefe4f49786f4ece46","sha512":"8bc22f4a6488a21e06e8bc7ae756a115e1da2814d1725d2343c6240906db096c46ef980ff32e825bb6a1949e8a871801cba535939f141ea3a678d3d504aa8fd8","ssdeep":"","tlshash":"aec08c8c210a0c7082aa2a008b3fab00b002321898a06921482923444d20e43db64810","size":153,"data":"","first_seen":"2025-12-20T21:50:41.874835Z","last_seen":"2025-12-31T10:22:27.560117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CKBLWX436P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0695559d6070c1c577a3a3c209c90fdb","sha1":"1c69b8963e8c5d6b3081ef765d41cdee6dad9033","sha256":"0f63ba73a32ff2502097fe138e1f7672a8a933f39d3e72444418bfb8547f6a5d","sha512":"7bbacbcf544d06875caa0be2f2ab7800bd970851371a7d9533e9634fce1eb04e7bb0703157c22768e30476f9b0d34eddd4d4dead0906ebae087c46437376ccc6","ssdeep":"6144:/tIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:2C8bu7/1mbrnsy39WbMpb","tlshash":"9a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433021,"data":"","first_seen":"2025-12-31T10:22:27.522487Z","last_seen":"2025-12-31T10:22:27.522487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/element/f71e4ed980f4c082/cse_element__no.js?usqp=CAI%3D","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36b3d53032423b69973a4e230d06e6f2","sha1":"6ce5add5180cbab850c173ea90eb9dfa2de62e7f","sha256":"c1699da13135ad67ed72e6900d0a662c97e92a7928b6bea17fc401de48712b9c","sha512":"739ba5dec97aced1b9178e62da38a141c3d060483c28c9bff9ff3b8b49d6b4448f50b3f92400fbf8ffb52cf3e6a4cf2a8261eadd0da02b1db1b996655c4eaf0f","ssdeep":"6144:gMFw/JRKlmH2F24rn2niH2F24rn2UKH2F24rn2G09SmZjHDSCuHtibDkZOg5PJBS:W/0mH824rn2niH824rn2UKH824rn2hU2","tlshash":"5764f88cb26670364373f4e0947f120f627ab89de84889acb1d8d9e12eb4d585537f78","size":318472,"data":"","first_seen":"2025-12-04T19:36:47.1022Z","last_seen":"2026-02-23T14:12:32.189179Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25e6119e62d1ba8afd52ec0f623a82bd","sha1":"5a880ff68e376984e4bcd6a646026c67438ecbac","sha256":"dec2ecd2607f2e892cd7041307752b509b1ea8db61ec38cc3a5bb9664ac48f62","sha512":"31ca39bd744be12fc88109f84a02d66290fb50829c5f41c31f938fabeb121eb2463366edfdf6ba4ef5898cc922b1bcda29658506e4162f4f3044428db4b5ca40","ssdeep":"","tlshash":"5911cbc577a2e441813615abd50f144bf575e47758acb410e6a1c4e4acb0abb443ab06","size":956,"data":"","first_seen":"2025-03-12T19:00:14.122018Z","last_seen":"2026-02-26T17:00:03.80743Z","times_seen":79470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f93444f80262be43bb74f0b0ba127c6c","sha1":"bedc8ce143b3701493ea5cd98e390417db06fd93","sha256":"dd425d63c092509f708177600280f8ac239acb9be3e89d68451306374523ca12","sha512":"f74697c090c877ba715adcecc8a3ef7bc399f367b8cd21e865d9025045cb8519a3f6a022ef54894f399791a61753f6fbe76cb5851ea625a4743a32747ea8eb83","ssdeep":"","tlshash":"c0a0029998a970bc5351a640e93b27336314d8558c0911a5c2b041553c8d0dae7e9a56","size":66,"data":"","first_seen":"2025-12-20T21:50:41.910157Z","last_seen":"2025-12-31T10:22:27.561832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-08T00:31:27.744961Z","times_seen":150197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"5997dbf94f803617494aa7a6f866e87f","sha1":"a05571c0d6547892a69a72f53e5c7e290784f76d","sha256":"d9c72638951b588978783f60e345a449bf2ccbec96d5dce02335bf70eaabc91e","sha512":"eb90327e15f2122315ef2a53b04d9d28b1643f038db6b68bcb07d602087a2fb296196dbad56538bc712c8a60c869d53eadf829bf030427b323d4bce057b4f756","ssdeep":"","tlshash":"6ea0228aba8830b803c08a00803323323300a0c8880200a8e30882003a0c0cae0faa23","size":65,"data":"","first_seen":"2025-12-20T21:50:41.864577Z","last_seen":"2025-12-31T10:22:27.562939Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"934611844103807e184a13b4982eaf1e","sha1":"e3cf057b58a08a87c02d1ec950d563f7b45561e3","sha256":"85b9c2a7d0a15168b377738c744d53c7d18935fb31514b48d6a75ec3b7f3461d","sha512":"84fe7d0a423a7172d749dc4bc55608f88d070926f6db81453c8661576bf2d7458566d09abf3ed11200934c40883794d05cfbb773a5d9edafdf60d745b2891c9e","ssdeep":"96:4LqoQnMR+6LroKQBrEX7uv9RDOcNZtPfwuLSr1IVJj:m8MR+6XoKQRErwOczNR1","tlshash":"b8a174352922d4295e2b60695b7f7e8de4efa306dc88c80279ec92951fb0b252b157f0","size":4667,"data":"","first_seen":"2025-12-20T21:50:41.866625Z","last_seen":"2025-12-31T10:22:27.564073Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63032559d9daa15f0fb2ee9dd6abf8f8","sha1":"3803e14d01a6b91ad7c169359910c686fe0bed80","sha256":"588e0e52acf1cdd63ad86b125b598730f09645e3f19c5e759406567e5fee4346","sha512":"0a09ad395410531665074add451bfee795d2e99bb4636520a2ab24835ed3e9755551e22e8c5656629809247569c2013a75a90a6b190430e35681fc587b7ac1ae","ssdeep":"","tlshash":"d3f04cae5df30ca40c72e41663ab72c532b2b123860cd5293bac7334df29d26912d5db","size":649,"data":"","first_seen":"2025-12-31T10:22:27.565163Z","last_seen":"2025-12-31T10:22:27.565163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/sandbox%20eval%20code","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-08T00:36:01.136911Z","times_seen":779074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/iframe/select?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026ux_mode=popup\u0026ui_mode=card\u0026as=QguLXJmcpVl4m6BvRALXEZ4h62elAVEZKiLqU3KPQTc\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true\u0026channel_id=594bb8b72397c8819078a3b7475d3d67ed16e1557b14cfae4044d1fc94b9a341\u0026origin=https%3A%2F%2Ftimkiem.top\u0026oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"831ed1c8035d89c120c78b6369b51acf","sha1":"4a15899d7b26c9fb56487b84cb60d9c26c6b1fd3","sha256":"d8ab526f1d344a62f2c23f9c6a9c858fd27c0429a80a70d3d6c504ada0950a21","sha512":"4954eb6cdea8a203aaabfd0e7a7cad7d29b8a766f8819433a09414548a0cc527c2b254d479fc32120a7d4cbf003067fb121016ac6d01bf1ad2d8643edc1f41f6","ssdeep":"3072:ORINsYKPjF8mx15RfWrohbuySUNm9S8zB2H:ORv8mx15nhbJYXtQ","tlshash":"8b1409d8b3a270629363f9b1813f400bb17b68a9f4485cacf295d9d1adf19498077f78","size":201009,"data":"","first_seen":"2025-12-17T22:28:55.880473Z","last_seen":"2026-01-08T16:46:46.153135Z","times_seen":3291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173bd8696a6ef269e578619a18698ded","sha1":"b4663ba92cbe4fbbf280da0df56482efda0e34e4","sha256":"2f4cdde0ba82746f2d9ff3c6563eb59434a693eafff4a763bda872eb04121021","sha512":"240298da8154a026de44b6dc2d71a4b3182e79d47f94ba17356d7b60cc667995b13d86bd4c822b9c99539ae334f311bbc8815a9b147300b732b403440e2c4fd6","ssdeep":"96:WZoNBZfFgmodTErcYanCiG2G+oHQ59h3oSDdmyNrwewmj0q7oumoSD80:WZoNBZfi1dfYMCiGp9ShYWmyNnhjnkuS","tlshash":"6da1448762b3245106b7997e77cba354313980033b2bd802be6c468c1fd5b99a2f57cd","size":4983,"data":"","first_seen":"2025-12-20T21:50:41.853326Z","last_seen":"2025-12-31T10:22:27.56791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfee445f1ef556cce1c3684abef5b485","sha1":"d96dae86a051bce63f8ea76eeb538aee876cbe4c","sha256":"d45c52ffdd849c7c6a31811e3409d73d7d3a087116e939cb6b28ebfbbaff9bbd","sha512":"4638019ca7a995bbbd739a7572adaa670a5ebc48b72a47a7fbc5eb35394d747ce0c17ec063ff42addee5134d2fa63e7d962010be70309433f065cb7ca447be9b","ssdeep":"","tlshash":"7351137f317708340bbb75bb23876348357010637841d4093d9c9b451fa5e4196b6bec","size":2948,"data":"","first_seen":"2025-12-20T21:50:41.926535Z","last_seen":"2025-12-31T10:22:27.568936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5NLSPRW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cbca6261668084e73c9db9da9932353","sha1":"33a6a27f4d395d747f3ac4d2a8f12f23414ff0b9","sha256":"6cce54da1ebfb30535dd9b5b2d8bcf2cab2316e4a9cf71bafee741d8e6d88419","sha512":"97527e257fe968b92fd3e4a16b690c9c7fd339546b3aabfb09a01bd884331c9edf513ef0a4ce9298d5b93ea553edba8df6c76c5096668d8a1d26b4b3634a5326","ssdeep":"6144:SIeJW2bulKYv9VGDmHYmyBFzfnsqNWO4ta0nK:7wbu7lEDns8WOuaB","tlshash":"ad5408cdb3da742683a36474503f114ba23b79d2f84cd894e186d8d42e74aaa4237f7d","size":304178,"data":"","first_seen":"2025-12-31T10:22:27.463617Z","last_seen":"2025-12-31T10:22:27.463617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","size":19990,"data":"","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"2a84f0074c0da1381d753ab3dbc728f3","sha1":"7f0034351007c377bd379ec4c0817b1bfe5a68f5","sha256":"a3c0dee30ad95b06acd7ce84c0afa65b8e22aaaf0a1ade171fef6f60a53c119e","sha512":"8b356dbbb8bcd128b4e36186049404806eccbe1b943e67774fc9ad070dfcbe10a05cebac2b9abfcd903c801c0d3e5dc8b16efefdd88b98266d1857e959e72369","ssdeep":"","tlshash":"65a0029aa8ad70b91361ba00b5373b326314d4558c162195c2b241693d8a08be9fde52","size":65,"data":"","first_seen":"2025-12-20T21:50:41.922648Z","last_seen":"2025-12-31T10:22:27.570457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"3312968f7f4e5b4fd1f7ba7eb4fd64a8","sha1":"e7ce8b1736d95c4c27fb69d626ce366d0ef5dafa","sha256":"3f8432c45ce3dd43e555cdeafe81ebc82a2ef0a4ea0dbeddecd47fbabe99dcef","sha512":"5244444631f0f709b1c8b1eadbad288e918614566ca6efafb3aac5abfe4f982dc46e1cd55946ae37157cc93e563b5250149fce7ab53a4301cf34436fc881f377","ssdeep":"","tlshash":"1ba022888ce830b82380b200b0332b323300c00888002080c3f000003cca0cae0b8a02","size":66,"data":"","first_seen":"2025-12-20T21:50:41.904978Z","last_seen":"2025-12-31T10:22:27.57197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/j.js","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f25e8088b7cfee882f866dbbdb32ee","sha1":"8b782db08f5c1beb50858916b8a3c991ca265fb6","sha256":"2aceaa404bf9a246cb26994fc2adf77f48c48fc2fdb3511695e2509252c0a2c6","sha512":"cdf669ce65280c2510e6e5fe8782cd59d0a5572d72dcb49715477cc1b548ac7c64c5c5b695ac7f7c5e956a2c2ac85f2de931d2c29468be30dd4311631d8e91a0","ssdeep":"","tlshash":"56f07d3be3804d79d4790a4c1cbd4abc352938924f0c5de095c0d2315c74e7489afa8c","size":634,"data":"","first_seen":"2023-06-28T21:50:03Z","last_seen":"2026-02-07T03:12:31.15795Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69684ed18fe1a1dae9cb5a6c9baec57","sha1":"3f157b4cad30e5bf7ed73b65d591d3ded65a88a6","sha256":"38e63e801c8f221c1de5e3f5f326ef7885b8cc20dcb33659cdf31901517d9cfa","sha512":"af2022d99278f7f963fb48f4ee3c3f2c788e1509a1c4665519e505ede55bc680c3df94239091646232a5f1fa0389fc8a1c48f15286aec9f4caef714b07437f28","ssdeep":"","tlshash":"894143ab62fa04bf24fb603e575e95893885898b2a45c2443b5c19951f20f31d1e0ae9","size":2005,"data":"","first_seen":"2025-12-31T10:22:27.573073Z","last_seen":"2025-12-31T10:22:27.573073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-08T00:34:05.188224Z","times_seen":95466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7be370b855a9d54934d9086d234ea7e8","sha1":"cec9a2bf600362278f85d333f555e634e92e5f01","sha256":"34c705ea10123d0910a107e6b4136897840ab2b8bdce2aa952671a68f5033961","sha512":"597e24ee89843eae4e9b566c77e7be233be6e02e5b88754a09ef41d09910b48d391c11a6f6364fa983f42f8ccc1d90b5e66b0d3e5305205abf65d53c66495c37","ssdeep":"","tlshash":"1ea02288c8ac30b80300e300a8332332a300f800cc000080c2b000003c8808be0a8a03","size":67,"data":"","first_seen":"2025-12-20T21:50:41.901951Z","last_seen":"2025-12-31T10:22:27.574183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-07T23:40:05.559441Z","times_seen":29212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fdf19310c544f4e7eb1d0acf2c32d2d","sha1":"0d1915115458fc1e0ce6e3445c95d8c55a1549ce","sha256":"e16b4fbe48cadb56311cbc5fdd51690715f79f549784bffa49ec80f10d23571a","sha512":"deb26d4cefd6102c785d42e4d39858b4a391d5ee51f58592a59ca53c7b892a66d4b0b7da3286ee5d1e7778c0d099854a72fdc4f2a7e3ce88b829070367a216f6","ssdeep":"","tlshash":"0d11e53e1d7b1104d83791cf1a2f12b53659c1247f43e1a596cf56590885543eb373ed","size":978,"data":"","first_seen":"2025-12-31T10:22:27.575202Z","last_seen":"2025-12-31T10:22:27.575202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49fca0c2e9de4e762859c4b654df9da8","sha1":"93b39700b3c37c67782a71f91d512edb999f4d5c","sha256":"2e36f32f0b28397a83b418fcacd40ee7cd73df24dd24294d86b638c1cf437f55","sha512":"86434dc688a9ffde668a3042b83a67a2b950aa7776a1a7dc84e0412f58e5372448b1c180b8936967d1563e959faafcaef96fe4893b8299f301fc74327bbb8920","ssdeep":"","tlshash":"8c11c0793b1a5534c5da818b317ee7a93e3260717f02a184c26cdc295d18e8714efcbe","size":902,"data":"","first_seen":"2025-12-31T10:22:27.576143Z","last_seen":"2025-12-31T10:22:27.576143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/cse.js?cx=035a66cbda310d0af","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd77465aedcfc28755874d38614ab70","sha1":"4eacc4764fce8caecdca0318220276269c6767a3","sha256":"35368e2494927f8f5bf19b359388646e0b01eafb4bceafe13747b17843a3c054","sha512":"5d0b6fb17ba63aeae9dd4865911ece883e25b709272a2f8c56c239c13d1e10c283fc6a3673b471e5823d5c2015c71e33574e49123514bf125d52413d4b886683","ssdeep":"192:5miE6gVWv3BhTi2Ypi6onUVhy/L1Nx3lPO1E1wvbvwe2vjvI25v3vkiVvJv2ottN:5m91VO3XTi2YpiTnKzLwe+zI2NfkiR9P","tlshash":"3c12a600f40a1033246663ad9093e2da537e7a81f85cd677fc4fd8d8a756d9a2263732","size":9296,"data":"","first_seen":"2025-12-31T10:22:27.475855Z","last_seen":"2025-12-31T10:22:27.475855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/cse/element/v1?rsz=filtered_cse\u0026num=10\u0026hl=no\u0026source=gcsc\u0026cselibv=f71e4ed980f4c082\u0026cx=035a66cbda310d0af\u0026q=sport+i+dag+site%3Atimkiem.top\u0026safe=off\u0026cse_tok=AEXjvhIQPgeviBsxbQ9DfJCUn5BV%3A1767176511032\u0026lr=\u0026cr=\u0026gl=\u0026filter=0\u0026sort=\u0026as_oq=\u0026as_sitesearch=\u0026exp=cc%2Capo\u0026callback=google.search.cse.api16461\u0026rurl=https%3A%2F%2Ftimkiem.top%2F","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5843d310c968a9e8c0b674491519bc9c","sha1":"a1e137162e990d7d5f1f98c3b54d8e6c41b86b31","sha256":"c0eb27521a0ca06435613581dc48dc7ea076d614d507b1b672ac1f638f528d08","sha512":"d885f6ab207c14ac2d3dcde077cc0ff46c3b1826c06ea6e8ef4f4c58a03581e971b88d05240522b4dfded2cc35bb3e9406877bea9350e454e87973dfb5bf8610","ssdeep":"","tlshash":"4cf05c2fe55195a3417081a2d2f9421f67290512c23f59d6bd19843c1f4ecaae34d4f8","size":458,"data":"","first_seen":"2025-12-31T10:22:27.47783Z","last_seen":"2025-12-31T10:22:27.47783