{"report_id":"f2bc693f-b0e1-4fb5-bd58-d1a20c865ae8","version":6,"status":"done","tags":[],"date":"2026-01-02T02:48:52Z","url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"title":"ดวงดี789 เว็บสล็อต DuangDee789 Wallet ระบบออโต้ ดวงดี 789","dom":{"size":216208,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57378)","md5":"707f6db14ddad9d62de21abc9b00c660","sha1":"ff5c7be91ce0586716abf6b5e5a8d174267cc708","sha256":"01fccc1aec837a330415a89e4f59440975911e7db9a8a932b9238609a8a73db0","sha512":"e75223a8bb75899ea44e438dc406df118a9ad6b399ccf6288d87531d7eee7dfcefe83aaf039400c31a19c150b05666ff3f8fa3aa52bc6549cdb4789725763616","ssdeep":"3072:O523DLUYUCBYtYDkDvDP4Z5hbZ5hlIVn536XQ2nitj3Gv6AI:O523DgYpaYDkDvD2jNji","tlshash":"4f24fa737a451836312f139fd21bb70c615acea2db8df2e1f0fa809852e4f91359265e","dom_hash":"domhash56be9e04de52e5b54601f409f0d76282","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T02:48:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"duangdee789.website","ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-03","domain_rank":0,"first_seen":"2026-01-02T02:49:00.034324Z","last_seen":"2026-01-02T02:49:00.034324Z","alert_count":87,"request_count":88,"received_data":18016250,"sent_data":68280,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":3,"received_data":41789,"sent_data":1557,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-12-28T22:36:13.046248Z","alert_count":0,"request_count":8,"received_data":553529,"sent_data":5572,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"2020-06-30","domain_rank":0,"first_seen":"2026-01-02T02:49:00.035857Z","last_seen":"2026-01-02T02:49:00.035857Z","alert_count":0,"request_count":4,"received_data":136764,"sent_data":3394,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":10,"received_data":164147,"sent_data":5399,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"771cbc672a0601c0260e50ab3a0559de","sha1":"cb5254c79124c357673000e25e30855a22967a07","sha256":"9995a5f5e06ee5ef6730d2bce7afae0c8ce9a41fcb5f8ba968a84adb3e820e01","sha512":"a137fbaa95e71416ada6e8423b3fe4be04bba6793b7adc7a09bdd87a2eea9f04765b7514c1e88a94fa96092e5b16448d89b61a14b89153f5513bbcb9892489c3","ssdeep":"","tlshash":"53d0a93318a90f6626a01cc1832922a227f18204fd80c8a18a1098881bac2e7bc00285","size":200,"data":"","first_seen":"2026-01-02T02:49:16.15104Z","last_seen":"2026-01-02T02:49:16.15104Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aacf22a07f3473154075e56a27fcefdc","sha1":"ac7e2ec30585bea63105e09bf249f20e459a9442","sha256":"3880eea31c8c66dd237eaf8167f0cfa85d229a111e5d50c75a07a1a748bdcda9","sha512":"ee19159190bc43676cde0d7960c2fdce93c4c85c3772c066f6a785d6bac3323e5fce2ce17da9352b5d23bfadd6d016d88f6d5a772f102885e31693b80136aac2","ssdeep":"","tlshash":"4f2103f370a398ed48cf148a34522d16f1570d6ca885a01ef5aa08db2472e853362634","size":1392,"data":"","first_seen":"2025-10-05T16:15:06.697128Z","last_seen":"2026-04-06T03:26:17.362072Z","times_seen":7907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5c3313438386d5ae150af7ca5b0d3f23","sha1":"41c33209a465fe4d763640a1bb357582ae9fba78","sha256":"a9ee7a5c7e21a546143f094ba0215dd83e7a11c06fd741d465b1ff0ad6e40d7b","sha512":"e36fcd889ea7743d7db3b031bc5e0ecabe6fe09d94d31