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d4567115caffdf91a56de09e3d02598b","sha1":"f5ff4bb18386ecc5b3dd52b3129226766e9e95a8","sha256":"cd2eca5b83cf8fb40bafd7235ae2b12429ce5e7b3d60b41e113609e31f281e95","sha512":"df4cf5f4f4eaf834520f8d098a60d2aff4b018122c4e48742094d51bd0d0ef913a2d8a18da0449136f7f1215b09295cf9e840e27f16dd682feedd7558c964802","ssdeep":"","tlshash":"43a0029d99eeb0b81351960495372b2263199559980e11a4d5b041153cd908ae4ada52","size":60,"data":"","first_seen":"2025-12-20T21:50:41.932863Z","last_seen":"2025-12-31T10:22:27.577271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-08T00:34:05.188224Z","times_seen":95466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-07T23:40:05.559441Z","times_seen":29212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d454441e9f9799a1fbfc786b4d4b1489","sha1":"a5da58d4af6e85bd2727db31b09707de990bc569","sha256":"19041abccd955ea4c76c0267e5310e59d0296a77ebe7341fb95101ce27877d21","sha512":"f608fc1d713998bfd8b49bcb5330e7785e5bd61e60a18f2a9418a51b0535b0f37aadfd028a9257e453339a9ea27165d362aca3b2723375dbdd3933a21e35d11a","ssdeep":"","tlshash":"3ce0721ab4c2003e03b388aa23f7910a25223b0fc48e8b13ba5fc4961f24ce1090654c","size":309,"data":"","first_seen":"2025-12-20T21:50:41.862903Z","last_seen":"2025-12-31T10:22:27.578698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"befd9139afc674ce6b07f94720e8a026","sha1":"1e16c86320ff00c0d3bad3f46be9ed8d6c4ba28c","sha256":"017b6b5d11f449745ce0ab8fe933bcd5fcb6d64ab464613b602a6baf768a5787","sha512":"1f731d3f4eeecfba5015ca7817798d61fc84e4b94c07ec4ded7d0ac76d6c6740eac2d0f18a284183aad735e2d58d8c030650e4d74d0da4b980c20edc2035324b","ssdeep":"","tlshash":"e871631e30f314551e67306d2bbb944830b8541b3b00cac87b1d87148fe9b56a2b37fa","size":3791,"data":"","first_seen":"2025-12-20T21:50:41.924691Z","last_seen":"2025-12-31T10:22:27.579716Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09d0567f68ee75603cdcc4bd32438513","sha1":"b45b77756a905e7872722313898e79f032f69e83","sha256":"a268126730de345242cd6ac16311e465dac44789ca82c77609983a93e2c466f2","sha512":"f0abc728495ac8e2f9608c3a81bd1884966d68549d06499c442f9185e4da8679d7a640160a59e26ded8662f427b9355d507403e254e662078d7986ff60c97ed1","ssdeep":"","tlshash":"fe3122b3f5b18db6423aa1c290b6558d30a2550d2b85a8c3bcde5d302f16e92ad0a4e2","size":1449,"data":"","first_seen":"2025-12-20T21:50:41.879527Z","last_seen":"2025-12-31T10:22:27.555097Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3371013828cef92a4e91a3286cc38ff5","sha1":"fdf4388e41fb4c58a28c5a27af330b7b6ce4a07b","sha256":"2b76b792340aff41c0f5f3262d0656fb3f01a688879d5e90c895f296bcf899d3","sha512":"fa44f479aa112553bec454b05df9fd5c44208eb132872ccc0fd41b281758757580e6368bc21dc47614b55382afa7f6000870a9831b1e3bd1c79f00e526c28345","ssdeep":"","tlshash":"80d023ad3975c830519d014a1077e394276171607b116244c1eccc2f5f11fd358f196c","size":217,"data":"","first_seen":"2025-12-31T10:22:27.58086Z","last_seen":"2025-12-31T10:22:27.58086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-form-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"351a63f9c8ae44f77469596c8512ea7d","sha1":"4583270ccc48aaf3b058eb71563ec729450d688e","sha256":"ab8abc82fcea97199708654141abe5354242cd0feeec5f281e492f20b46f6a5c","sha512":"887c60bb7c7a46c26b68ef44254a6aaa554e9778ed88b18107643d40224414256cf697c0eb75372816a50b7d28dcb02678a4a47f1e9c55ae187f1a8705c1a93a","ssdeep":"768:gCY7Nd8NDtAhL4hpwzkCJjB195+dfr4eWolVa2IM3VoRdT4shn:S7Nd8ljhp+B95+dkGVa2RFoRDn","tlshash":"bc33959cb286b0764797a0b0816f610bf33b6858650b8128b5a9e9d17c7cdcda133f7c","size":50684,"data":"","first_seen":"2025-10-21T23:12:26.025252Z","last_seen":"2026-01-06T12:23:01.434045Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"b82c696d20f90607270bcfd6103a7246","sha1":"171883ab60950f67061e7ce09ff17f5d4d5c0727","sha256":"35ba02466c3e3076c1985595ecb8617238e05139540363017fbe04f5145c3ac8","sha512":"266b88b353b7b9fdd000a9fff2b87e9f9f0d57b14d67d29fb0ade8e8044c12dea79886e4cd1d557f6c369dd3baa08d4376374bf139d98c83d65d228050f350e9","ssdeep":"","tlshash":"26c02b433d1cde451241c8ccf8f1ebac88b6100840b2c6cb4bc4597b74887ddcc10600","size":148,"data":"","first_seen":"2025-12-31T10:22:27.581893Z","last_seen":"2025-12-31T10:22:27.581893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5665d1a504b214818cd25c90aa86221","sha1":"c2a88c51dc4a3ba16ce8661804f2fcfccfe6a224","sha256":"ac5e3ba15623272ed174e9b69e91436c468c59b493aa0123e37a83638f867057","sha512":"b3cd1074ea7a7a2ef28209dd47cdf810098c6462d53113649b23a11ff376957473b0209d63eeafc0b08b97edb72a998b73d4f2d558c5d0adcef9de54ad77589b","ssdeep":"","tlshash":"1fb092576c0988514ca109cce2b2aa4c505656489180dc4688d88065a1449ee2804d01","size":104,"data":"","first_seen":"2025-12-31T10:22:27.582906Z","last_seen":"2025-12-31T10:22:27.582906Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fbc47ff78b04da719ca7d31ce2f8fbba","sha1":"a2990cdcf481fc058a97077db64864be7b6f514e","sha256":"008cc28d3a3d32f0e53b13a286b88be0ba8210c5b645a881eec2421a44bd0b13","sha512":"0be1715fe0ee8060ed6ea063f6201ee9e665bb0aab5c6cc8fa52794c87c4eba27d1384e1ab5adf47834429c54d205928ef9982a9cfa329f97e813425d0d22b8c","ssdeep":"","tlshash":"f3b012537d01dc50c95304ecd1f2f54c800b5518c980fc4a88d85025e154fde6c06d01","size":104,"data":"","first_seen":"2025-12-31T10:22:27.584164Z","last_seen":"2025-12-31T10:22:27.584164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"tivi.io.vn/?w=1200\u0026url=https://timkiem.top/","fqdn":"tivi.io.vn","domain":"io.vn","tld":"vn"},"ip":{"addr":"172.67.212.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tivi.io.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:42:06 GMT","end":"Wed, 18 Mar 2026 16:42:04 GMT"},"fingerprint":{"sha1":"45:D5:9F:D4:3E:2A:C8:94:3C:BC:76:F5:BE:7E:D2:DD:52:21:E2:9A","sha256":"5D:F4:BC:62:93:95:46:D3:F7:28:0D:C2:72:F9:F6:90:CE:AA:85:25:AD:67:3F:DA:80:09:45:EE:80:FC:C1:AE"}}},"request":{"raw":"GET /?w=1200\u0026url=https://timkiem.top/ HTTP/1.1\r\nHost: tivi.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cdn3.ipad.pro.vn/?w=1200\u0026url=https://timkiem.top/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkxeMvXj3LznNKU%2FZgcWftm07vrNxRklxoUm7rJjuN3MWXdtDm4Huk53fDi7MWTmk9qGsOMDFFqhUjDMy43R4LZbCGNw25sn\"}]}\r\ncf-ray: 9b690db8280b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296155,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":29,"dns":8,"connect":1,"send":0,"wait":480,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/style/look/v4/default.css","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /cse/static/style/look/v4/default.css HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"prose-team\"\r\nreport-to: {\"group\":\"prose-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/prose-team\"}]}\r\ncontent-length: 1094\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 10:03:37 GMT\r\nexpires: Wed, 31 Dec 2025 10:53:37 GMT\r\ncache-control: public, max-age=3000\r\nage: 1106\r\nlast-modified: Thu, 10 Jul 2025 15:30:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4495,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c14e45e189f801818b14f1315605a632","sha1":"dd7e7fb9d156b343beef0155b41da1c847d69e41","sha256":"dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89","sha512":"7312d1e49927990cd81cd62c953ac7566c85007350250403abe3a2a9635afa516b3511e85477dd5189741fccb7d0200c8dd24074aad9938e5d4484bbdeee59ac","ssdeep":"48:jeePUJMC95SxaO5Sx5QGascw6sU99YENvWoGmuwY6kcPhsMPoBAijzln0TqfTlhL:7LyC7C5CsKNuof3PhsMPBijZnHfRUXM","tlshash":"689133d0e1f74812215a43a92480c6a233de76e1f59bcafd7e95d0c48b866e07e36794","first_seen":"2023-04-05T02:37:48Z","last_seen":"2026-04-05T07:40:43.487302Z","times_seen":7730,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":11,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/style","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gsi/style HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nexpires: Wed, 31 Dec 2025 10:22:03 GMT\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\ncache-control: private, max-age=86400\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-security-policy: script-src 'nonce-WW48UgPQsVkoW-XlPDuK8Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (696), with no line terminators","md5":"ee570cebd6ae40b9567844b080aee1e9","sha1":"2b7b0ffcfe8aca40ced147fb7ce107010392d6b9","sha256":"d49e8f04be7ccbb69e87ae474ee50f6903b780451989e66d35ffc247a80510fe","sha512":"836c832111c285f7cb692c4eb62e2bca615017b6ab4af6920674f17df0ae1da040f7171208d5d312c3c43ed8ed7e49b653e7fce0948f24076d0548f7c8e8f25a","ssdeep":"","tlshash":"430197321aa2602eecb3ab3bf04a9d8c023aa117eeb705ccb59cca15c38d95874a5041","first_seen":"2025-10-22T21:08:41.081019Z","last_seen":"2026-04-08T00:34:52.988917Z","times_seen":54117,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5NLSPRW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","date":"2025-12-31T10:22:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-5NLSPRW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pingomatic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 31 Dec 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 106496\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304178,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3288)","md5":"0cbca6261668084e73c9db9da9932353","sha1":"33a6a27f4d395d747f3ac4d2a8f12f23414ff0b9","sha256":"6cce54da1ebfb30535dd9b5b2d8bcf2cab2316e4a9cf71bafee741d8e6d88419","sha512":"97527e257fe968b92fd3e4a16b690c9c7fd339546b3aabfb09a01bd884331c9edf513ef0a4ce9298d5b93ea553edba8df6c76c5096668d8a1d26b4b3634a5326","ssdeep":"6144:SIeJW2bulKYv9VGDmHYmyBFzfnsqNWO4ta0nK:7wbu7lEDns8WOuaB","tlshash":"ad5408cdb3da742683a36474503f114ba23b79d2f84cd894e186d8d42e74aaa4237f7d","first_seen":"2025-12-31T10:22:27.463617Z","last_seen":"2025-12-31T10:22:27.463617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep1.adtrafficquality.google/getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=QIy1MLPSTlqnsU8nv3pAPA==\u0026sde=1","fqdn":"ep1.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:06.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 16:00:04 GMT","end":"Wed, 25 Feb 2026 16:00:03 GMT"},"fingerprint":{"sha1":"3F:6B:79:EB:6A:36:69:37:B8:80:08:17:24:3C:C7:A5:F2:4C:1D:A6","sha256":"C1:88:6A:43:5F:52:63:57:56:27:18:5B:53:42:8D:AC:C0:80:AB:8C:59:0D:49:81:7A:83:6D:01:14:14:78:6E"}}},"request":{"raw":"GET /getconfig/sodar?sv=200\u0026tid=afs\u0026tv=1234567890\u0026st=env\u0026sjk=QIy1MLPSTlqnsU8nv3pAPA==\u0026sde=1 HTTP/1.1\r\nHost: ep1.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\nserver: cafe\r\ncontent-length: 8063\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10670,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"819f3cde1c5269e6b063219ca831e573","sha1":"cf7ae900b60944ae9b5f3c079a50cdf4d1fc0959","sha256":"3ce271fcc49ee4ab9a2bb3f68e706f1fffa6b79b50c561ed066c2d091b8a3ff6","sha512":"68926f1210a02ae51cede61952a95c473ec7388d705ed9230be56db818de5a98ae2ab8f34e5cc5cb81363fd9e48424984cba669f68a3da5d109b4bd72a3558df","ssdeep":"192:t8KyHzErkj6y0y2UFyLbXqcqBb2XeE/8nC+XOpVoas5IEoVKPf2vPF+Ww4S:mKyTErAJWXbqBCX2C+OVLisKSPsWxS","tlshash":"4922bed3eca107c631657358712f07f78a85d4151108a98e2e3aebc267fdbab712b098","first_seen":"2025-12-31T10:22:27.468452Z","last_seen":"2025-12-31T10:22:27.468452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":119,"dns":3,"connect":19,"send":0,"wait":42,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ocr.space/parse/imageurl?apikey=helloworld\u0026language=eng\u0026filetype=png\u0026url=https%3A%2F%2Ftiki.info.vn%2F%3Ftime%3D1767176523512%26w%3D300%26h%3D200%26url%3Dhttps%253A%252F%252Fhits.sh%252Ftimkiem.top%252F.svg","fqdn":"api.ocr.space","domain":"ocr.space","tld":"space"},"ip":{"addr":"94.130.69.140","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ocr.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 07:22:20 GMT","end":"Tue, 10 Feb 2026 07:22:19 GMT"},"fingerprint":{"sha1":"AB:DF:80:A5:3F:E3:AC:B3:F3:8D:2F:00:51:83:B4:0A:F5:57:DD:10","sha256":"5B:9D:E7:7F:DD:7D:05:73:50:85:0F:0B:8E:19:75:3E:67:51:94:8E:8B:CB:C9:AE:29:AA:FD:4A:79:E7:E5:24"}}},"request":{"raw":"GET /parse/imageurl?apikey=helloworld\u0026language=eng\u0026filetype=png\u0026url=https%3A%2F%2Ftiki.info.vn%2F%3Ftime%3D1767176523512%26w%3D300%26h%3D200%26url%3Dhttps%253A%252F%252Fhits.sh%252Ftimkiem.top%252F.svg HTTP/1.1\r\nHost: api.ocr.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-length: 276\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: *\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":276,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"15487155412c32d2e92556d5f95e99c1","sha1":"cb06e64d5655681bd4be21b8e20166c99a541c85","sha256":"bdfe27259e35d7a879fc4ec4a7205501c1ef29765e053bfb6f7e4fab206ebdfd","sha512":"7c417f0c529a47960a9510f2a5630769f6eb708f17be8f50d80d986a3ad14cae2125dcb78c4990e2e00d5fb0b9ae35f6a181f65f6fb7983784d5d9d30a7817f4","ssdeep":"","tlshash":"ddd02b5d015c325b57478246f7535d1357b081c00529a1614d9ccd3e769090b49aacc5","first_seen":"2025-12-31T10:22:27.471528Z","last_seen":"2025-12-31T10:22:27.471528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2012,"timings":{"blocked":98,"dns":41,"connect":24,"send":0,"wait":1815,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clients1.google.com/generate_204","fqdn":"clients1.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /generate_204 HTTP/1.1\r\nHost: clients1.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2/237/runner.html","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:06.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:52 GMT","end":"Wed, 25 Feb 2026 15:59:51 GMT"},"fingerprint":{"sha1":"E4:25:76:F6:C4:FB:46:FE:7A:37:E5:D8:E5:14:75:A2:B3:75:D2:9B","sha256":"34:44:B0:C8:96:F4:D4:42:DB:58:BD:4B:C9:72:0A:E2:31:20:B1:87:B3:2A:DD:E7:6B:62:AA:AB:58:B6:92:89"}}},"request":{"raw":"GET /sodar/sodar2/237/runner.html HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 5044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 10:10:07 GMT\r\nexpires: Wed, 31 Dec 2025 11:00:07 GMT\r\ncache-control: public, max-age=3000\r\nage: 719\r\nlast-modified: Tue, 13 May 2025 23:17:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2024)","md5":"0120a1d624ff8fc3ec792d93a7133947","sha1":"1e3bd23df78ff2c60b187b40a0c6505be9ab889f","sha256":"14b660a511e14a9a481c6fe43c576f36c61b656cfd379728c54f1128e1855966","sha512":"84286e299ebc6690ee904b5581cd6aaf6b59d06200b61156923301484d1b75fa517894167c4f4777553ba09c840a2d74a723e3ff112448f00514d910dfd172c5","ssdeep":"192:pl/6xS2OASROqI3wgh5MXDc9EAOaK3qzfaGDCiMgIcTa1mx:rz2NQJIVsTiMH3qzfcOIr1mx","tlshash":"4842a7ccbad2b0210353b4f1a13f400ff13ea8aae44c9954b181e8e17cb56a94667f7d","first_seen":"2025-05-19T23:59:48.478548Z","last_seen":"2026-02-26T18:27:55.136579Z","times_seen":169945,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cf-fonts/s/roboto/5.0.11/latin/400/normal.woff2","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cf-fonts/s/roboto/5.0.11/latin/400/normal.woff2 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncontent-length: 20612\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCXK9FxxoMzbXDC3NGmczP0MKoAzV7K%2ByOUlfw%2Fy%2FHX3JTNANtsG7torp93T%2BoxOmY3%2Flecx5xmqF5e1PT5f%2F%2Ffq17jZkVeqJiuy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b690d5cfba132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-07T23:42:02.720211Z","times_seen":45690,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/cse.js?cx=035a66cbda310d0af","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /cse.js?cx=035a66cbda310d0af HTTP/1.1\r\nHost: cse.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-VQnpa662IPsGduhq4SfhTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\nserver: gws\r\ncontent-length: 3282\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":9296,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3486)","md5":"2fd77465aedcfc28755874d38614ab70","sha1":"4eacc4764fce8caecdca0318220276269c6767a3","sha256":"35368e2494927f8f5bf19b359388646e0b01eafb4bceafe13747b17843a3c054","sha512":"5d0b6fb17ba63aeae9dd4865911ece883e25b709272a2f8c56c239c13d1e10c283fc6a3673b471e5823d5c2015c71e33574e49123514bf125d52413d4b886683","ssdeep":"192:5miE6gVWv3BhTi2Ypi6onUVhy/L1Nx3lPO1E1wvbvwe2vjvI25v3vkiVvJv2ottN:5m91VO3XTi2YpiTnKzLwe+zI2NfkiR9P","tlshash":"3c12a600f40a1033246663ad9093e2da537e7a81f85cd677fc4fd8d8a756d9a2263732","first_seen":"2025-12-31T10:22:27.475855Z","last_seen":"2025-12-31T10:22:27.475855Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":103,"dns":19,"connect":17,"send":0,"wait":44,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s4C8HS9LXOQMFst1trfda48Zn%2F1oELeryllkts9kQWwux0MtqeeMq1Ctf0qOUYaJ3qIuR%2FHPEsmXp%2BKHBYHRoFSio5JTz4J0ArZTLtpu8CvzcozXcpZTskpZFsp%2FIQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 9b690db80d3432fa-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2098\u0026min_rtt=591\u0026rtt_var=1798\u0026sent=118\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=110205\u0026recv_bytes=5761\u0026delivery_rate=8702927\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25043\u0026ss_exit_bw=8702927\u0026ss_exit_reason=2\u0026cwnd=19118\u0026unsent_bytes=0\u0026cid=2d151cd4912c9836\u0026ts=15083\u0026inflight_dur=154\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/cse/element/v1?rsz=filtered_cse\u0026num=10\u0026hl=no\u0026source=gcsc\u0026cselibv=f71e4ed980f4c082\u0026cx=035a66cbda310d0af\u0026q=sport+i+dag+site%3Atimkiem.top\u0026safe=off\u0026cse_tok=AEXjvhIQPgeviBsxbQ9DfJCUn5BV%3A1767176511032\u0026lr=\u0026cr=\u0026gl=\u0026filter=0\u0026sort=\u0026as_oq=\u0026as_sitesearch=\u0026exp=cc%2Capo\u0026callback=google.search.cse.api16461\u0026rurl=https%3A%2F%2Ftimkiem.top%2F","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /cse/element/v1?rsz=filtered_cse\u0026num=10\u0026hl=no\u0026source=gcsc\u0026cselibv=f71e4ed980f4c082\u0026cx=035a66cbda310d0af\u0026q=sport+i+dag+site%3Atimkiem.top\u0026safe=off\u0026cse_tok=AEXjvhIQPgeviBsxbQ9DfJCUn5BV%3A1767176511032\u0026lr=\u0026cr=\u0026gl=\u0026filter=0\u0026sort=\u0026as_oq=\u0026as_sitesearch=\u0026exp=cc%2Capo\u0026callback=google.search.cse.api16461\u0026rurl=https%3A%2F%2Ftimkiem.top%2F HTTP/1.1\r\nHost: cse.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\ncontent-disposition: attachment; filename=\"json.txt\"; filename*=UTF-8''json.txt\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/QualityProseCsqrElementHttp/cspreport, script-src 'nonce-WFJ1bHV-2ij8KtC1FXNv_A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/QualityProseCsqrElementHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/QualityProseCsqrElementHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/QualityProseCsqrElementHttp/web-reports?context=eJzj4tHikmLw1pBiuP7Gh02Im-Pcp8un2AQaHk1UVzJJyi-MLyxNzMksqSwoyi9OTS4uLErNSc1NzSvJKCkpKE4tKkstijcyMDI1NDI00DMwji8wAAB3YhxY\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5843d310c968a9e8c0b674491519bc9c","sha1":"a1e137162e990d7d5f1f98c3b54d8e6c41b86b31","sha256":"c0eb27521a0ca06435613581dc48dc7ea076d614d507b1b672ac1f638f528d08","sha512":"d885f6ab207c14ac2d3dcde077cc0ff46c3b1826c06ea6e8ef4f4c58a03581e971b88d05240522b4dfded2cc35bb3e9406877bea9350e454e87973dfb5bf8610","ssdeep":"","tlshash":"4cf05c2fe55195a3417081a2d2f9421f67290512c23f59d6bd19843c1f4ecaae34d4f8","first_seen":"2025-12-31T10:22:27.47783Z","last_seen":"2025-12-31T10:22:27.47783Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"185.111.111.158","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Mar 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:1B:17:6A:78:6C:D5:99:94:5A:7F:7C:C6:26:EF:8E:49:5C:8E:FF","sha256":"05:EE:0E:25:74:AA:B9:DA:0E:25:B7:DF:43:93:02:F2:C7:4F:DE:33:3A:75:61:9F:45:D9:B2:50:BD:76:DA:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1332\r\ncdn-pullzone: 4617583\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/31/2025 10:22:03\r\ncdn-edgestorageid: 1329\r\ncdn-requestid: 92511c6d3ca55d846aab0d16b3d79ac8\r\ncdn-cache: BYPASS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9a04ae862409e6c292d3bc9ae6000ae9","sha1":"c13394231481d1dedd325be4988e5d1a27d8d05b","sha256":"970d24638fcb8c64e3c211a81567430017470b318d4cd2e888104df81f410fec","sha512":"107abb36d56716e18b8fa723d47d2c530a66388283951278c7b0dc77354848e9bdf3e307e53452e5b32d4f2ffd8b38ad611a151d2d4de7203577ed22d525a343","ssdeep":"","tlshash":"08f0233502dcad0d896f4349004efa4e27bca007e28a59cacdec1f54c1c06ed304110f","first_seen":"2025-12-31T10:22:27.479524Z","last_seen":"2025-12-31T10:22:27.479524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":131,"dns":9,"connect":22,"send":0,"wait":25,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/rum?","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1015\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1015,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1459,\"startTime\":1767176507539,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"03fe1461-7386-4863-8c99-27863238533d\",\"location\":\"https://timkiem.top/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":3308,\"domContentLoadedEventStart\":3365,\"domContentLoadedEventEnd\":3371,\"domComplete\":15956,\"loadEventStart\":15956,\"loadEventEnd\":16136,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":53,\"domainLookupStart\":59,\"domainLookupEnd\":71,\"connectStart\":71,\"connectEnd\":92,\"secureConnectionStart\":74,\"requestStart\":92,\"responseStart\":904,\"responseEnd\":948,\"transferSize\":20366,\"encodedBodySize\":19558,\"decodedBodySize\":69510,\"name\":\"https://timkiem.top/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":16136},\"siteToken\":\"571aca99205b40b29afa65e946f77a9d\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://timkiem.top\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xII65ldecrMrimEPDBCzxtFu3fpEOy0Y9cGbZw6w9jRZK1WplWW8vgvHi%2BFLD9Ocy5GG9GWFoj1xnM5rmq82nQQDkbEm0%2B0i3sSy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b690db9ad5c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn3.ipad.pro.vn/?w=1200\u0026url=https://timkiem.top/","fqdn":"cdn3.ipad.pro.vn","domain":"ipad.pro.vn","tld":"pro.vn"},"ip":{"addr":"104.21.85.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:04.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipad.pro.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 07:33:58 GMT","end":"Thu, 19 Mar 2026 08:33:55 GMT"},"fingerprint":{"sha1":"4E:DB:7A:5A:72:9D:63:D1:9A:DD:05:8F:79:C9:E2:15:92:09:FA:B9","sha256":"4E:FF:83:1F:45:45:16:E0:43:74:D2:B6:13:66:99:30:A7:44:29:72:55:E9:58:0B:29:C8:07:67:00:91:8D:0E"}}},"request":{"raw":"GET /?w=1200\u0026url=https://timkiem.top/ HTTP/1.1\r\nHost: cdn3.ipad.pro.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EP1g%2BKbllRDLLVxtn5Va%2BN%2BinEjVrtRfJeyijBvLle8kYjnXdiGtTHvDyifwwoR5vSLfKEQnTPY%2FLLHx5OhuBVL%2FBYD2SipilgynS6hPiE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b690dbd585a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGB, non-interlaced","md5":"494f28de68731500cf66834d9acb3582","sha1":"b73ecf00629b12d3eb449feb9d2f3d4be94cf28d","sha256":"9743320716a659850f443336916610eb16190554af690ca7ebfaeaf4f31fb0d9","sha512":"812819e8f6aa943d2f209c43ebb70b8939c5458fde438ceffd9bce0511b51e8483b1007af9ac74ebbae5115ddc3b4ca5d193e1549b06e8ff6c822f0a96b5a0cf","ssdeep":"6144:t6W8gciNSTFfB1DQpHPuGvum3b7ZzC0KHrmZydeuDD5Kuc:th8iSx/QRuGvum3b7tC0FZip9K7","tlshash":"9b5423f15c3c3d64e40c2135997922a83efd0bd628ec256f26eaf27599930ea4db5cc4","first_seen":"2025-12-31T10:22:27.481261Z","last_seen":"2025-12-31T10:22:27.481261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":27,"dns":10,"connect":5,"send":0,"wait":579,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/images/sprite.png","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","date":"2025-12-31T10:22:04.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pingomatic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 19:44:30 GMT","end":"Sat, 07 Mar 2026 19:44:29 GMT"},"fingerprint":{"sha1":"2F:52:1B:46:C7:25:E8:83:04:B4:F7:F1:CF:1B:7D:37:CE:D4:B5:B6","sha256":"AD:83:95:92:76:43:B9:58:DD:EA:DA:C9:40:8F:C3:BC:8A:6C:10:D9:D9:E4:F5:96:BF:C4:16:B4:BA:F6:CC:15"}}},"request":{"raw":"GET /images/sprite.png HTTP/1.1\r\nHost: pingomatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pingomatic.com/p.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 6405\r\nlast-modified: Fri, 06 Jun 2025 11:22:18 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 288, 8-bit colormap, non-interlaced","md5":"25f6a39a470293a298a3b2b4f10c0997","sha1":"203ff7e708af6b09963efa1292d160dffc377a81","sha256":"415177248d3086eca31cfb2be0c0b8b4d4f7864d6eb5d8eb317c4f3fda73a8e2","sha512":"ced6cf331b0f218bff73b2ae2996e9caa42e87d5759b719fad46018723c49e0439c75e18ac57adf1666cbb3ecaf918b7d86bbbfbc1c063fb6aa0fdc84fb9f065","ssdeep":"192:8HU4H+HU4jkHnKIi47pb87vtNu6kzWRznXay:j4e5Ab7p454DqR2y","tlshash":"ffd1af70daad4fe24482bb05c3510615926b1eb2cb323c87e34d7c11bd34542a2e5a88","first_seen":"2023-06-28T21:50:03Z","last_seen":"2026-02-07T03:12:31.148234Z","times_seen":140,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/gsi/iframe/select?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026ux_mode=popup\u0026ui_mode=card\u0026as=QguLXJmcpVl4m6BvRALXEZ4h62elAVEZKiLqU3KPQTc\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true\u0026channel_id=594bb8b72397c8819078a3b7475d3d67ed16e1557b14cfae4044d1fc94b9a341\u0026origin=https%3A%2F%2Ftimkiem.top\u0026oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth","date":"2025-12-31T10:22:06.