d3b338f06779cf8eb208cf6d5df151c9f0d29992600eae2ad3538986b382216649838ae431748d130e0","ssdeep":"3:N/BKL1XxV:eL1BV","tlshash":"f95504c0f5c070700410cc43df5154155005440150155d0170df04d417301011010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.152108Z","last_seen":"2026-01-02T02:49:16.152108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"413d6cffd13049266d02945f701e2dd1","sha1":"25e8ee6d2174c17d58329fcb14c4653230ebf5fc","sha256":"7d2d619ddbca99085158716edbfd0aecabe27c2ae03c4101a815793af93f9bd8","sha512":"31e5ccf0a0d185747b340be568b6f29cd87887650bf4902fdf0da21154de28751fcd541eb042eb06df0ca1e40d90cb518bf02bc469ed43acff226ed48ab0274d","ssdeep":"3:N/BKL1Xo:eL14","tlshash":"195504c4754070700414cc07df5155155445440050155c0370df04d43730401101054c","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.153999Z","last_seen":"2026-01-02T02:49:16.153999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efa16085c1baf7444236fb711bd43219","sha1":"6825d1b692046b2e4c575d00eaff412d40e0360b","sha256":"cba2caa5b8b4a4ed59296003c2d98508b07ab29e78e0331e2cd2f845d7e5c5ee","sha512":"b822f3b4fb48cd58c9d82acaa9b12966edc22ba469f2aa25fa253e48c21888e28726020cf0e262d9557da72a3d032f3aab87dfc530650cedb7a215e2e8cd0f9f","ssdeep":"3:N/BKL1Xs9:eL1+","tlshash":"a75504c0754070700451cc03df555d155007c4005015540371df04d4173040110305c4","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.155519Z","last_seen":"2026-01-02T02:49:16.155519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2777f6b09c345d2ab0def96b5cab9d","sha1":"10713118d9f7aa90bdce30ea21508b2e99b8b33f","sha256":"d9b268266af74b5c0834e2a519303ca97c5427c5fb7abb3b89ad29e07664be14","sha512":"77b8845daa7449a72a6365e75ae56781c82b503619f7d90ce4ba0f5a8c025b59f3881f0bd3b51570b2c3a6567a6be1e783615954d84b9fff95812e230cc8ffcb","ssdeep":"192:Cr0AcBogU9EEk7Wxcf55I/6wG5klFhBsR0PWXYpt:Cr0AEPU9EccbUt","tlshash":"7f22844a320a2b015b9bd271653da8cbd77752c8690449ccb074dfce445cf59a2ebf78","size":10759,"data":"","first_seen":"2024-07-18T17:31:23Z","last_seen":"2026-04-06T08:20:49.311201Z","times_seen":25367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05473a4199f866fee47e277ed861f484","sha1":"7ee909b426196af3fddf679b3a683d1f06d019ee","sha256":"7bc8966161fd4f0feb2a1e2b185d95bf08fe5e0148f3949e63d06d274d4b6bac","sha512":"bdcedd8fc43aa7dd1be8ba974014098c1a40fcefd0bb3c3b50bdbd8e5394eac2fc9212f7b78150aa4932e994cf2c88dd92bc43f36dc8ba770db6428152c46aa6","ssdeep":"","tlshash":"17f05c26989b19bd6267603f5fbe482a7297280f9060c101bc4cd8559f626c585112c8","size":478,"data":"","first_seen":"2026-01-02T02:49:16.15669Z","last_seen":"2026-01-02T02:49:16.15669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-04-06T06:39:20.174912Z","times_seen":10219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-i18n-js-after","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f782e25a550fdb368cfd178da173a6","sha1":"507865b3cb352e836415a7bac4f90165ccf50edf","sha256":"aa3feb3646ab23f111cdd159f1aec5d494bf49eaa0d4e07ebee41ce8a630b5d8","sha512":"69ef488e353f1da297d7ee970050e2f3caf4224655a527f99eda8345fb08186b67f908aa2a26543d184b33fc025d3dc52731fe79a275d8d7820cc0f5df282db3","ssdeep":"","tlshash":"601112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":942,"data