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:38:32 GMT\r\nexpires: Sun, 27 Dec 2026 10:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 344614\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-04-08T00:41:09.375922Z","times_seen":83550,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":64,"dns":0,"connect":21,"send":0,"wait":19,"receive":6,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\ncf-ray: 9b690d5bbe3b0b31-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"660cc074-49fa\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1236752\r\nexpires: Mon, 21 Dec 2026 10:21:48 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B%2BWkwoWVuZBUOcgcpgIfwM4mKauuHGnQEu75xnSAHgNKCXQIcxZxNN%2Fw18oogfaS7IqkzvZQwlAVixj%2BX%2BgUZ%2FpZOcYxgvr5pw%2F8vWb8ZCf2mD7x5%2F%2BF1NVpXCCBhwTg2Epl0dHu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-04-07T22:41:38.002337Z","times_seen":8023,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/element/f71e4ed980f4c082/default+no.css","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /cse/static/element/f71e4ed980f4c082/default+no.css HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"prose-team\"\r\nreport-to: {\"group\":\"prose-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/prose-team\"}]}\r\ncontent-length: 9068\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:03 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Tue, 02 Dec 2025 16:17:45 GMT\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41707,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3edf2aafa6d7e47b770cc82d932c5978","sha1":"1259bef0e5b7f194c8b7044055d51083f9652de6","sha256":"09d17d286366be2e16a3cc0023e8ef31c3e89a0621705db15c23505c80338572","sha512":"247c77a1b5795e4b89c02326e5621ebead0c5e54441b86a22aff3950d268a6d49d4f68391ccb2851165dece4f9b98d2b16794f668b153c275b1cf6a209fb9f74","ssdeep":"768:oiIcKPgZ4WFOemQFc/3GBLQn6eMYdaO4Mawgm0s+Rb4FhFQ7qfr3lyFcSZJpfXRf:vgWwemQI32LQn6eMYdaO4Madm0s+J4Hu","tlshash":"6313c7c06bf21a06641f91587452d35273edb092778fcea96ee960c8ef091dc6923b94","first_seen":"2025-08-27T08:45:02.86327Z","last_seen":"2026-03-20T15:42:13.877842Z","times_seen":3989,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":70,"dns":0,"connect":8,"send":0,"wait":30,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2B3W%2FpdqV5QNtSjbf47KTYuoHBXmRxY40M6ua7hch8Fuc9VB4uETS4NJDFtyQhibh04FVnaov2%2FCyW%2B6JNNocYFWnjOZnO1O3d6askchHG%2BerdbndwcvtpTvpY0%2Bow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9b690dba6d7f32fa-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2340\u0026min_rtt=591\u0026rtt_var=1423\u0026sent=124\u0026recv=41\u0026lost=0\u0026retrans=0\u0026sent_bytes=113597\u0026recv_bytes=7591\u0026delivery_rate=8702927\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25043\u0026ss_exit_bw=8702927\u0026ss_exit_reason=2\u0026cwnd=19118\u0026unsent_bytes=0\u0026cid=2d151cd4912c9836\u0026ts=15462\u0026inflight_dur=204\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10340), with no line terminators","md5":"d547457434535ef6d0aa8169cf5e1296","sha1":"687d2c1494edd6c54d71ec1c53df9aa38ee7b364","sha256":"774e3e3430f69f805f921dd8540aaac3a2232471a38735c470ceea6c3c32aa8b","sha512":"0125f1ea8dbc6f44f8bd99ce939b7914189b00b0bd9cd2ef7d64657baf02db67e1865260e09b355ea0dd5eea129b9e172309fa2870e115071c5ab8a4cbc43fc1","ssdeep":"192:w49WX4OUKIilcwmAF88JZemp+RKkciyrLEy5OE2mpO5Xhb2sk:l9WXgwmAy8rnp+RKjrp5OE2m0zk","tlshash":"0822b5cebe4cf0940224aa8809bf74ce141d8fae38846a05d3515df4ae9067d7fd9e69","first_seen":"2025-12-31T10:22:27.488455Z","last_seen":"2025-12-31T10:37:28.423651Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\ncf-ray: 9b690d61ab867129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1065804\r\nexpires: Mon, 21 Dec 2026 10:21:49 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VxC3eku7fC8H4ChZqSdse3GQpXqJUd9mhtykMlKixSQ7dAI3W0y%2Fr7lGkzyNcgxNAsyqzijqIpKwidX6e99wStJ08qxZ0ipvBehPPJAxMmx0hDY%2FWkeZZeB%2FZsAylXfDMaOLPRdl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48316,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-04-08T00:31:27.744961Z","times_seen":150197,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hits.sh/timkiem.top.svg","fqdn":"hits.sh","domain":"hits.sh","tld":"sh"},"ip":{"addr":"211.184.108.65","port":443,"asn":4766,"as":"Korea Telecom","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:04.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silentsoft.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 18:03:25 GMT","end":"Tue, 10 Mar 2026 18:03:24 GMT"},"fingerprint":{"sha1":"9C:F2:4D:A0:6D:D5:C9:30:D6:E8:81:AB:BA:C9:41:19:15:C8:CE:48","sha256":"3B:E3:56:3D:B4:C7:4B:CD:9C:B1:89:AA:59:61:9A:7F:14:8F:FB:DF:7F:16:AC:A1:DF:6C:A1:5B:CA:D6:4B:CD"}}},"request":{"raw":"GET /timkiem.top.svg HTTP/1.1\r\nHost: hits.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 31 Dec 2025 10:22:04 GMT\r\nServer: Apache/2.4.38 (Win64) OpenSSL/1.1.1b\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Type: image/svg+xml;charset=UTF-8\r\nContent-Length: 1127\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.38","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6760582fd58321770732acaada0b4168","sha1":"f7e77a72916116d0389c2d64f5a0c769bd59180f","sha256":"6c84e221fc52c8877b825ed1b8480e8c43f392f8537475cde1cb8e2a46444b9f","sha512":"1dbe306df2d37b529a067e9d67993abd0b54fde9e7ddadddc1d769784cc708c39e67812614b7b61e70d12462aa2d0f93722c588a8fdb7237db6ef85179a1952e","ssdeep":"","tlshash":"bb21cb94e288502acf184b08f3dc73a7139d52ce8552809db658238ba870debd8ec30d","first_seen":"2025-12-31T10:22:27.491353Z","last_seen":"2025-12-31T10:22:27.491353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/status?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026cas=RHDaqN65eUJUIpPZ61jV%2B5HiElLPd%2FwB4dxZfjXsLsg\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gsi/status?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026cas=RHDaqN65eUJUIpPZ61jV%2B5HiElLPd%2FwB4dxZfjXsLsg\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://timkiem.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\ncontent-disposition: attachment; filename=\"json.txt\"; filename*=UTF-8''json.txt\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-wKxj7FrAoY-UB9liMQLFnA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text","md5":"022a03398f70fb898ad32eb80687c979","sha1":"4d2043b03db093786872000786fe69663e029d5a","sha256":"70dd6ec00ad057866867a0f9734e1ec773b733fd91e46c0d461f717be27ec5af","sha512":"d0b693feeaf86d218bd6f10ab3ecc7bd6a044f2f0d267765f0c9bc658b3adb90f58fe83269eb689232fd558091d34206418ed87637d3aa462104cf05570f8bc3","ssdeep":"","tlshash":"08a022af380a38ef0ac330b0020330002bbee3e220280cb00200080fb2883c300ba200","first_seen":"2025-12-31T10:22:27.492965Z","last_seen":"2025-12-31T10:22:27.492965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.timkiem.top/logo-NO-1767200400.jpg","fqdn":"cdn1.timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"104.21.12.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:29:19 GMT","end":"Wed, 25 Mar 2026 14:26:46 GMT"},"fingerprint":{"sha1":"F6:09:63:A0:87:D1:40:D0:FE:DA:0A:71:B3:32:39:F5:CA:BA:B0:DD","sha256":"CB:1D:CA:64:CB:8A:F0:1F:A0:4A:8E:A4:6B:B9:B4:D2:CA:F4:BF:FD:FF:3C:3C:BC:A5:65:9E:94:E6:E0:3D:27"}}},"request":{"raw":"GET /logo-NO-1767200400.jpg HTTP/1.1\r\nHost: cdn1.timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:02 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2026 16:22:30 GMT\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 31 Dec 2025 10:22:02 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di8s%2BAUS9SH4%2FXnay3rKVkR6NFATuDG6xHfHhPPZPiLEONQNIKIqcXfzFICIE%2BcqKOFgx28o6ick1RUg8hk0QcYWvkVxUKxuvOpgv0xOscY%3D\"}]}\r\ncf-ray: 9b690d640ec41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1344 x 756, 8-bit/color RGB, non-interlaced","md5":"912bdf85c0a30c8622c92aa1f3791e66","sha1":"fb2793c9b57f42b9ccd3795ad587618140044d39","sha256":"b6b6ec231f47f0d9f8bca8c9700a0588b3ff9cf53c23e438bff4007f33440453","sha512":"1cd07d29da813c6b6df6562110b5765fe75e6d22215b109fb1d865c3b989d7d1a08198c9b880ab0d1db677098fa0b7db782aba27a6f99ad37c20707133f5dc4a","ssdeep":"24576:Pqx7YpzAd+EWAWWBkfwWmvoAphcbGJl2xftYNl:SKM+Tys/M2bGJl2xQl","tlshash":"f71523fffa51abfdfe4af236165591439bb531826cf209216983c5c2135eb04161cb3a","first_seen":"2025-12-31T10:22:27.494636Z","last_seen":"2025-12-31T10:22:27.494636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12261,"timings":{"blocked":25,"dns":6,"connect":1,"send":0,"wait":12207,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cdn1.timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hits.sh/timkiem.top/.svg?label=L%C6%B0%E1%BB%A3t+xem\u0026color=green\u0026logo=eye\u0026style=flat-square\u0026hide=1","fqdn":"hits.sh","domain":"hits.sh","tld":"sh"},"ip":{"addr":"211.184.108.65","port":443,"asn":4766,"as":"Korea Telecom","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"silentsoft.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 18:03:25 GMT","end":"Tue, 10 Mar 2026 18:03:24 GMT"},"fingerprint":{"sha1":"9C:F2:4D:A0:6D:D5:C9:30:D6:E8:81:AB:BA:C9:41:19:15:C8:CE:48","sha256":"3B:E3:56:3D:B4:C7:4B:CD:9C:B1:89:AA:59:61:9A:7F:14:8F:FB:DF:7F:16:AC:A1:DF:6C:A1:5B:CA:D6:4B:CD"}}},"request":{"raw":"GET /timkiem.top/.svg?label=L%C6%B0%E1%BB%A3t+xem\u0026color=green\u0026logo=eye\u0026style=flat-square\u0026hide=1 HTTP/1.1\r\nHost: hits.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 \r\nDate: Wed, 31 Dec 2025 10:22:03 GMT\r\nServer: Apache/2.4.38 (Win64) OpenSSL/1.1.1b\r\nLocation: /timkiem.top.svg\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2.4.38","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":1849,"timings":{"blocked":795,"dns":19,"connect":253,"send":0,"wait":258,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/cse_v2/ads?sjk=QIy1MLPSTlqnsU8nv3pAPA%3D%3D\u0026adsafe=low\u0026cx=035a66cbda310d0af\u0026fexp=20606%2C17301437%2C17301440%2C17301441%2C17301548%2C17301266%2C72717107\u0026client=google-coop\u0026q=sport%20i%20dag%20site%3Atimkiem.top\u0026r=m\u0026hl=no\u0026ivt=0\u0026type=0\u0026oe=UTF-8\u0026ie=UTF-8\u0026format=p4\u0026ad=p4\u0026nocache=6011767176526087\u0026num=0\u0026output=uds_ads_only\u0026source=gcsc\u0026v=3\u0026bsl=10\u0026pac=0\u0026u_his=3\u0026u_tz=0\u0026dt=1767176526088\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1286\u0026frm=0\u0026uio=-\u0026drt=0\u0026jsid=csa\u0026jsv=842209568\u0026rurl=https%3A%2F%2Ftimkiem.top%2F%23gsc.tab%3D0%26gsc.q%3Dsport%2520i%2520dag%2520site%253Atimkiem.top","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:06.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 16:00:06 GMT","end":"Wed, 25 Feb 2026 16:00:05 GMT"},"fingerprint":{"sha1":"06:BA:36:2F:71:DB:00:20:7E:63:51:E1:07:B3:C2:09:F9:D3:65:87","sha256":"B7:6A:65:78:FC:51:25:23:3A:6D:B6:59:D6:C1:56:D4:36:21:34:3D:25:55:DA:C7:8E:BB:EF:64:94:1B:50:C7"}}},"request":{"raw":"GET /cse_v2/ads?sjk=QIy1MLPSTlqnsU8nv3pAPA%3D%3D\u0026adsafe=low\u0026cx=035a66cbda310d0af\u0026fexp=20606%2C17301437%2C17301440%2C17301441%2C17301548%2C17301266%2C72717107\u0026client=google-coop\u0026q=sport%20i%20dag%20site%3Atimkiem.top\u0026r=m\u0026hl=no\u0026ivt=0\u0026type=0\u0026oe=UTF-8\u0026ie=UTF-8\u0026format=p4\u0026ad=p4\u0026nocache=6011767176526087\u0026num=0\u0026output=uds_ads_only\u0026source=gcsc\u0026v=3\u0026bsl=10\u0026pac=0\u0026u_his=3\u0026u_tz=0\u0026dt=1767176526088\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1286\u0026frm=0\u0026uio=-\u0026drt=0\u0026jsid=csa\u0026jsv=842209568\u0026rurl=https%3A%2F%2Ftimkiem.top%2F%23gsc.tab%3D0%26gsc.q%3Dsport%2520i%2520dag%2520site%253Atimkiem.top HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=3600\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TNdDJOxnYqAPnUVJFFGiUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\nserver: gws\r\ncontent-length: 9015\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":11998,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11998), with no line terminators","md5":"7cb7a3a5060ded8bc2ad4d2874f4ecfa","sha1":"b2c39dc2a7736eeaec20576d1626f8e59f85187b","sha256":"8ebcd5e3803c033a837cf69632f607b0ed46ce8b007d26f3bc8278de00e2794a","sha512":"51708e6d3d0b06aec579a01905c51038491a747d77d5fbd1a95796fa1347ae9519d304f563ce13b82f056f30573d3ba490ad8321d0813c8910098551d4955853","ssdeep":"192:+a9Rzcz1nUhM0SSpde9GoB0oR3zvB5iXBHBW7XLvuqeXnbzc61J9ac/pnKXq:+a95BhM0vvoTmBqLuqeXnbYEJQc/pnYq","tlshash":"9132b0c94d8cdc78ed088d745f6dff1589a4238160eeaf2147d7a1eb1df89e8d159010","first_seen":"2025-12-31T10:22:27.496818Z","last_seen":"2025-12-31T10:22:27.496818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":137,"dns":18,"connect":28,"send":0,"wait":140,"receive":8,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jwcjr-1765212281299-f54ecb125284\r\nlast-modified: Mon, 08 Dec 2025 16:44:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1964227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1jZSHY7IptGAeGWoFk7ATdvTKTfnNpK5R3jQ1FZNk5TOifgO%2BgId1M2viMj8wNiehNbsDm%2FePeLwUgBiprv5%2F7uTX0%2Bvgp2%2BzlFGGUemxA%3D\"}]}\r\ncf-ray: 9b690d5d7db15695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-07T23:40:05.559441Z","times_seen":29212,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 31 Dec 2025 11:09:50 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sR0mTEq7C2%2FrTUIQud2kxNsMaOsfp8mg6XSIn50iBCUL9yKYaUlHkZrMqq7uJqguqJ8ENUMaS5QbHLklo%2FfJ8eaHCHIwcPHULBbM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 10:21:50 GMT\r\ncf-ray: 9b690d68bce332fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-08T00:34:05.188224Z","times_seen":95466,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tiki.info.vn/?w=400\u0026h=600\u0026url=https%3A%2F%2Fmedia.themoviedb.org%2Ft%2Fp%2Fw220_and_h330_face%2FcVxVGwHce6xnW8UaVUggaPXbmoE.jpg","fqdn":"tiki.info.vn","domain":"tiki.info.vn","tld":"info.vn"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:04.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tiki.info.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 15:59:46 GMT","end":"Wed, 18 Mar 2026 16:59:43 GMT"},"fingerprint":{"sha1":"3A:F6:FD:76:B1:EA:6E:C5:9C:8C:FB:48:E3:B1:DE:3B:01:EA:C8:3D","sha256":"2F:C0:B5:55:06:9C:BE:8F:D0:F2:67:03:CD:8A:EE:2B:F6:9A:7C:86:13:EE:49:90:85:4B:F5:75:74:F8:49:04"}}},"request":{"raw":"GET /?w=400\u0026h=600\u0026url=https%3A%2F%2Fmedia.themoviedb.org%2Ft%2Fp%2Fw220_and_h330_face%2FcVxVGwHce6xnW8UaVUggaPXbmoE.jpg HTTP/1.1\r\nHost: tiki.info.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45448\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 31 Dec 2025 10:22:05 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX%2BfVvQ1K32Ti6gm9wFtVwiuzBOz8CZpEvCEELt88YFyGx79YjffIcAc%2FyPZ10A9vmacvK%2Fc1yWXCNtVjRlmWXKepNUdCJ6Fe%2Bp6WA%3D%3D\"}]}\r\ncf-ray: 9b690dbcfeae49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45448,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x600, components 3","md5":"d9305e5d113705560ed18e07d6769d9a","sha1":"c130e5af2b385c105cf0b127cb1d6b815ae657f4","sha256":"c6245c798478a8bc29084564bd57134317b6827877f1983b198c72a1a57f9024","sha512":"9e0a18a3e6ccc6dd27078020dc8b051f53426fb4ba54f2ea991fbaab0064efa86056b39c8cd9363ef0fbf11f5b969ba06cc3b7efaf2400c03c159f8c4f631477","ssdeep":"768:Qt58WU33KWOXaaKUfCRmRrHCDUJrB3YkPjDb4sq883plFwYn5zeaCH2UPFRmZGvw:QtmOX6M2Du5XjDb4l88iYleY671vRJIB","tlshash":"9b13f2bbb252e30ae664893859515b0573a2892cd38f3278d77a05dd2f201b66fcf17c","first_seen":"2025-12-31T10:22:27.501028Z","last_seen":"2025-12-31T10:22:27.501028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1330,"timings":{"blocked":57,"dns":38,"connect":4,"send":0,"wait":811,"receive":400,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/gsi/iframe/select?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026ux_mode=popup\u0026ui_mode=card\u0026as=QguLXJmcpVl4m6BvRALXEZ4h62elAVEZKiLqU3KPQTc\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true\u0026channel_id=594bb8b72397c8819078a3b7475d3d67ed16e1557b14cfae4044d1fc94b9a341\u0026origin=https%3A%2F%2Ftimkiem.top\u0026oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth","date":"2025-12-31T10:22:06.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:38:32 GMT\r\nexpires: Sun, 27 Dec 2026 10:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 344614\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-04-08T00:41:09.375922Z","times_seen":83550,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":65,"dns":3,"connect":7,"send":0,"wait":9,"receive":12,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156400\r\ncf-ray: 9b690d6c1b3d7129-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-262f0\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 977736\r\nexpires: Mon, 21 Dec 2026 10:21:51 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BLSEaIuCX41ybiYDQOzcoT3B%2BzKxhdwqyn59%2Fjg8ZNzy9E3e5Ht6RpoQqCuVqKVrAE1%2FLbyDX%2BxPZIAiQsBxu9OBe%2BhwmWtUewRs%2FcH60KN6zVQVAYH2cu5%2BINbDOmVCajwNUDrb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-04-07T23:17:03.962898Z","times_seen":8939,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/element/f71e4ed980f4c082/cse_element__no.js?usqp=CAI%3D","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /cse/static/element/f71e4ed980f4c082/cse_element__no.js?usqp=CAI%3D HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"prose-team\"\r\nreport-to: {\"group\":\"prose-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/prose-team\"}]}\r\ncontent-length: 100463\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:05 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Tue, 02 Dec 2025 16:17:45 GMT\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":318472,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2346)","md5":"36b3d53032423b69973a4e230d06e6f2","sha1":"6ce5add5180cbab850c173ea90eb9dfa2de62e7f","sha256":"c1699da13135ad67ed72e6900d0a662c97e92a7928b6bea17fc401de48712b9c","sha512":"739ba5dec97aced1b9178e62da38a141c3d060483c28c9bff9ff3b8b49d6b4448f50b3f92400fbf8ffb52cf3e6a4cf2a8261eadd0da02b1db1b996655c4eaf0f","ssdeep":"6144:gMFw/JRKlmH2F24rn2niH2F24rn2UKH2F24rn2G09SmZjHDSCuHtibDkZOg5PJBS:W/0mH824rn2niH824rn2UKH824rn2hU2","tlshash":"5764f88cb26670364373f4e0947f120f627ab89de84889acb1d8d9e12eb4d585537f78","first_seen":"2025-12-04T19:36:47.1022Z","last_seen":"2026-02-23T14:12:32.189179Z","times_seen":472,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":36,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::5tvsv-1767175737737-8bc118b6fc88\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 771\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5E29Bq7YPsecUBDLosZ7h8cS3pVK5QoWi2pGjHmFbSKll0BUY41G%2FunfV3iC1HjngzZeldyfJt84LXuCRku%2FuoX30Zk8w%2B0P59q2fgezGtk%3D\"}]}\r\ncf-ray: 9b690d5e7e555695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/apple-touch-icon.png","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:51.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 13393\r\nserver: cloudflare\r\ncache-control: public, max-age=2678400\r\nexpires: Wed, 07 Jan 2026 10:21:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Aug 2025 20:03:36 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkEuoq0rsfwGO3MN671kKJm%2FOlsyxaoqGgsjSc%2Fvamk5pISzCcOkBjWSukDYKoG22kRzkpeiFbwrcuAtiw4WErrVY%2FgdwHx%2B1y8c\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b690d6d2d5232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"549e01adc7e55a8d8c1cf83a283286d4","sha1":"3283cfc7a6b904d0cdac0d0da48d117a5d20f30e","sha256":"a8add15e444f514d541b42eb42e4e2eab3aef0ca341019e7170edc28133497ef","sha512":"33158c2a6a05a1b2ec093e281feaa3a259023176f1226fbc001813cb456118f244edee768c84ca0a96d69bb81428819e39f9358b171a5f94c701dc8c1c3c475d","ssdeep":"192:0dCE9Af+wEaz2k/H4UndoiLrSGlfa4RqMYQuRuac4kQX3IqIhlAnnsmqnhQ/vhKt:0IE2f+wv/H4KBo4o9a03wnhyvhKM4W+","tlshash":"7b52d00a1b65d0a64bf776dd2c07ac52bedb4c8b34c096c5461ce98cc46a5172ae74c2","first_seen":"2025-12-20T21:50:41.847808Z","last_seen":"2025-12-31T10:22:27.506411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/j.js","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","date":"2025-12-31T10:22:04.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pingomatic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 19:44:30 GMT","end":"Sat, 07 Mar 2026 19:44:29 GMT"},"fingerprint":{"sha1":"2F:52:1B:46:C7:25:E8:83:04:B4:F7:F1:CF:1B:7D:37:CE:D4:B5:B6","sha256":"AD:83:95:92:76:43:B9:58:DD:EA:DA:C9:40:8F:C3:BC:8A:6C:10:D9:D9:E4:F5:96:BF:C4:16:B4:BA:F6:CC:15"}}},"request":{"raw":"GET /j.js HTTP/1.1\r\nHost: pingomatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 634\r\nlast-modified: Fri, 06 Jun 2025 11:22:18 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"52f25e8088b7cfee882f866dbbdb32ee","sha1":"8b782db08f5c1beb50858916b8a3c991ca265fb6","sha256":"2aceaa404bf9a246cb26994fc2adf77f48c48fc2fdb3511695e2509252c0a2c6","sha512":"cdf669ce65280c2510e6e5fe8782cd59d0a5572d72dcb49715477cc1b548ac7c64c5c5b695ac7f7c5e956a2c2ac85f2de931d2c29468be30dd4311631d8e91a0","ssdeep":"","tlshash":"56f07d3be3804d79d4790a4c1cbd4abc352938924f0c5de095c0d2315c74e7489afa8c","first_seen":"2023-06-28T21:50:03Z","last_seen":"2026-02-07T03:12:31.15795Z","times_seen":147,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T10:21:47.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69yJPIoZ0BoItpAV%2FDafAvtlYLh1%2BO%2F3nTO5zFbn1cGIdz8IfEHPejbeYV2RiqbgOEtOFH7uxfhQgAaIMsamDnaPIPEiOGqBpg%3D%3D\"}]}\r\nx-powered-by: PHP/7.4.33\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=796\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b690d54be28712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js:4.1.1","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69510,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3592)","md5":"ea753d3dec49ff0220446e5b5efa15e1","sha1":"5beb3d9bac1826b1bfc5420a5704df8ba232c40f","sha256":"886d6c13700f126ce08f97c70f7f0b15e1ac92031a51285c10d2d4b9c906fa58","sha512":"500dbb78887442f3644c82b3c652dd164c6908fc964234522e05308d512653eec14311ad9c7d519ecb09624825fa927e709d75583cdbec9687900612d26d623e","ssdeep":"1536:GB9MefXSGbzSUfhFSI7vW9kb/T0iLaL40BWbd2LaL4D/13oNx/3EqF:GFfO9YPGE/wGE7Sv0qF","tlshash":"e3633c3725b31521026781ab66ebb70c72a6d00be689dd45fafc06005f86f90de673ec","first_seen":"2025-12-31T10:22:27.509605Z","last_seen":"2025-12-31T10:22:27.509605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":33,"dns":12,"connect":1,"send":0,"wait":811,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b690d5bcb8056aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-08T00:38:24.422377Z","times_seen":330907,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":22,"dns":2,"connect":3,"send":0,"wait":17,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cse.google.com/adsense/search/async-ads.js","fqdn":"cse.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /adsense/search/async-ads.js HTTP/1.1\r\nHost: cse.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:05 GMT\r\ncache-control: private, max-age=3600\r\netag: \"4117370235749519042\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129152,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2502)","md5":"eb33bf1d0e29efb096584b3efcdafbab","sha1":"40ea2b5d3bc086f52fb98d9a8199513c244fb731","sha256":"9869d51bdf24e65c184bc4a300015db5560c0dde8b36ba7b525dfd43858f0edb","sha512":"33423a038d418d1594205ff26b6f606232d90f960025b19c0605c3c9e6c7d9e9b1aaafb0c72746e31ee1696908ddf49a78ec4d8f03a885516569dc6c9cbeec1b","ssdeep":"1536:swcENdVjrD2OBPBMQjtvgeQm8W1Kbj2P2Fgc9u6s5lLvOsTvALdSqbqGo9G6x763:6KjKJtW1KuPpM5LdSXEXN2O3","tlshash":"c2c32acdb7a1302243a3a5b5607f014fb139b966a40c84a4f199d8e87cb4dad4277fbd","first_seen":"2025-12-11T18:06:41.0283Z","last_seen":"2026-01-07T18:15:06.786735Z","times_seen":253,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/search/async-ads.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/cse_v2/ads?sjk=QIy1MLPSTlqnsU8nv3pAPA%3D%3D\u0026adsafe=low\u0026cx=035a66cbda310d0af\u0026fexp=20606%2C17301437%2C17301440%2C17301441%2C17301548%2C17301266%2C72717107\u0026client=google-coop\u0026q=sport%20i%20dag%20site%3Atimkiem.top\u0026r=m\u0026hl=no\u0026ivt=0\u0026type=0\u0026oe=UTF-8\u0026ie=UTF-8\u0026format=p4\u0026ad=p4\u0026nocache=6011767176526087\u0026num=0\u0026output=uds_ads_only\u0026source=gcsc\u0026v=3\u0026bsl=10\u0026pac=0\u0026u_his=3\u0026u_tz=0\u0026dt=1767176526088\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1286\u0026frm=0\u0026uio=-\u0026drt=0\u0026jsid=csa\u0026jsv=842209568\u0026rurl=https%3A%2F%2Ftimkiem.top%2F%23gsc.tab%3D0%26gsc.q%3Dsport%2520i%2520dag%2520site%253Atimkiem.top","date":"2025-12-31T10:22:06.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 16:00:06 GMT","end":"Wed, 25 Feb 2026 16:00:05 GMT"},"fingerprint":{"sha1":"06:BA:36:2F:71:DB:00:20:7E:63:51:E1:07:B3:C2:09:F9:D3:65:87","sha256":"B7:6A:65:78:FC:51:25:23:3A:6D:B6:59:D6:C1:56:D4:36:21:34:3D:25:55:DA:C7:8E:BB:EF:64:94:1B:50:C7"}}},"request":{"raw":"GET /adsense/search/async-ads.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:06 GMT\r\ncache-control: private, max-age=3600\r\netag: \"2317627703309504322\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129185,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2502)","md5":"cd5eb5822dcfd65b587706b7d9ea40ab","sha1":"6f197951fa8dab59c539eff409748eff13112a43","sha256":"468ce4b06249cb3f61cdd9e4b432c76e3c5068af1b4ac0df722dab96f75b9a7e","sha512":"a5bf2ce7c7a1fc7f9bbbaeaad1609dd8b1616a859c2a80bfcade5336b53fb6ae2f15a7a3d5bdf0f325e0baa7fba0b7033c09591417b9090081eec99757aeea4b","ssdeep":"1536:qwcENdVjrD2OBPBMQjtvgeQm8W1Kbj2P2Fgc9u6s5lLvOsTvALdSqbqGo9G6x763:AKjKJtW1KuPpM5LdSXEXN2O3","tlshash":"abc32acdb7a1302243a3a5b5607f014fb139b966a40c84a4f199d8e87cb4dad4277fbd","first_seen":"2025-12-20T00:22:11.879148Z","last_seen":"2026-01-03T05:45:43.822369Z","times_seen":8,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::5tvsv-1767175737737-8bc118b6fc88\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 771\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUQbs7mhHCgFd%2FyEzlxT6DvQYstllcOrGNH8DeiogZhkD1YLaWm2Yfjvy58WdwEmNT3oQwYvEjw9POn6326VxURlz9rGM7m1VVX46aD2ld8%3D\"}]}\r\ncf-ray: 9b690d5d5da25695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-form-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:58 GMT","end":"Wed, 25 Feb 2026 15:51:57 GMT"},"fingerprint":{"sha1":"A6:E2:0F:FD:DB:D5:79:15:DB:03:17:B1:87:6D:6F:C0:EB:2D:6D:66","sha256":"BA:31:F8:9D:3F:78:C8:EE:37:67:8A:D7:B5:BC:FF:EF:1D:90:DE:A3:25:9C:F0:9C:47:C8:B8:DE:95:8C:2B:39"}}},"request":{"raw":"GET /v0/amp-form-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14976\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\nexpires: Wed, 31 Dec 2025 10:21:51 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"8d7ef6b413336982\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50684,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50567)","md5":"351a63f9c8ae44f77469596c8512ea7d","sha1":"4583270ccc48aaf3b058eb71563ec729450d688e","sha256":"ab8abc82fcea97199708654141abe5354242cd0feeec5f281e492f20b46f6a5c","sha512":"887c60bb7c7a46c26b68ef44254a6aaa554e9778ed88b18107643d40224414256cf697c0eb75372816a50b7d28dcb02678a4a47f1e9c55ae187f1a8705c1a93a","ssdeep":"768:gCY7Nd8NDtAhL4hpwzkCJjB195+dfr4eWolVa2IM3VoRdT4shn:S7Nd8ljhp+B95+dkGVa2RFoRDn","tlshash":"bc33959cb286b0764797a0b0816f610bf33b6858650b8128b5a9e9d17c7cdcda133f7c","first_seen":"2025-10-21T23:12:26.025252Z","last_seen":"2026-01-06T12:23:01.434045Z","times_seen":320,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":131,"dns":5,"connect":32,"send":0,"wait":40,"receive":8,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.6295932303477034:1767173098:kNWrT3abY6Dxj6pIFLs2IoRkO7Hs3sgr3UyYpBXutnU/9b690d54be28712e","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:04.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.6295932303477034:1767173098:kNWrT3abY6Dxj6pIFLs2IoRkO7Hs3sgr3UyYpBXutnU/9b690d54be28712e HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12151\r\nOrigin: https://timkiem.