":"","first_seen":"2025-12-03T15:04:40.574414Z","last_seen":"2026-04-05T18:50:35.873972Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11001e144ca3373978ba1286ee50d065","sha1":"591448e8fe188836762685fa5035486c85ede240","sha256":"540f105f92b01246c1c5d673c844b17e2a586bd8636f6d4506afd64169d7e9a0","sha512":"8ec4ae00a0d1af496a7b5182fa1256e9e30ba92bc946a269c3eaba5bf55fe91d14032731e4fa59b3ca731df3cc026058498f8c1dc01b4c53b0fe4c03ec944b98","ssdeep":"3:N/BKL1XS:eL1i","tlshash":"275504c0754074700410cc03dff35557500544005015540170df0cd41f3000110105c0","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.158593Z","last_seen":"2026-01-02T02:49:16.158593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f8494c9e65447e740bf5374e5a90cf6a","sha1":"03df05475950d13c9ce320c147512508c2ca6f78","sha256":"cd00d1ff1a2a5b99edb613d03a9e9b2f35bd2af0466b3c8aa32bcf8e4503f274","sha512":"18046d5d4c2e9a8f321d5199657b73ef5a751f814bd569d986a92aac303155e15f24e0850394be378aae28610d480b9e6f4a1e568cb1e0977395494775f62971","ssdeep":"3:N/BKL1Xsd:eL1S","tlshash":"b15504c07540f0700410cc03df515d555005c4405015540370df44d417300013030544","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.159538Z","last_seen":"2026-01-02T02:49:16.159538Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15b648525c3c855d24bb0dc2f2137971","sha1":"8d7026d2089a135aa1c7dcfa5715dc35b6437d74","sha256":"eab5bf435b601d232d0a9f08786d544348c999b99c3d8152fc28680790a6d1fb","sha512":"2a155a2db1913470219af920596d92718695c660c261895959a7fe9a9beba7c42beefa1817ab3718acdcb13d68706c0c402a0af37206ea51b640157bd7cea521","ssdeep":"","tlshash":"2861785535966c35ea8f418bb40f010e6e021bfaad0570c9ba69d8d69af0fc73361b70","size":3317,"data":"","first_seen":"2025-09-09T09:02:24.899682Z","last_seen":"2026-03-21T10:46:49.141252Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/?__cf_chl_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"16e2a0ef04ff57229410ac89173c1475","sha1":"cf4a7ec541eafc92683acebd9c14c53f244edad6","sha256":"a90993a2cc174fea91ac03043c2d837fe4a36eeeb40962fa7ed4e89ffbe6b9ae","sha512":"3840d121c29fcec863583ad937a06ab77b2bfeb46fafc7196cf2cbe1458fce27b560d3188b315964b68a4a9883ba04092f85458de91690484ff57c60d23779af","ssdeep":"3:N/BKL1XI3:eL1Y3","tlshash":"165504c0f54070700410cc01df51541550075405d015540170df05d41f301011010740","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.160464Z","last_seen":"2026-01-02T02:49:16.160464Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-06T08:08:39.124429Z","times_seen":219477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-06T08:15:15.650838Z","times_seen":67381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2913df4a471b856bbc83d07b1f520872","sha1":"d2ddecf34166b20067861db8d22bd939af3b3310","sha256":"45f72b4b68f592e6aff80b8245fe8aa2156e0b960eedd246354ad66b28372561","sha512":"bef27d2e08e67a9c0e1216ce0e661c9033215cccf0d6860fc07d4ae9233204f489b26de6a3310b24bcabfcee07857b76e91f0fe53036b377a45ad082f9336a52","ssdeep":"768:e/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:gt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"b713a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-09-09T09:02:24.857486Z","last_seen":"2026-04-05T18:44:52.951028Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/table-of-contents.339d2b8b27914b2a038a.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"366f530b827d1b10439f30793a8b2901","sha1":"91658990151b5b98ca6aecfe5bcc9f73f0d0af1e","sha256":"2855ab5a44a5f95fa5998d3abe56582d980a5e6102ae7341173bfc64fc5d7c0e","sha512":"2eafa627650bde18d114b3aca863d13731f26cdb14b41ce5d97ef7254e4135141b675521aad2aa89fd58b608265b2f17be718ce88c7068dab286c3b8bd8c2fb2","ssdeep":"192:hvezxdx/SwZY4L/lhuBkZgJBZ8M2I3AmJZZ4BB3ores+QhmDaL/vItRte4una:hC0wZY4L/lhuBkW8M2IwmJZZ4BB3orXg","tlshash":"210272273042acb915ce608f74171325f60556acf402b8eeb9b94acb66b1dd533b837a","size":8362,"data":"","first_seen":"2025-10-01T09:17:23.393949Z","last_seen":"2026-01-02T02:49:16.098138Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9537af0a0c37fb2c94d0c2498f111cb7","sha1":"c27f9359bc612d2ff8c6bbca0596bbdb95a07ad1","sha256":"fa6cbd5ab640cc90b242cdad742f0d8376cf2d6148eab0c968666ee67c7ac6bb","sha512":"e7fab233337a1796dc9b607c8c79f9344964a9b5b61a21a35a4f36fd4df08af3e7becfed5291461ec1ce4e921975e6459a3c2504d48567e5f8c35ca0f7ae34e8","ssdeep":"1536:mr6qrs2rA1b4txdNL3O/hwBuQS1D4FfAc97SUh2EcZXiYjsUpCJNfafgMvB25AAb:odDA1iLUwBz9Y22Fjs3NCfgI7t1czE2","tlshash":"e414f9c938ddb5de127a7039102770eaf26a78d474084c0c9561b9fc78fa718a366ef9","size":190474,"data":"","first_seen":"2026-01-02T02:49:16.161402Z","last_seen":"2026-01-02T02:49:16.161402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"185e6e469d13572bea3fd3aa0361df71","sha1":"b9ae0b635d0b68287d86d5c035d848b8d8edc423","sha256":"7abb8fdad68c0878e75049c189985a37651ca765eb840dec7c3b1d5c230d8d89","sha512":"f97793fd48947790f187bffaa4955b6a80de39924e72249debc30efc28796c589b70b2ddb474257149c08443d4d04776ea43633e84e471ed697564e0314ad3d6","ssdeep":"3:N/BKL1X9S:eL1NS","tlshash":"2d5504c075c070704410cd03df515455500544105015544170df05d437300011010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.162496Z","last_seen":"2026-01-02T02:49:16.162496Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-04-06T08:09:38.940531Z","times_seen":123488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f054ea9deb948d6a017442bf9c3ab33b","sha1":"da3a1da0efc5ae92f5318cc7b4459aa05ac443e8","sha256":"9e153ba271dd2cdebcdbd6f3e4125a8c2bf7e7a3bbb77902c875dbf6d496a9c3","sha512":"8195566c65832501fb519078a8d7f965fd412ae4fb93beefda9b639892f79119aee5098153bf18cf8fe7ceaf86c822e629889f0c40ecca05cbc1a4ed0b620bba","ssdeep":"3:N/BKL1XZWRn:eL1pWn","tlshash":"5d5504c0754070700514cc03df5374155005440050155c0170df14d437300431010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.163889Z","last_seen":"2026-01-02T02:49:16.163889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"985c11b9787ebde6aab61c81e475cb5a","sha1":"fe977cf6cbbb8682452fa6040ecad44428aa3084","sha256":"ed06bdf76dddba751c45d29cf59711cb0776cd741c9d32023b5f5830b2dfcbb1","sha512":"c8151b7243ae516f164c86d528c4d8815c3acad76f0c8470e1f62804bd50e36dcf18ba50ed98fa5184c32447ea6e674a83adad42cc115de00a4b9d0e24d6e45b","ssdeep":"3:N/BKL1X7Q:eL1LQ","tlshash":"455504c075c170700410cd03dfd1543550154c005017540170df04d417300011010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.164962Z","last_seen":"2026-01-02T02:49:16.164962Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