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511; g_state={\"i_l\":0,\"i_ll\":1767176523924,\"i_b\":\"AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\",\"i_e\":{\"enable_itp_optimization\":0}}\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12151,"data":"Qw5gorFzN4LyFyye-Z-HMqFuIFyHTHdRNH5qFcHXgZ+r87w7F2HhrQrIHwNTEHMrdgLaHE2-z0HdS-E0HiYrg9EHQ1+fBHaMgjGiK96QfFHaVvM2kny4iHiyZw6jiG55LcFNBf-HQUx5kNkgLYbo-rJrF3ARwHOmw7Hdifqz58Ezo1HLoNbcm3cq-HZfIz33m1bre+DmAqHoqEHKwH7gMcH4CpBWEgL0hsFW9iFGT8eVwwHo57HFwXE8td4Da4HA8hyjpECmgHNfdDq55gHoCq9Nugyy5HGRY3-Csz4j5wHiu7qK-E3CZCah-zo5HZ5wq8hv8gHLNhiqidl-4Y-4O-5HzuEHt1uu5HiTFbhTaZNE5H1rB98Bv7K2yhNy9g1r4dBO39uIJEzNuqpgdBdsgHiYUtwHIEZfdxJIHIrd3pBznByAjr6dYMr1d0DIJZTXadJO1rHaWj7HHMrK12+k7S2oSSuHoa6udB8zZ4xhaMCcd6KpvNz0YTrhvd6ndcIHS5ZMdWFqJDuhmiHuz2F27SLiDytHmTu1AH3T2ft-Mtuht+$iW2LOkMbqmHXu9-9q$UszE7COfybcgHzB1N7hpmzpnVpgzV-zXcoMDaKJxQHi+Jq-ZQvNf5a45Nz1HSdbzGuiV5ZuRnDFwEqCyje3iXHounnp3F2ckyZLIaClvFUx$sBN1ZallIcg5yb2AGzg-hLyVh$nExIS0EwgdihtYtENFkpi4sT60Mvr8pE$YhvuoYfMu-26ZKe8eajhB-igNK7HFkTBfFf8fUNuHffRqrIXJIn7Adb6g-N4a-ANztvl0eHXpiiuSdA4AIih80+Uc7iIYBHiVvKwNg2aaGFDAqkI0mEUIFN4NWUHu8fxNwHgDBjL-DgwN5aH5Iw$HuII-iOq8FiiF5Q2-pSaLHvBfcFc+5d97FfBFig8Hr1ovHN4F2Rxq8UNlZJ7s0cimWuq8MA64HViNkVtf2AJMNwifvH60orB1rf5yRGByccII3i6q8cb6kY33ip1YmcoSf3rAFxCcz6f3-KZz8Yig1F-6iZAYu0rVZyiSuOpC4m9UJs1jpCvgNDoa3DwuTZi3KvNuLfMilMBpu28fMcrOJUslZgmoZp5kmDSVYN2b1Hiz1KjyFOR74iuIiAHYF5pSTNNVgAf-ZcqGffc7v9qq-qfwpcNwLqyyq44NF5NKvcNhBU7WwmtOl4OZ6Vb1aHuHg-cFLrav94gQQ1XgQo5UD-iZqmfiiDOwu5zT50RRSER650NF3H8VxiTBR64QTzK9nA-zOxwtLHxo7MHnWA36LqH7Rog-H2EuULHHfsRNwMMNf68LN9h5vR42IIEr3iX1jXIBKSjKObNwa-KLDD5jpofFAi4Hv70OeyiRNftihSfvFS8evK8GDYid7FrCzJ8vAlB8g8OW2Ic+B-rc-GTNiqH8OX+eFfI9L8fg98e3XGVbvMAO3OHNNnyAlkgBAEFwMwCrIwpOMnpkUMx0IRMnfIwY8W0uEWYlpCsXwVs1IFWI+Jwt1$R6Hr$WK9clw0nl$vcpVLmDbsl-F$V$GHqMVNniHMnUI5NMFgAgA6UlCXG+x9V33TIjNywacpCHsF5Heq6A$RguFaN4cMSHoyL-4-Cecihy-6qBz9u8io1GHH6R-qIXKvLsH7AE0gxsyFEW54-xf3gYcCTdOp44lgFFvEMRMT3YzU6EauUt0-gfEI7NEsgMairrMNUrHIiIELtfDWi4CUIbRgCCR3uqQ-mHYCUiyszAxJIJcyTU45WSb-4V3ZzURvOfg0co2j8ZUSpR50DFy5E0qOIGHaS-ZNziqdyH8Zrdrxaj05I7Z1BpMxYd4BsAi5-vWr0IN+ZY0I5VWL2f45Qa9xrXs9+ggY8iUWf8fHJLHtbdTK05BWF-tsqEpF1uEKjTNEOcz5BxNrdiyHAF$CwYj3iYWOIz02IYfVHgif3ODiZFd8ggfsW2ECVCxY2FvfcL14md1pRuCKpZ39tHcIweY4T07CgQ-sRWZTTcLOvIt7gNftTcipHwIvi2y5Qw09YVR5HQoNH7QKUW7VwCfE6zEe-WhsLhhzC+Z+lvdRcHa0XFwIIYHrKp3UUWQgv0uV5pIygFV4fUd6pJTa3fDq7YM34kIE5t6If175ZDWFX1BY1dEh5nJOgw7RN0gHpOyw1A4Y1doYEqnRHh8wHbCcNl+BY6DldjTVd+E0duyJldbKpsivgOyVsK572K6W73+vz92zW2BEH5HjpiGraAptMqXL6pzQHlV10enIcfwwbaTnYrgvz6E8KKnXdZnY+Gg1mgvU3gJbfx334c7W$rS6et2Eq44-o41zCBTYyHosfKNCfA4jcNJyHc7Vy5zIygB+p3YsgFpK4HBFb25zNQ8CROVNKE5t+vZcUNBoMKpu272TMuu4qLOJF8mMCZV1e+z5d1BZi7-gIL65UHSHcjIudu-FNF2E-KaAQwkp5mz5xROIOAOd6G$Tp6Jg9c7RfNF8nJdhIBaEqKrfgYhvuCRInO44Qma8lZz7uSpfDy3eGDuOWQfNdHuc4rs2FQhTdHccdTesfLeV-5xYK3fBH7irbz2SFFhkz1qOHnqmp0GFywv-J-nYs9iz8OpEpCd27yns7J4QnYY7Hip-qGZA0HN8qWaKfhlUNLMUDZGpEfAjJuLJMNIsAga7KFH3EuqQWOnWTcX1aN+BfkudIHQVdj7Jx6EI3La0Msyy2eIANvhw8U6VOqn5iHNa3b+Y1zIDTlyE+si529yGZslJ-a7Mc4ci2SeH4ZwT5vNu5TfSv14ailLkn+XqduFNtTpc-jraMU9OWZ+ulSa68bWr2lfuT4pwAlu5W6j63gztTIKqJ5HeUKcqK7M+DUNuhdvxSFwRAA941trniphdNB+ZqKVBZeKeq0A2A9h-igTcxc0wQkWTmE44kTsmUadHN+XmC8LqQ9SFL4N9DGowCgtr6H19y3-zgS42nY87AqmNwIt4DgrVMAD792zRMZZieKFHzh4QuEBwQG3didTHnDzggr4F-Kn4+vRoR4YYhIc+$mKUx6fXMfWRd1Oq$8hW3IUXuGNAOm5tVtydaMfN6SRKsa5r7G4QsCocD6WsF-t7bVp6BH4v-jXqVuC4Y0BFZXNpQsl4CxMUjgMIYOUs5o1b0OXSFNl5DuBlBk14hLas0z9fFZnOu2icRzRysrMf3iq+48$9+pgzZzf7V0JTRaIqiW4eC+6ZB64JM9VDg1Ht1nqWwB3gib0cN1dpomZx6BJZv9kUkSVyx3iAo7HcTWNZ6imE6vL-$oNo5SunI2NYOWu+sz5J2nFbCs7$W+kjoZ$cLz1Gxg-gxXA4VycbhD9Che4Wvk-i$A54UWMzEC2CmZN9U7QgahRz-2YzWw0VkWhLfY-XXgWtpD7G-lioW2cBHh6NAl1XppOfXvgA+oYqvIIktUWfKwQMeOsj5yORQ+SK+jZX-I+ym9V4BHCwT7gM-EZFDW-XSqohlzORvFDWAhOFeMJp3pDSYsMQVXTQaEHX0RRSSQWy0FqMSHYFHI8Qn5+9wQrs2fYyN+Gfeg44y40LrR6sOIIQ$jCWFsayFu0EYp5VFgFVrwkKOgpMNs8wHQOgAfGX1uAVvKgi-NlX-IGHOFTvg97jOEwIWEVpcKYF7pfiAze5mvVgNFJqggkFH8Ijaq0XQpqEWFxHTMnWTLf9V4y49NxNWqINOXZLuNMQ+KFs8XQNDgpRff4V1ssLUVBhEj7s0qq8TXWif55zu7nWdM-X4-0hT5L8-XIIl7aHiuGQJjZMoj9vf9a9QWN7qzVEUhXiOqu8SvVwHjY7SjevUNdygXwN$7dNrL+wNHML-8MQzR5--rqjgXZrUsVBBp65igZqaHjHFBpRqBpQzQDSULkNT9bNIHOiSI+K-Q8E0IYrFvJNkWRSeg1Q5uaKkEAfKsfrbwQzeqAMaFAj2j-hUXsROp+uAKIpffSjdQWXNVg8cF5yZq9sHjuRW81EoBfh2fVH6v9L9y6F7yTjD5K9GvKrDfzyI09Q$E0+3iBHGXp5q+Kv$Qg8CqFyGQVfsHu7$7wLfj9u$zO0bRTig8TyGQWh4fl8tBmjQHnrWs1u0FUNn5$5FyHXWjOMvgcHWFyqUyHXQETW1V0MXBQpG7-8XBzRNjRwxd+yjRp+UHNwgL5IEhazYVx0F0NHYFB+mB3vg8jBUFfI$7Ti3yFHTi2K2Mcy806Vyr+FtfFq$Qd4x87waHcHAgOR6i$7xEh-Q5jNTSN98Q-QpjaFhjDWFs8pId20uRfIbFnj-I$zaKh-4ujHIvsFlVFHOiLfMy$00H3BjjZFm4bfa+0q0Xz7TKCgZHs4ABFVed0dSyIYfrnRiYMd-QTgaH6HyJJyapFNx0phY+NQtg-VvsegLsbfIjOM$un0-Fy+MHCwOJR9GL87WXN0f58YeW-jKEaHijcp2f7i-8RsIYpRIgYvCX8WTJq9i0qd4gmf4u-VCY-p34QNRQurhR1syz2XiJOjZ4liARUfFy7E8HOJfdnYEN-IFrJ0w8OyQFEd0KtgjFkX5hNfwL1Ly4nY7B9jHLnY0ITHRSDWDrnJGXeXYZ-VarUMB70YgvYJp+ZJ-zMYL8NqQFBh8EXVLF65L8hQTKLLYrJqCVSuRJIoZX-ZQBQ7p4CweEczsB2gVo1F3FQHv0R76dVwHz8uzFaRY7HjuowLTuf53rKZWfY+fL3V8NvMY+SYjEIFf8ZFaMAZ$jQEOFejVZ$sr7Wr6HVYEdrRXXAv6MS7dX1+M+QqAuTdaogdONhi5IEwlQXB0yxV7YSR0NR7qYG4H4u8J53HGW9jYVqvTfCgMfvHYjAQzEmEeXtFSNaJ5vm5XZeu$RusThOvMwJhO1mQJikWbjbZv74g14zHuX5KRo-IxX-0KKvHvrtLgId+4V59dN97GQtZodXVgh4-zItHaF6QMFiL79WMFsl12hfIMf7+4Q5VxruR4fYFiZHvMJ$psqHf8wepCq5YFv7snrLvyF4CNVhhjdCwkf4f-RwujFTr9hFs7fYfcHTowVc1zEHucy5gaZg0DgojR0-1RRSZ+rnJz7OJ$h7CwN3Bw5ggwd7CYwFXeq6691urKV3sO6pMsRNhNE3B+VlF3s$ZmYBCHIpqFrl-vXQHuG8EffU4uC47DyWd$W2BrRWIzfKEDoIig+rRNGFoD0k5cCzQiqA7x9HuIGbWEgkWUFuVeschezNHLX6qkoUvRCIBeGUN4Yv60itgf73jfJxdJCY+8E4EpqOojo8EI1prdv-XvyWHQF+JY6lBfXnXSQ1H8HfgWgUC4g0WhCt1LIL4e9L8r0Y+8+vdgZGQ4f7r6ZZBiMOFSrRRXJQ7G4lgH4g4NFlLrYsjgYfrBF8rezepDwAgW1ai65tMBY+1dQep4EDdZN3BFs3R2wnQ4B4gEh$9J9dLi6Wv4G8d4duo9yDygg516Fc4vfQvIJSM4ZL0m98iF+91qCoL6qi1g92wVEbXhHVEeGORrC6Wjq$N0K+V+00jYXR+xzEJ$vu10geupzvW8sb65gmIU8Tdu0gEw8uN1H-hZ+AuQHCw5rR4xXwBvLAdnjaqLGmfzrmd0hwdjoxdOy5Ie0Rs5hGeJvS4Ds1jzps1gY$71D7MVfa+n1BCZATWW8qeNo-XIdMHYKnWkofIEwh7tgyu6wJ9kgM79umX8+LrJh1rOwajaB9d0qUGSLvF9ESAvq1H+Lc1DsWY6Hu6xpNulphMid9VuznY7X-0Hd8+OfOgkf+4pq0X6DzM9i-q+FnAMzCvnJgI00IIGQQEk1WFIpAuORXrH4z857--hAXDIFHD652jVAUF7wOMbRoN5fvf54XsUNeACgw8lEoG$rkK8wOYmraglJgcyGp60Kz7zD1GHJECj6D6cG+7reyfQFsFM4dZ2zgJFcuKYL0Cf1kyAXThG9EjT929yJ0JgzlZ-v7w8+FsqvwvXirsQEHGGhXByJJJNVfOsHvHvZs02z4ucHu06oz708v1nJruKwZHduFfmNSeiqpqdL5in7dLyDVAzJ4gx4vvK9TJ9rOq0XTDJhKLO5vNJHr+DJ1LYHDNbf99zKVH8Mx+noEVbQAcIJUdjDJQh-25Amo4mF$ynJxLD8BebWaHXLx6n7cDu7bjZojZADrE4QQq3sfgRc38MBFZHyaqpBiyzASAJmMFom8OfJ9GFFIDBHbZGoxmB7FGKVRuuomZJh2eae0MiUFsarzE6oqz--$m1svHqcYHKeqwX0CdL0DoZ12U1e-QaT6ZeEYcBGboKhw+-wcmK98i6XaVQFFyepNeZQFXTGjGQTfGjQKZYDns71JpOfFsRpVRMRfFFmwC65EuKhZJ1m9jaMayLpILsdc6zXZL+uegAfcLFANf25edpvX07Du7rODf$odzmZ3DIJNBjDWc0DOGLdoYDfNQNVKd2Qe9crFOchwhhmxoIz1Y0IMvv7DYIJSo$ezG1k2N6XormGtpjyf+0MmDXpJVfFLcBHkGqN0GfHHghzG4+01HcjbZRvg8O9YvauOHpv25ZcT5Gf214QtfLGhDuIpcy2AgkRgD1dNe1TK60OOFCHaJZ2G73gggkW58gG3hkF+Gg2zEmL-OeoCXhHCm9A4cUMycCwFQOp2sqJSvLHVgBFn10XOczpyDDcs2XExOK426wkRVfGutre0+FJeG8EFGFFqYYzQWn7w9+ibWQrfyxex6tZ6HA7r2+LfIMzb54dXpCRJD+UCmnJNYFNbZBjDhy2+kMQOhXH0j7ENH8Kc+WfXA3L6pL0GdbBjQOpFcpRsaI+tJqJDS4Qcf-y257Owo0jCAcF512L62o24ah+NCrRSOkBAqoGkADO3BiJFpfp7mRcM7rL5aBcd4weo0W64zhRM436q23ZJjJqYKbfFjWHse2O5gDEkE7MEgJYosNVsZ+4gUWOf1mI9mrfLFO3Z00KQ0eVvYAX-3bUgtmguozvjzfUQeDtioVdJJapQ1W7V719ykFO0I5YMFQjBagCwV-XSO$7xTmvCk5hNqvgaq-U0ZEeUgwRjenGlEI1QQMZnYno+a$mtylh39zmiNkgzw5fbRvWFZWAfoB9OJvHxAJMwzbWpVBTHrh-61VErN$O6ZJ6HglcHVtAL48H$vo272yBEgCkCeupeMQpbTlye7iZ0OoLxThiefBkzn17HJpLYRjemQUHZcEGSEYU7IOtaa2+rxdaYnGbgKj4oTAfDi1D+FFZu8G5pWSn0X9eS35fG1+FsNk4U0HZocsjlSNeK3jvLYnQwE-OzhhN-8MQzXT5qQhV8Ua8pu$KJdRtuXOoDSlIAaZCyTd1ifFy3JWq+dWFK0OvVzC+WItH+Fgub5sDcaN2htkyQa$5ZCMKvaX7QhmxZFULl9auMc+A4uKAbfXkq1AfaylJd2liphdJDJcJK9AT0jOJsQNV5EruTm-mhhImH2f7Om8+xRlRK99oHxYuZL803BN62$3$GxIHE63fKUkaUXtt2RrofhCAwabwVpULS$g9b07L+B4fooWlVy2GNGiYxQ+n-p-3Y7CapO+F6BFNr1u7+Gm5ZLW0Hg7$Ufz90B6aG4h$tBi5f9VS4BH4LWctyTjLsFpDxAtYipRa5D5IN9EaH6c-9NsF+aGyUAyw2foaRu0ha4SoCK9N+ygymUtftuH3Cy5-6wdioVKgDMoW6FlKzMZgYaNQpOTlZ82VU-mwFwhgv-4gKNdZfCHMEhczVWkcA-mzhgZEUUOXK9FCHjqzexR3-hCJqHhgnIGXcHLaWcHY7yghqN5KxB1hiqwcaI8M-ffQp5r0gDZW5Q0HL5Q5iM0Ic3U2-DLFwjr5-N5g9rTIzHfLiTruQTNOSLgwWxHrvJlHV837ggp1Z8I9Lg9NI5I3Qci57H8L-615vuQiaKwNwwf0NtYKiZAHSNFzCEZcH0isffwG4n-Iup3Y0iKNg0I78gMNK-CwE0fRIm14YfoJhNr4d9auAEtlHQLEFq6LH0eN-Agq$gS4Uzy9QTFYH0gqHiq6E4c-sLAul$5zZEtU0Biu08Tcq8xTcLNHM17XU9ZE4I6$f7cQKpqz5i9Dfue06fGqI9aaK38dfSxM5v7Q0KQ5wfTIk94MNjuRLY0F5xr5tBy0CFtfXypwZjQTH98FH7t4mH0L6IMIjuo9556yASgGW58afH5x55WN-rO3J9AImpEV+28789Opix9W9Zr+y84Fxi6XA6FdvG9fEI7UNo8cb8Ezk-2ZtYY8GaI-uF5tutI73eKL$g4yHu0KiH1SSuun-x7zrmcdjBpgG0x2NTrjNu9T8dIT$cBHRc0+xyIw4EzSgaNcMixq5yIdS9MDtWg8A4iHvyZqYMwC5+4p6WcYAHur9u8MvMW0to-wNaqlMUJ4iQ0NTrdaF55iUBYac3HI2F5xI8LHXiTN-8z6i9UELQclf9uL-w46cZvivWQ3hYK5U3IuHJHOz4glqpMAiWgF7S-qYqTOt4rqwySwdiudO4+rKhjSj$twQrmUNnIf-mH0yvNacF2NRNxHIio5iwgpLTfTZzkHz4DcsN7fhnAHipJLKOQETbuKZcLY--BNg8C8Myx3fKADHYEx+LTuZ2CizF6SEwuiLDQG08RO5dqXzEaccLh8sSJqg7i3iyWXW3uFIe24UgocCF7wL+NiN4a2GF4zH2qVYiSc1AGVt5wLHunfRCIrBVHKHMgAvN7q2InTn-njqF5wLghy1L-LSiacdfjzWfo66Nvjo7L-Q$ThgLzIxtcdudYwn-61QRddrCKTENqAwAxFiHwFxH3gWy0B-EDD8VauIkIcmO0-5S8wc00Lo8LjFcFiztOKrqvAfgaVh5Z+IIoSa-H68tH577Hoy0YVDWr7E7BUVkAMecjoqn00i5-TZq9pOEZCqRRZoiHyjmz3gawFD8-NAXvYh4ttOEHUqp7sO9EWrMomDSHjXHdlKwo5NRdE-d62oQ-LVB9Y$8A4p7L98gIuc5Kng2KN5iSafZ2L7u3oHI5EcuODHHHE39HMFyNoHibNXA1RwFTBZ9urc2VHp7qrF3iYkA0sdc30+SMF1IcSWqfjACgrzb7bMLu53IIf7Fagr4ylJmAhdZNDoTgsoRq0TLhgaeToChtYFp4bgHgI60E0XCs0VlVC5-6yLdJ4FxVQij27aLNRvrffz6oLCDH31fvQ4A5YgHxdvAWENIL4H5NZtFFR-ESbuK10lJ$ADF+VF5IRNZWzJaI88h-ITysitwifEqxHLONZWCcBWAV21WmbI7xmOp6TAICwFNisZn0M9cbtwK+chARdeVlciEINNFNsrf-Q7n8tFJUAIrcHU7GVLB5ZieBMH4wlDGMideiYNIx4DiWd5dFffR5+Wie34LjBuzAHlgMu5BRL-ErnFOF4gN2ZgDB-$gbHW6i5ipclglgjuuqHELvKOH1OSuZgWzK3LKWgEC9$6t5HdHQEF5Rqj3KMc3NSzcg9WUTG39RBSzkyQK52GK-+gYEJMp7zgWJ5ZfcISF0JGHKMH4rB-C527U05e4TgJHp5X-z2Ze4UA2Hu3WXK26SNqF2NCwp7cOWAa9HxFm2fm6aT9dZB8YXyHzhrajoLOTIIEe0Qrqe4ygzHu+CizcLyLdd+JI+5HUTnILXOFQZ+C9Us5eWGiFI1SvzV3nx2+VfY2+zEawVkQed8SkMXzf5QVhXZsJd1BzXr4RRoRnMAMw5QJQJoCm1FCgWkL2djf+DaJXH9U4anuKhfOFAMu2NIWIZjVT8X+2ZMIUUtkRk8AM2sZlzv9ZfCY-+2sI1ol7LZO-G+zgqx8iNygQFkYfjS2v$WiNIgvMBHnlxRcu-VJgKTbHjU$ZhwZ-D+5N$3vHbnZUY-+XiFNC+ryBrH-wByjIalT-UY7jK7gE$AUQzgSVJzBygIpt5zRTIrlmjSgFhi7WfYKgu98fxMEUOaY0xT2i1aJL2-0Heg82I2dm2iF-Q2KcIGHuRdCm7dt9BN+iVIbHU6z$jYjbM5bmsByZYzsqS28LaiFk8pNwNgLO8gfNYoAMBiida5C9+Trt+5r19EJi4pfYQ5$zqXFgspi1-6q64GFEw14N$Y-+e4IwiqcIUiokKv76acwVjUSJ6Kkr-JHg1jEFoHKHjjW0CcemgZiD4YHW8qOd-tJt5Y07W673MKfYlg-yYEp9Fyp-ZOgl09TxyayHsSbMyqjaGdAITvS1RGNyaE-H3YrMMNHr+VUad20O-8+NG6XaHSzT$XGKFpWO59CC7EzX7wLp2inWESXo0qKrRFpg8MuQZT+p7UOvg8vIsZC5n-S+3FRTToZQRm0lMUUoTU2SSRSFEWNyu1pKMGM3I5-Z+AzffYYwFYpsKUKuptoKE-Z6lTAZFKwHrRp7FgWuA4qFH$R-NsV3H1Yu194g2x828IKNFIY-+$Y-DRwuNfQB+lcN9DQXZuAlo0rG2zFz4KXY7SSzCa88qsZuEIRcH8ZyiN2aiHiCJM+ZC+UUZAgSMwlp7ELasivR41F1gzMaQmoMUJYjWa7ofvjauUWEljB95VUjiLmtZmVI7KwcSLac0CawsY$8Lf2zBgB+pk-srFSifLbXwIu-+fzjaygrJE6i1hqFeaQpvHBHR0uz5wVNpJddps1-JAQZsECNJpvlHVRha2YOC1MsJAp4Do5clgtHTct+aT5NT5jIh1-EV6BIBE0Y8MEyXIFcss7iyNICyyB5oovTxJI8Q1J3KIKXRVYEhBHv+z4Hk7pJKp4z$FvOboT0Hw+hH8-HTuvEMJ$MX6Jaq63JOY1Aqzxxs0ENbfR10+Yzls6TCvTYF1+l6eQTk5opsJ8Rr1YvqMgmTXuiRzDf5WiyQpsYBR9DyxTaumO7-chyjCKsN53poYNhfZxlq6VopD1sRvlZ8t3VqF-VtKf17lTI3JEUJcwr1fR6lsbOF-F3f1SlG5cn7mCkhejeVxxugE$JiNH5ClpCSrEK1IKNDeQ0H1gp-6qKgDrLxlTUTZ1IKnrSp6guYNarkpONfpUfyTrcVLp7zgsMAZ5TZ10KHjLfsOuuUXC6Q9BqLnIbtAM1OK3cD+Z-VGOZ1aKBUGfx3dwpG7FfG1gFz5sq2rZZQ-OmHITyiHYoDQf1l8p037kZogQUTa8RSCvT6osK-wSpUuyr-QCBKU+6ddgoUT06CK0zy3vOCyErpfpEUKWEemq226IRvDYBIiy-hw6HRNc7BIisgE36IR6cXJ0i1gkM1wR8gTLq610Ef6tEt5VzvluYT8GyR4TXL0EusURZchx0RoIEFvUVCGMh0gMI+uDUWqVhG1gC6dc2EGdKpWTVONMsDEdoshXOgsTzbHMK66s+Y3fzNg6kLomEsiqL0zuaTKGhQxYygayy1hGZ2RUq-GzQ31UpGcHbTSC6dc6hUoysBK5-alohUrFa5i-DjxsV27$RYS--tfTdrjJ9HWQfgvVivy+-bhnI0w6wo05WLs1LNiHF45Ei3NRowhURTjMsOcFuEhgX9Ug5nYb66B++6-0YHFQq05BKQtg1YW3k37M6ihgaDiGc1jFbG-v$ZOjv2J6NMIZ8NqW-L47iNIHHHXtBufmqK-IbgJ0HWLzgbsBI+iajtH7EB1Wog6rW0HOLmdDFsyR-pmduOwgWfSZ36gHHIJH3-jHLioH73FCFt5CgZzy6NNwaK6upiEq03WfLUHufr7z18qgkLYD6SZ3eHNgKTFuHlvHHNOjHkgHHRcoup9zHOropF4ZqiqF58JvvgyH50ORhQFMvlakUnCuQ22eZFggtmxrL+kegXvHHGB+22eqi5xOqaAC+21-qHWua9ACVQhjeb904NgtBb+FuFX-cxBtUJu7dLFs54-nAvHLBhDeJve+HgAkLNIWf7XJHEr6uFl9xFv4ThF4auHHN9W5M5nouFE6HgpcwMbq-LGksF4HW7dbptFekAHi-+HI0AIHFTyHI53F5zKsoui6NWISuWKWnmv+c5I5R7pjv+cXIWgMIqqKbM8FIrRJZrZynE0EoACfHBV5zCOZwO1Bp-i-e6$AEwL1FD-sXmmaiNHTQLieTivI4m6EFHgUEQglgq94zH$2gexXAwnA06cgFVex5ZHHtTgigLjflI7HQHtSFIBEJ44hEcYKB3-LHu2v59yj80WHfH7LYF57r6iAQLUFaucg8gLg6g4gFLWUHqna6Fqax10uRFeHa6LcK11QuN4hgIOHHLirlXHrFc3kKwT9SuAA6EIWhierqWa$$GqtSkOgiq5gLSNzHHNlTfuHH"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9b690dbc7dd332fa-OSL\r\ncf-chl-out-s: foBfmSOsh5MJi49N2+GZjQ==$ABf+WOpeAVtWWItAIxQ9iQ==\r\nset-cookie: cf_clearance=8o0B.IsDHGmFqdhUZc8CeXd3VNIEexafRRLo6Dmiy3M-1767176524-1.2.1.1-B80UnP.nx63dSRY1BC5zQU_xL7rFHchhRrAdvF6JKP8G0JZtuq7_Sa2AocnLGtaonJXbU74CsGGyBGgjgLah51DJ0qB6WJ1aVgpRtN8rG6j6RE0NxKTALycBPhGixgk6dhoSh2c6GnyFveZOjQMjfRSvwjq.3u4mewBDJXdbg2N2OQxBbcG4ECaQrXWWPE4PAzCRfmA6NCd9FGMICjOVZ.eTQIS1lZnTB9t1zJyPcDE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=timkiem.top; Expires=Thu, 31 Dec 2026 10:22:04 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=US3PWjNc2FpUo8JSLItlslaw1xHcXsfPG8wyzvAS9o6QDTJUMHmOOsIo6YUgYXikiosW1Xn8jzr5E8n%2F6s%2FoJrV68prSKVHw2QSz2c4bHRJX3aKcmPVxI%2B79cWPzzg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2122\u0026min_rtt=591\u0026rtt_var=1502\u0026sent=139\u0026recv=52\u0026lost=0\u0026retrans=0\u0026sent_bytes=119647\u0026recv_bytes=20734\u0026delivery_rate=8702927\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25043\u0026ss_exit_bw=8702927\u0026ss_exit_reason=2\u0026cwnd=19118\u0026unsent_bytes=0\u0026cid=2d151cd4912c9836\u0026ts=15798\u0026inflight_dur=206\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/p.css","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","date":"2025-12-31T10:22:04.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pingomatic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 19:44:30 GMT","end":"Sat, 07 Mar 2026 19:44:29 GMT"},"fingerprint":{"sha1":"2F:52:1B:46:C7:25:E8:83:04:B4:F7:F1:CF:1B:7D:37:CE:D4:B5:B6","sha256":"AD:83:95:92:76:43:B9:58:DD:EA:DA:C9:40:8F:C3:BC:8A:6C:10:D9:D9:E4:F5:96:BF:C4:16:B4:BA:F6:CC:15"}}},"request":{"raw":"GET /p.css HTTP/1.1\r\nHost: pingomatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 7955\r\nlast-modified: Fri, 06 Jun 2025 11:22:18 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7955,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"48ae1c442474781fe1e30f66444d0055","sha1":"3eb417613a4726f2a3d53f6dd4b50b0bc3118b27","sha256":"5fb266469859acfa490b7e67aaef13aa2f8d85f43316c79d662ff03e7edcc5bf","sha512":"81dd4f77f1a156477da7199a06b1bc0b9bd0a20d0711a32adc96277756e531f81b53dde8054d079b9fca011017f91eac750abe683a5bb75961144ad7b937e1d6","ssdeep":"192:5ZMmS/PD33gi3ibReXiKoj/CCa4eGeWeHDstZ:5ZmjgNFnPa3lVk","tlshash":"dcf154796b0c114aa71ad5d029b076e5254f023b1a219ce5fde87d38e884cac0d7dbec","first_seen":"2023-06-28T21:50:03Z","last_seen":"2026-02-07T03:12:31.163862Z","times_seen":142,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/images/1x/no/branding.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /cse/static/images/1x/no/branding.