ceab075b3ef8eefe5ad94b5f624bffad","sha1":"0f8eadaf5e7e8db5e275f8016eabb9acefd12b3f","sha256":"06db95f425823562735a1aef1f91aa536cd241b7237cc8d791d0e95a682c5e2e","sha512":"a825e8504a1951730f3c02e63426a68275d7b72f0f37068ce638bcd6a1c0d8ee224627d26c8185d0242394723c33d21339d609a63452163c298aeb122ae603d5","ssdeep":"3:N/BKL1XnUV:eL13M","tlshash":"ff5504c07d4070701414cc03ff515c357105c4005015540170df04d417300011430540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.165894Z","last_seen":"2026-01-02T02:49:16.165894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"637f14f2a76b16884d9d9ea49f043a42","sha1":"f7e50ec72ba6f6a1041e936a959b52e5e0308eee","sha256":"d23bef9e0e0a2b6309fc8f2b9f6dfb11ecc9d5d32182c7c9c78518a0b00ff060","sha512":"4f6714ed4d9c075c0e63366f59cd6f95c6cc46d3c76d4ccf195d4758c25fbf89626bff8abfd0e9038e2b2001da8edb11eaddaca968a4767bb25bea1c348d188a","ssdeep":"3:N/BKL1XbW:eL1C","tlshash":"8b5504c075c070700410cc03df51543750054c10d01d740170df04d517300051010550","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.166812Z","last_seen":"2026-01-02T02:49:16.166812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-04-06T06:39:20.215617Z","times_seen":10225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-04-06T08:15:15.655214Z","times_seen":68340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-06T08:11:27.968427Z","times_seen":134300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/?__cf_chl_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-04-06T08:09:38.940531Z","times_seen":123488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/0726b2d81686a5392236.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec70d312412146292973f6e51dc90f3","sha1":"9c897aa10b109261b67dec86576b73fe5f753b35","sha256":"89b3591d4f83b5225de19790fb631783e6c8fee779edc45db94db6c83f8920b6","sha512":"61b50a9510f6dd25f87e62af140d14d8bb1764156edd0fb5c00561c4e90fbdb780d1dc25ce0a2a247e1337a60fe2e9ffdcdb675b364cf0592ed7eaf393cf5b7f","ssdeep":"384:GC3dt9cJvGbev8/UMO3C1ChYdX5DE9h/ddA03/0XIjdwryFGFFQcAV1km0MFzpGE:D398GSv88MOS1ChYdpY//ddA03/0XIj7","tlshash":"4ea22add6c1275b69fee81c9907a160ca1bd114e740ec0a0e2cddcf9147bae96067b2f","size":23229,"data":"","first_seen":"2025-09-28T23:23:54.643984Z","last_seen":"2026-01-02T02:49:16.081761Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efcf2fde783d","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"172.67.135.86","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"956e4632d44e2d49d11c3cb1f54164b8","sha1":"168afcf97dd11e96a1f846a26ed3d2f5ad5bdbf7","sha256":"c16aff0cc4a8589bcc7e96081993dd398167a5c0365ef102ce542bd29ff8b916","sha512":"678cf54fef73b4490a0bff3dfa37b375afbd73a7b608a0760ac405b36f433b087f590dcb497d1e7b75d2dfa0b8533ee3f1544b59fb158022207100b2a959b010","ssdeep":"1536:iCmley7+PHbHASjM5K4JkWWmsKq6MiCXDmUMF52/tRmNMnNB5hwZZAJEZ2:iT7k759K2iyictRmNMnNB5hwZZAJEZ2","tlshash":"68c3d8cd3899745903762068112b79ceb2bab8c474084d9ee570bee47cd2b54b277ef8","size":118707,"data":"","first_seen":"2026-01-02T02:49:16.144582Z","last_seen":"2026-01-02T02:49:16.144582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b079c6ee5291693eb28ba996d74cc287","sha1":"8b8da32c8f99ef610d7f0fb7e0027b4b27ddf73f","sha256":