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"prose-team\"\r\nreport-to: {\"group\":\"prose-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/prose-team\"}]}\r\ncontent-length: 2015\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:44:12 GMT\r\nexpires: Sun, 27 Dec 2026 10:44:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 344273\r\nlast-modified: Thu, 07 Dec 2023 21:00:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 15, 8-bit/color RGBA, non-interlaced","md5":"448fdf0f4c35a5d39235e808897faf91","sha1":"c01d11e9a0de415a589c50d5f4d21759ac909067","sha256":"bc3fabc0cd6b45a8caa68925e35c07b21e0c783e07b8cf75730cd98f8a84cccd","sha512":"f74a2a85693ca1d5cb58515034d8416bf8def49fa075adee6815d95d1153edebb14e33e74c3076638d697bc0a90d62e5d7bde1de196b0f0e4eadac981f13f7eb","ssdeep":"","tlshash":"15414ef71d199632653b112439e905e25cd2539eb6142c144cc7c6a766458c31faf251","first_seen":"2023-12-14T19:26:12Z","last_seen":"2026-04-07T16:49:59.142525Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cf-fonts/s/roboto/5.0.11/cyrillic/400/normal.woff2","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:51.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cf-fonts/s/roboto/5.0.11/cyrillic/400/normal.woff2 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\ncontent-length: 11840\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvsEOcJ3QFftQFipXkaHZwbGBXxd1VFtgPx8uX%2FBthpP98jwJjraGcSMIeI1XVguLtax%2BL0U0s2EQevOQm%2B0AJ0R97QgxsvmKXF7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b690d6c1d4532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11840, version 1.0","md5":"a0f8baa16418514a286278c0a773d3a6","sha1":"e3029db449750770ccb50c74364a7ef61e8ddb36","sha256":"fe56d0d137acb0f9b17754d3670f5ecaee2185548dd9a8c44535a5f194117ddc","sha512":"c66f50263acfe1ca68e2f3999f76a9c73fc09fcb54ebec4949bca670d63bdcd68e9c9ae8b83ad69da84c9cf8627b6b84e2777b9112cafd7c62fcf8f9e799c39a","ssdeep":"192:hxLRc1v0nOzVBEm+alnYKZEiy2FqJ+/TUabyEF731idesuGqJwx8VyFH:hxLu0eVBEbayKXq0byEF7Fide0qFVyFH","tlshash":"8c32bf0e77904994e073f26712612571e9f9e3dd1bc66f80b1409d4ca88ee466bccc35","first_seen":"2025-01-14T08:51:39.832648Z","last_seen":"2026-04-06T14:27:35.738918Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Google+Sans:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 31 Dec 2025 10:21:48 GMT\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21906,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e5fb4b90572c7a887b03c11dbbbc8926","sha1":"0d878190795b61bd8ab29b2a38a04582b5c4440a","sha256":"81e589c0597887264a5c4a78f13cfd2ba16b1f7195ddc60fd62d4a072589dcba","sha512":"c1253542a9cb558886ffefd3ad0ef2a0664a2a578a4168443eb7ac8b080b5a11e3323a4d7d995256c18ab4d495101eebe9304f7a7a982a25800cb54f8d152126","ssdeep":"192:BHdNwwF4SQgNy8G8w55Oe5IXkbqGIwVhVP4lYloPcgeNXwm/B3gOh8GDXKKNdKPG:fhlOqYopBZHqYD8","tlshash":"91a2ffa11047a028be67bcdb33ce2d146e5e11791501d63e9bfe1ac5dcc786603b1bae","first_seen":"2025-12-10T22:39:20.596071Z","last_seen":"2026-04-07T15:07:49.626536Z","times_seen":860,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":130,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/logo.jpg","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /logo.jpg HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9426\r\nserver: cloudflare\r\ncache-control: public, max-age=2678400\r\nexpires: Wed, 07 Jan 2026 10:21:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Oct 2025 19:59:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXTrcpwOUsQQ%2FGSGctm5PhSfHDPF4QrN6UENJ3jY1u2vE3Sn%2Fczj%2BpNw9rBHK5zdzZv4m3mVuT2uoHo98oMsuU4qsMyF4D3Tb52Q\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b690d5b9b8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9426,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 404x167, components 3","md5":"6487b7eb8a00b373b3194a116eabd931","sha1":"5660846d71e7d8ee40e2c260be52f862755f63db","sha256":"54210e73766ea60c978a7501d66139a78ec90b719c421b7c3d166eff24b76c32","sha512":"cfe67fd358bda6157240ba93e79c3b7b086f0fd3e49f0a543722f389ec8f72bf6c42abfba0101631886b2760b060e0a1b42a6932e9997084d10b4aca8dd440d4","ssdeep":"192:hKXuUDJIFg6jbwgUyL8YuBqokGvMGN1PHIBy2t+zhb3FC:EXuUDJIFgybHU68YuDtvABZurE","tlshash":"56127d9764065a63fb2bc7dcbf1768c92e064201f4927bfa00411dfa7721eb21d1a53e","first_seen":"2025-12-20T21:50:41.742978Z","last_seen":"2025-12-31T10:22:27.520155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/favicon-32x32.png","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 660\r\nserver: cloudflare\r\ncache-control: public, max-age=2678400\r\nexpires: Wed, 07 Jan 2026 10:21:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Aug 2025 20:03:37 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypjB3CS8vTLAwzGraOnPBaeO4A2%2FKDe95V1zpguYaudgvw2UsodcQq4QCarWnkcFqzb%2FuMj7H0gADGWePrAXlBThmA8aT8XIZNPY\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b690d5d4ba732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"bb895a25f7ce27ddabbe3fa085491fc7","sha1":"9fa31738accdacc050ca26d06e291ca985ac2057","sha256":"3faee76ab868381cdda7f14fcbe701563e2276a588a45a095f3bb97b69653f8c","sha512":"f47d49f84c779e4aa4106cd15fe6dfb4698c9ccd816975afb4d020e7819550bb5c75fc36a524782039c54a6c6529a127f32fdefbfb9471b544e6cff4d918fc46","ssdeep":"","tlshash":"9e0144c14c2b3a9259b183224360b092b5459955632d5b480826d683213ceb32aa150d","first_seen":"2025-12-20T21:50:41.802551Z","last_seen":"2025-12-31T10:22:27.521306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CKBLWX436P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-CKBLWX436P HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 10:21:50 GMT\r\nexpires: Wed, 31 Dec 2025 10:21:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143194\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433021,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0695559d6070c1c577a3a3c209c90fdb","sha1":"1c69b8963e8c5d6b3081ef765d41cdee6dad9033","sha256":"0f63ba73a32ff2502097fe138e1f7672a8a933f39d3e72444418bfb8547f6a5d","sha512":"7bbacbcf544d06875caa0be2f2ab7800bd970851371a7d9533e9634fce1eb04e7bb0703157c22768e30476f9b0d34eddd4d4dead0906ebae087c46437376ccc6","ssdeep":"6144:/tIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:2C8bu7/1mbrnsy39WbMpb","tlshash":"9a941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-12-31T10:22:27.522487Z","last_seen":"2025-12-31T10:22:27.522487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":95,"dns":0,"connect":21,"send":0,"wait":47,"receive":68,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cf-fonts/s/roboto/5.0.11/vietnamese/400/normal.woff2","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cf-fonts/s/roboto/5.0.11/vietnamese/400/normal.woff2 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:50 GMT\r\ncontent-length: 7856\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nu2%2BkFeDIB%2FxKH%2BYPDxbNpaKuKT5kDy%2BuUUh%2FsgYXwfimidRKBKHDb4SdRwAkHrv5GHXsn50n%2FwcrJ1V%2BgEcVxubrFWPK4PWhJo6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b690d67dcd032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7856,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7856, version 1.0","md5":"ed88153e0e734ac1c23e62ca9059d570","sha1":"4b115706af1f4c17ffb5555f4dd3e96e5cbb3661","sha256":"beabfea8c7ef7693427c37f99ece071f4c3aaf14b590b12c45c3ea6258d896a8","sha512":"ae092336ab2d8f0a2b3aee17ee65f799355c9fdb8911a4760eecc5b46c649436a9887257c7d33d97d6d5096b61b4ee4365645db53f0051d03799b714427fecab","ssdeep":"96:Wa/B7FJMKqZF90C9KwpIL7edJivKpEWyISkqr7MhqXxcw/3m6FSOz8Hoq7kg6Zke:hkz90C9twed64ooqXxdQOze7NK/mcrP","tlshash":"7df18e0cbe427e63dd2e9625ffa51e68e444761bc3230994524f67a2aafb9534283f04","first_seen":"2025-01-17T06:43:20.275232Z","last_seen":"2026-04-05T22:58:05.00808Z","times_seen":820,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cf-fonts/s/roboto/5.0.11/latin/500/normal.woff2","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cf-fonts/s/roboto/5.0.11/latin/500/normal.woff2 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncontent-length: 20928\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5P5U7mw%2F9eb1%2FOU5cK0OXecdv1f6ZaDlRzxM3XIIB26aJD7sHax0jNwDKQsUgDKoWI9ZNRrhEi5G72uRqL32beqY6S1niyBWgkHz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b690d5cfba232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20928, version 1.0","md5":"02e18aa1a344f3345345384d3b3decaa","sha1":"0881aa60698735802ea73ff97e621634ad3a9c2f","sha256":"e5b29c36b2e7a2f4db58307359fa574004be43d39790e4b7a3cf80a7b16e8bb6","sha512":"9dfb470138f5092ba2c081d69e4ef35e37ba0bf5038fce1d446bb817a69f08b49452d7086e9b2ab15d9161c1e97f95bc1173deeafbff3715f916a5f503d4c5b9","ssdeep":"384:pMU9fYV3RrpALpZhlVrAFl7Lg4XSXK2hIjy5fqsYtjj0l/sg/quKGNtyOD:SiAV3RtALzhlVrAXgKSOW5fqs/lFqur5","tlshash":"8492d043e8776da5dcf388b7d393b5e9a03086b0c748c2025ed098d085cb5b7e9a160f","first_seen":"2025-01-09T23:41:46.265854Z","last_seen":"2026-04-07T20:56:24.536465Z","times_seen":5686,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/phim.php?\u0026hl=NO\u0026json=1\u0026_ts=81813","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /phim.php?\u0026hl=NO\u0026json=1\u0026_ts=81813 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1529\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: gzip\r\ndate: Wed, 31 Dec 2025 10:22:03 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zu3Ar3v6kiLGxr9lf6Ntfk3lJi7RcosmyANzOm5yV06p4aB1878lvaFVi4SiRz4B3YUle%2BHMU2yB36skGmXoG51qKfcY5Z5Bs27n\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b690db7ed3132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7705,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aa3cbc661a890c93f995c9fc4e210b99","sha1":"c48f31573080c0cb3ffbfbd2d907d4ad04b71634","sha256":"aaef565c0ac3c34c080258394aaff0c7030f81e9addcdc4c06f11f4d5971d5f3","sha512":"e37695e16911b8307aafb96a7234bc236fa6ad2ae5c9601ba8ef5f5348d321ca7183fc3a34fbc1e2f38f517d9a691dd00d494e179ba6b8116393158d2ab8de87","ssdeep":"96:ASRQaDWRQRak2hCRQ8HRQq4TRQuM0sRQHfAwRQfPXRQZHndKRQDcURQS2CnRQ36v:Ag4MvWc3UBciDUygcoNcACBoY","tlshash":"bcf1bd7fa9421e0394c656e2dd95325cf201064fad04fc36fa8c156c1f8dabf85e8a1e","first_seen":"2025-12-31T10:22:27.524597Z","last_seen":"2025-12-31T10:22:27.524597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsky.app/intent/compose?text=Timkiem.Top%F0%9F%A6%8Bhttps%3A%2F%2Ftimkiem.top%2F","fqdn":"bsky.app","domain":"bsky.app","tld":"app"},"ip":{"addr":"3.150.72.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bsky.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:A0:62:FC:2C:CE:79:AA:96:A0:C6:A1:EA:26:6C:C1:40:A0:50:A0","sha256":"D0:23:DC:E4:FE:E2:C4:17:4F:E1:9E:A0:D2:45:ED:ED:99:1B:FC:8C:17:EE:26:B6:39:ED:0F:F2:6D:5D:56:F6"}}},"request":{"raw":"GET /intent/compose?text=Timkiem.Top%F0%9F%A6%8Bhttps%3A%2F%2Ftimkiem.top%2F HTTP/1.1\r\nHost: bsky.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: AWSALB=hjFTBCtk1grMsLpmVOpZLm69WsUU/jgEmKXKL598v8OaVyL+Os87m8rjl2zznLJ5AztZc9u9qfwPcDck5LPQ/rdriCUgY5EaXJhkJOkrKgUIyW/2T3/+lmI80RYv; Expires=Wed, 07 Jan 2026 10:22:04 GMT; Path=/\nAWSALBCORS=hjFTBCtk1grMsLpmVOpZLm69WsUU/jgEmKXKL598v8OaVyL+Os87m8rjl2zznLJ5AztZc9u9qfwPcDck5LPQ/rdriCUgY5EaXJhkJOkrKgUIyW/2T3/+lmI80RYv; Expires=Wed, 07 Jan 2026 10:22:04 GMT; Path=/; SameSite=None; Secure\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nvary: Accept-Encoding, Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":373,"dns":11,"connect":109,"send":0,"wait":109,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsky.app/intent/compose?text=Timkiem.Top%F0%9F%A6%8Bhttps%3A%2F%2Ftimkiem.top%2F","fqdn":"bsky.app","domain":"bsky.app","tld":"app"},"ip":{"addr":"3.150.72.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bsky.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:A0:62:FC:2C:CE:79:AA:96:A0:C6:A1:EA:26:6C:C1:40:A0:50:A0","sha256":"D0:23:DC:E4:FE:E2:C4:17:4F:E1:9E:A0:D2:45:ED:ED:99:1B:FC:8C:17:EE:26:B6:39:ED:0F:F2:6D:5D:56:F6"}}},"request":{"raw":"GET /intent/compose?text=Timkiem.Top%F0%9F%A6%8Bhttps%3A%2F%2Ftimkiem.top%2F HTTP/1.1\r\nHost: bsky.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: AWSALBCORS=hjFTBCtk1grMsLpmVOpZLm69WsUU/jgEmKXKL598v8OaVyL+Os87m8rjl2zznLJ5AztZc9u9qfwPcDck5LPQ/rdriCUgY5EaXJhkJOkrKgUIyW/2T3/+lmI80RYv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: AWSALB=iN44tHi+faAKoenMjNfOUlzCqdB69LL/cmSlKaCeGOCpApgjg4ltcHilHM8VVLclMvhBd96NQFGJbjUh4FBO9MVyA5cpzEtXzSYcV28xI1KqjCQr0Jc9RdP5Eh26; Expires=Wed, 07 Jan 2026 10:22:05 GMT; Path=/\nAWSALBCORS=iN44tHi+faAKoenMjNfOUlzCqdB69LL/cmSlKaCeGOCpApgjg4ltcHilHM8VVLclMvhBd96NQFGJbjUh4FBO9MVyA5cpzEtXzSYcV28xI1KqjCQr0Jc9RdP5Eh26; Expires=Wed, 07 Jan 2026 10:22:05 GMT; Path=/; SameSite=None; Secure\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nvary: Accept-Encoding, Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/favicon-16x16.png","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:51.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nCookie: _ga_CKBLWX436P=GS2.1.s1767176510$o1$g0$t1767176511$j59$l0$h0; _ga=GA1.1.1132389058.1767176511\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 298\r\nserver: cloudflare\r\ncache-control: public, max-age=2678400\r\nexpires: Wed, 07 Jan 2026 10:21:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Aug 2025 20:03:37 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91vwOOVr5VXaQ8H03ZiCDLf5OtD8FPMslx13PTrRJX4iuWupNmV1%2F8LVfULfsFLY66tVwbaqShjA%2BdFZLDNrYFICbD3F3xo28QMq\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b690d6d2d5332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"efe04791b0e5d9edfe98a7b720cb0b21","sha1":"b99d48dc163861225c9fdb7fb1d417084b33131c","sha256":"a6f486ff284030228cdef938926c0a9d991a75bb56733a8b706cc20d6353c4e0","sha512":"f88594688790083fe26658f4ac41994e18599ca9bd4fb4b9ee4d875c739004527624d034201468689fe61295afc5134cb39161b6ffde2a4e53bcf2b5c1dbfffc","ssdeep":"","tlshash":"e5e07deba74b0820fec8c03a81115710d916f11c0574ba400e408d2094156648655383","first_seen":"2025-12-20T21:50:41.780206Z","last_seen":"2025-12-31T10:22:27.525576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/cse/static/images/1x/no/branding.