"4cad699eaa0f61d9007a7c87bc78d30f4b5796b8f6e62aba886e67e518812d35","sha512":"e0d181be00e2d0470170d6f89aaa6cf6d81dac47f8fb24ae3dd8f6fde38c2a68fa3eea2de909767660ab03ed30cea50452632f58dea9e0bc5ceb0dab51ad66db","ssdeep":"3:N/BKL1Xfb:eL1z","tlshash":"6b5504c0d54074705430cd03d75114355005440450157c05f15f14dc17300000070543","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.167668Z","last_seen":"2026-01-02T02:49:16.167668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/wp-emoji-loader.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b67e3f871575c4e12152c0414eb3b48","sha1":"257ffeecf6cdd6b7fc22b91c06ff7cb66f5822b6","sha256":"5733dc0acf199797c757bd1b23acbaf17f60e977acac9ad4ba9aae3087b843f1","sha512":"ea0273fe0baa0191d6fc8728c97471275a1dd5c4f338fd6bf09d3d79e62d6fe9c03e0b362d7ae249baeda541571c091b1422334e4fa9d2b7630c616c73dbf7ee","ssdeep":"","tlshash":"4281869ae77a3cdbb2f900f2697e0d47eb614435d6c8d438c9bda3141cb5893c274a46","size":3828,"data":"","first_seen":"2026-01-02T02:49:16.16854Z","last_seen":"2026-01-02T02:49:16.16854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b601c48abe8dd9b5a4dbc22df8a6407","sha1":"9a007fa866614155e6f4ac2f232b1dbc5e044011","sha256":"ae9f2ca9ab607246d31fb22b978cd3fb424f2fe7363eb2fa48814f336e08ffdf","sha512":"84ca6751800f24f2bd58cc775427ba2d37023a1ee3b72cfab86b6c331379413a2f33db217539f83ea0eb057453a6c6d20948d1fc0da67ccff1da616ffcc96787","ssdeep":"","tlshash":"5af05c269c8b19bd6267603f5fbe4829729b280f9460c101bc4c98159f626c585112c8","size":477,"data":"","first_seen":"2026-01-02T02:49:16.169476Z","last_seen":"2026-01-02T02:49:16.169476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/?__cf_chl_rt_tk=MtGKc9Q1HI4HVl_As.ooLDJ0Gb9ztliLCkqShKHZkN0-1767322099-1.0.1.1-UCb_NXisiAFd.Kk5jbE5KqjUhZKKpHiq2nJZmRt_lww","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e5681dfbc8b51a36ae3ee3d7dfac54aa","sha1":"692321245c0b8fc9d0e09ca22e69b6b46b8ff123","sha256":"32bc7ec5e2f29a889acf7125050f8239eb96a2f3a6ed3d757b793068530cf7b2","sha512":"0a53f1d64055d6b007a65c0a98fc867ffbd19e2f6955a167dbf5e9a7c3d03e39b3740beaab931532bcc4393d1df032762593474336c3e7bf26c15c7838d7e289","ssdeep":"3:N/BKL1XAQ:eL1QQ","tlshash":"3e5504c0f5c070740410dc03df55541550054c00501d740171df05d417300011030d40","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.171098Z","last_seen":"2026-01-02T02:49:16.171098Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6a0d8d7b3e0afbbc0bbb417dcc387b","sha1":"0b38c782da1c8ecc6bc7e854f8841fb9d2c86e35","sha256":"f36adc07db49e73c3fd3aeb4234d270725f07719706dd28dfc09657f2cffe9d6","sha512":"e0963a8c2de54ca9a29d2f3fb0adf54946172e11589f0da3dafbf603b9f38c7a4a8a977465b0a9c32da9d4127d916e60c390dea1e17d55b3edee0b760401135c","ssdeep":"","tlshash":"d161ba8e33145e8342931336d23bab4b7d3180d9640ad51dbb39acd83a2c93961b69fc","size":3428,"data":"","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-04-06T08:20:49.24871Z","times_seen":40193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/elementor-pro-frontend-js-before","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c58bb8a76f6db0d603d5dfa6fec0965","sha1":"bda7d7e018b4d9f537a8807bab47291b2395a6eb","sha256":"924b427477304eec13bca1a9b84866da5fe01b359ef4ec1f4275c7ff61c242a0","sha512":"f8ffa86f9cfd57fa43fd1dc8008ddda11f75a343583a61f29641cf91cc8246437bc1d456348cba434908ec0d821903a7825851413ed847b6e6cfe1f3524d7ce2","ssdeep":"","tlshash":"a0418a67ee254e2457aea6f862ca3eaf48c00332d9d4750c229ae46501fbd9cf0452e7","size":2203,"data":"","first_seen":"2026-01-02T02:49:16.172802Z","last_seen":"2026-01-02T02:49:16.172802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/?