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /cse/static/images/1x/no/branding.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T00:38:13.983665Z","times_seen":13481804,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"placehold.co/32x32/7c3aed/ffffff?text=Q","fqdn":"placehold.co","domain":"placehold.co","tld":"co"},"ip":{"addr":"104.21.47.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"placehold.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 03:34:30 GMT","end":"Mon, 16 Feb 2026 03:00:52 GMT"},"fingerprint":{"sha1":"F5:AB:E7:76:B4:5B:F6:70:03:27:86:D7:89:18:97:B2:47:54:40:AD","sha256":"F5:77:D3:D5:5E:D9:E3:28:51:4B:C2:6C:92:01:F2:CF:86:82:EA:EA:5C:F7:9C:73:10:74:83:82:AB:47:68:A0"}}},"request":{"raw":"GET /32x32/7c3aed/ffffff?text=Q HTTP/1.1\r\nHost: placehold.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=1209600\r\netag: W/\"309-xi4d9SBTSpdIb48/qO0OjSu2r3U\"\r\nvia: 1.1 Caddy\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7vdpsrnZ0nUlMonIVv24DbJekUaA2Jhxlez57sf%2FhayU2cMM2BcV7YKknimpnCy%2B37nrpmCxK%2FwsIyFPhbBIumobphakGEucxA%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b690d5d193b5693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"3fc1fb28f174e7cc4e1a49ca3d9b97a2","sha1":"c62e1df520534a97486f8f3fa8ed0e8d2bb6af75","sha256":"297235b6ac8421a12f3f86920938a1422e5e9f3b2a2ca527a2ab7f718d36c4d4","sha512":"cb10a0fbdf76c47feea8fb3f3b04b9170ed9fd0890bb0be222149d82336d7ede162d98a77ace6ea92aebbe25cedeb75bf9ad33812dfafcf90a9dd2ecea69938c","ssdeep":"","tlshash":"c601bd1556a0da9c4d4bc558dc7571de270fd8e4b29fa2ca23f7ab30b05b9c1ea0093c","first_seen":"2025-12-20T21:50:41.759253Z","last_seen":"2025-12-31T10:22:27.526715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":26,"dns":4,"connect":1,"send":0,"wait":241,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:49.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:21:49 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jwcjr-1765212281299-f54ecb125284\r\nlast-modified: Mon, 08 Dec 2025 16:44:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1964227\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGkqANEMJi0p2yAFASOOx0IiAEcQ4jvm0RhHXbjvSy93hOD9Ab53CKXyrq6keQSuDo0D4BupvnWftfXHzDghrGju9D0LWu39jNrtAEhflNY%3D\"}]}\r\ncf-ray: 9b690d60efcf5695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-07T23:40:05.559441Z","times_seen":29212,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pingomatic.com/ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on","fqdn":"pingomatic.com","domain":"pingomatic.com","tld":"com"},"ip":{"addr":"198.143.164.254","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:03.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pingomatic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 19:44:30 GMT","end":"Sat, 07 Mar 2026 19:44:29 GMT"},"fingerprint":{"sha1":"2F:52:1B:46:C7:25:E8:83:04:B4:F7:F1:CF:1B:7D:37:CE:D4:B5:B6","sha256":"AD:83:95:92:76:43:B9:58:DD:EA:DA:C9:40:8F:C3:BC:8A:6C:10:D9:D9:E4:F5:96:BF:C4:16:B4:BA:F6:CC:15"}}},"request":{"raw":"GET /ping/?title=https%3A%2F%2Ftimkiem.top\u0026blogurl=https%3A%2F%2Ftimkiem.top\u0026rssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault\u0026chk_blogs=on\u0026chk_feedburner=on\u0026chk_tailrank=on\u0026chk_superfeedr=on HTTP/1.1\r\nHost: pingomatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 31 Dec 2025 10:22:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: blogurl=https%3A%2F%2Ftimkiem.top; expires=Sun, 26-Apr-2026 04:08:44 GMT; Max-Age=10000000; path=/; domain=.pingomatic.com\nrssurl=https%3A%2F%2Ftimkiem.top%2Ffeeds%2Fposts%2Fdefault; expires=Sun, 26-Apr-2026 04:08:44 GMT; Max-Age=10000000; path=/; domain=.pingomatic.com\ntitle=https%3A%2F%2Ftimkiem.top; expires=Sun, 26-Apr-2026 04:08:44 GMT; Max-Age=10000000; path=/; domain=.pingomatic.com\npinged=a%3A4%3A%7Bi%3A0%3Bs%3A9%3A%22chk_blogs%22%3Bi%3A1%3Bs%3A14%3A%22chk_feedburner%22%3Bi%3A2%3Bs%3A12%3A%22chk_tailrank%22%3Bi%3A3%3Bs%3A14%3A%22chk_superfeedr%22%3B%7D; expires=Sun, 26-Apr-2026 04:08:44 GMT; Max-Age=10000000; path=/; domain=.pingomatic.com\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"98f3f8396012394f44fe10cef22f1e26","sha1":"70c9bbb3f629bc2d80ef6927c16d604c3b8ef989","sha256":"3ff582f3daea99f35a2345b808d7dc78872f55fd4948df52799711d2feee3ba5","sha512":"e2ddfbfc9f69a5dc1056864158e6144e2740843cd5f5196433d405a22452df4ee512c5f9e96c6e9706bdf9a07ee1515d6556ccbc914a911970e221937838b9e4","ssdeep":"","tlshash":"e141b79668cc0e3a01a693e3b4f4bb24e0d37684e7444860d0fb4c7b9844686bc3daec","first_seen":"2025-12-31T10:22:27.527666Z","last_seen":"2025-12-31T10:22:27.527666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":230,"dns":13,"connect":102,"send":0,"wait":106,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/iframe/select?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026ux_mode=popup\u0026ui_mode=card\u0026as=QguLXJmcpVl4m6BvRALXEZ4h62elAVEZKiLqU3KPQTc\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true\u0026channel_id=594bb8b72397c8819078a3b7475d3d67ed16e1557b14cfae4044d1fc94b9a341\u0026origin=https%3A%2F%2Ftimkiem.top\u0026oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:05.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gsi/iframe/select?client_id=580665055932-ku7u12dqnco82q4bm71uqb4dg0285rm8.apps.googleusercontent.com\u0026ux_mode=popup\u0026ui_mode=card\u0026as=QguLXJmcpVl4m6BvRALXEZ4h62elAVEZKiLqU3KPQTc\u0026bs=AdfKeslAlHOTi8WX1kler4Zxc1n5stZYmgVzbtIJyuk\u0026is_itp=true\u0026channel_id=594bb8b72397c8819078a3b7475d3d67ed16e1557b14cfae4044d1fc94b9a341\u0026origin=https%3A%2F%2Ftimkiem.top\u0026oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 31 Dec 2025 10:22:05 GMT\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-MJfoLWGjakJfptaQ7b7tbw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":277179,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"a7cd7fe6a9733b1aef54b989b842a577","sha1":"a79ace625b4ae012e94fc5cd33547528c3d04479","sha256":"6000c42cbfed36b749f3b5a573a1e2b7f639399b382eb35d3255f3a1bd588b23","sha512":"22553160a3b8b6b93c9bc835092fbf6cde8792e2e793d100a49f16672f076e64905bbeef2d315dc3c1a3b4b5d72da130ae59f3357b34dcb9ca1c0de383317976","ssdeep":"3072:bRINsYKPjF8mx15RfWrohbuySUNm9S8zB2Z:bRv8mx15nhbJYXtu","tlshash":"19446ca4b3a230339763e8b2906f400ab53f54a5e1095dadf264e9d4def245e007bf79","first_seen":"2025-12-31T10:22:27.536036Z","last_seen":"2025-12-31T10:22:27.536036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:06.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 16:00:06 GMT","end":"Wed, 25 Feb 2026 16:00:05 GMT"},"fingerprint":{"sha1":"06:BA:36:2F:71:DB:00:20:7E:63:51:E1:07:B3:C2:09:F9:D3:65:87","sha256":"B7:6A:65:78:FC:51:25:23:3A:6D:B6:59:D6:C1:56:D4:36:21:34:3D:25:55:DA:C7:8E:BB:EF:64:94:1B:50:C7"}}},"request":{"raw":"GET /afs/ads/i/iframe.html HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ncontent-security-policy: script-src 'nonce-xNYfLG_ehZwdwnXG76OQmA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ncontent-length: 728\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Tue, 17 Sep 2024 06:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1560,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1559)","md5":"e5a9d16ca448e2653cd956c3bd86f7f2","sha1":"12d7a4efe8808610c42b7275708df5b075e0d569","sha256":"68e521562b8fa02ed1137813616961b4732201aa2de7cc8d4bd45a70fda8f301","sha512":"5927767e95673dda102e604c5128810f5ef28c5247751c0beb9ff2aa210bf53b47cdcc9f915bee3524dc2af8ee6e931f43d0737193a445ba343f47736bf1223c","ssdeep":"","tlshash":"f331b1be4c60411f2d723d9d2d5bb608fa135414e445e5d0c58cf8693db9fc3882a9f4","first_seen":"2025-12-31T10:22:27.537934Z","last_seen":"2025-12-31T10:22:27.537934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":126,"dns":14,"connect":28,"send":0,"wait":38,"receive":2,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ep2.adtrafficquality.google/sodar/sodar2.js","fqdn":"ep2.adtrafficquality.google","domain":"adtrafficquality.google","tld":"google"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:22:06.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adtrafficquality.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:52 GMT","end":"Wed, 25 Feb 2026 15:59:51 GMT"},"fingerprint":{"sha1":"E4:25:76:F6:C4:FB:46:FE:7A:37:E5:D8:E5:14:75:A2:B3:75:D2:9B","sha256":"34:44:B0:C8:96:F4:D4:42:DB:58:BD:4B:C9:72:0A:E2:31:20:B1:87:B3:2A:DD:E7:6B:62:AA:AB:58:B6:92:89"}}},"request":{"raw":"GET /sodar/sodar2.js HTTP/1.1\r\nHost: ep2.adtrafficquality.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"adspam-signals-scs\"\r\nreport-to: {\"group\":\"adspam-signals-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs\"}]}\r\ncontent-length: 7188\r\ndate: Wed, 31 Dec 2025 10:22:06 GMT\r\nexpires: Wed, 31 Dec 2025 10:22:06 GMT\r\ncache-control: private, max-age=3000\r\netag: \"1747411493688989\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19990,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1398)","md5":"a8fe3ea2f81e289e6b14222e898086c5","sha1":"0e9a1227955675736e02c596906bee72bc33d7d6","sha256":"a7f65c0446b6cac3175458f6388304d0c23e70d11fa0db20920a619f1bc18623","sha512":"3bd99998aa1b5d7543775769952adc52809f861ca023b6daadf6b7d23411411a6a9470d98c7b8543573e9a6047a24e14b5feaf45e14a22d98e64d0f019718670","ssdeep":"384:dxSMqC/d0d0lxDKyqdeWFy3Wxy9cT4nGllKnnk0TEYRWjfJtncu:i0qKlYyqdeWk3Z9w4G+tFWjfJtnZ","tlshash":"8892c6cab6d2f4624363b9b1a13f100ff13eaca9d84c5464a084e4e0bd759a94367f7c","first_seen":"2025-05-19T23:59:48.474751Z","last_seen":"2026-02-26T18:27:55.354921Z","times_seen":175417,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":89,"dns":0,"connect":21,"send":0,"wait":29,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:21 GMT","end":"Wed, 25 Feb 2026 15:57:20 GMT"},"fingerprint":{"sha1":"D5:E1:28:04:A2:5B:9C:21:BA:4A:37:C4:BB:E4:7D:93:53:75:26:02","sha256":"11:38:E4:46:CD:40:CF:56:D7:CE:A5:4A:87:26:DF:58:92:54:80:79:8D:FE:8D:33:0E:9D:5E:53:C9:19:6C:20"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Wed, 31 Dec 2025 10:21:51 GMT\r\ndate: Wed, 31 Dec 2025 10:21:51 GMT\r\ncache-control: private, max-age=1800\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-security-policy: script-src 'nonce-m_qISicI-gOmElUBc04j3A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2265)","md5":"7104330e8aba1f0862bb76fd449ce75c","sha1":"e6ac5120e806147422533c139c9a3b741344b1fd","sha256":"a6a43199679d12280508116e1638c91ba73c0aeaf6473108aa7f6ba70beac552","sha512":"0c9ab21328bb36b2472b51afde6ecf31bb8de4c64670e7f86e0eb2230c79540f8eba53b72a1fa01ca88082ac1ff8579b828146ef0bd435cc036ce4b522635078","ssdeep":"6144:1RA28mx15eh1LS8t/CJCU/dnwq3pf+asOYHbRQ:1+h9l/CJCANLZf+asOG1Q","tlshash":"70345bdcb2e270315613f8b5d43f410ab076aa79f0498cacf695c6f5acb09890167f7a","first_seen":"2025-12-17T21:48:38.368103Z","last_seen":"2026-01-08T16:19:33.432264Z","times_seen":1943,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":90,"dns":2,"connect":22,"send":0,"wait":65,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:48.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://timkiem.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 31 Dec 2025 11:09:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJAa%2Bcv8srhDom9hn%2FFOe5BxKRrxaQkq%2BKjKVotMHTw8n0gRWMRGDCMoXv9yz0gDLK1jfemNoqN5PGVAyINe9CNJ%2FLGvMAfOK3iG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 10:21:48 GMT\r\ncf-ray: 9b690d5b9b7f32fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-08T00:34:05.188224Z","times_seen":95466,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"timkiem.top/trending.php?geo=NO\u0026t=1767176510042","fqdn":"timkiem.top","domain":"timkiem.top","tld":"top"},"ip":{"addr":"172.67.167.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://timkiem.top/","date":"2025-12-31T10:21:50.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timkiem.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 06:15:58 GMT","end":"Thu, 19 Mar 2026 07:15:55 GMT"},"fingerprint":{"sha1":"46:FC:F3:71:EB:62:07:8A:FB:E6:7E:FB:50:84:F2:B0:6C:58:1D:01","sha256":"26:92:E7:88:23:FA:FC:19:EE:3E:40:F6:0E:B0:71:2E:4A:E7:EE:5D:AC:EA:9C:B3:36:2E:C0:14:49:A1:AD:E4"}}},"request":{"raw":"GET /trending.php?geo=NO\u0026t=1767176510042 HTTP/1.1\r\nHost: timkiem.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://timkiem.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5331\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: application/rss+xml; charset=UTF-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: gzip\r\ndate: Wed, 31 Dec 2025 10:21:50 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAL0lVo4nId3XtApbupJNq%2FoOitkvL7jVxDpTUqZ4mZcd4S7UbAuN9mNZQfVJfsf%2FsGZ4L5GOhjTtm32WI%2Fq6Tx9lakBwBrdyn%2F0\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b690d63ec7032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":20837,"size_decoded":0,"mime_type":"application/rss+xml; charset=UTF-8","magic":"XML 1.0 document, Unicode text, UTF-8 text","md5":"3d7bd7de026339406114b6b58f0550fa","sha1":"71d67092a9e0661ee3592f841fa5bd7943caed7d","sha256":"1625ac8789aac448763435d7b2fa49d320168f382257b828dda8ff739194423f","sha512":"0b7de9b57b9dfab7168dacc98915f7af3a3529dfb8dd617b669d13086a386f1a8aa0b6a0da7de191d05fb37bbe6b64b4040ea134b0b2b87dab3150ee51be41b0","ssdeep":"384:6x1pZhG8Ov8OACSx+r2d8iBOJDRccAy9JHJKaYlhq4CGxKQZKVZdPH34EK19pcdA:6x1pZhG868tCSx+r2d8iwxRcPy9JHJKD","tlshash":"7e923f9fc49dfcd70aac3c82197e7229909e5bb5c8b07398f35b2050e96f6598134ed2","first_seen":"2025-12-31T10:22:27.542463Z","last_seen":"2025-12-31T10:22:27.542463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"timkiem.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}