__cf_chl_rt_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/?__cf_chl_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"68cf7aac6f6f2cb011cc84673a416841","sha1":"6f81c6a9da3a40f946eb09a03962ddc871ebdbd5","sha256":"fc73ce7010f92a6989db2f92a27bacc71950cbac2ca78b4cc02ad6143881488f","sha512":"c68112ec08edf672a89c7645e70c2c722c236e8d05386aa68ec6233275dae5c5035b9f119272a650ab277204acbdfd1bc3512dde4076829412bdc3af5793a8f4","ssdeep":"3:N/BKL1XiQS:eL1DS","tlshash":"cf5504d0754070700430cc43df715417500545045035540370df0cdc1f300011010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.173755Z","last_seen":"2026-01-02T02:49:16.173755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"881df16cd1fdfef7256f2387c9d50c51","sha1":"d07fca5b0856086954b67713edc840373effc3c3","sha256":"ec43dfa84583f25fa9d0728e19420cd945180899c4f2f95114998eee3bfc4600","sha512":"294da24dfbe8852aae6eddf92f67ef1c225794b99385fa41be150b0449927e0f47042e55d91936a997009ca050e67bd55c039639d11f50ce4a730069939c2b0b","ssdeep":"3:N/BKL1Xf5:eL1R","tlshash":"935504c0d54074700430cc03d7d114155005440454155c11705f14f41f300000010541","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.174796Z","last_seen":"2026-01-02T02:49:16.174796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b5f94f531ed5528e032832424e397b0b","sha1":"d1b47244486a50fd6af699e9ce63eca06969c1b8","sha256":"0ea11c8ae547124fb16741109fdf4b6fec0d9782b0b1ab446667de7443db777d","sha512":"ef34a4c857c2d992f7d2f0c883bc11a7f34a0b3503ee6bf1e656ab82d176737c0025906a4d3b0cc7f276afa28896cde1448ac81c7600862d6f1a86afbb634a0c","ssdeep":"3:N/BKL1Xw:eL1A","tlshash":"9d5504c47540f0f01410cc03df517415500544007015540171df04d417f00031010550","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.175803Z","last_seen":"2026-01-02T02:49:16.175803Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-06T08:08:39.153489Z","times_seen":176891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efdeccd4c272","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35ec07ed06e57bb16c96166bf5fab1f4","sha1":"104041e4b0d1a619c31ff6e1e2cb3b4407786ced","sha256":"3cefa07157445888d9cf42312f8ea0b8a9995ed36b7cbb2a86106f04e87462f6","sha512":"bb15715e0c4f32c3133b9aaccc1986514b6c90924138471eb61b40f7aeba950489c80dfd9c27a34675e6f6aef08888419875e610f0423db28fd774ef543e795b","ssdeep":"1536:iwq3zVGN2ONgZRNLdQD+jfFWmsFTGGaiM96JkSrUCDt1wPZhnDo7ylWKlBesoM/:iyN+ZFf49FyGaf9AUCti7070Ks3","tlshash":"50c3d7cd79dab55913722038102b76deb2babcc470084d5ee520b9e47cd5708b6abdf8","size":129350,"data":"","first_seen":"2026-01-02T02:49:16.149202Z","last_seen":"2026-01-02T02:49:16.149202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16ddc903898a7b188dc38049c912b91b","sha1":"5d812935166114c032e1a644b4321d59e437abfa","sha256":"94fc33dac22e6da4a8c988b636f6c937644208dbfe42820a4acd97162479382f","sha512":"cb87d2f95bff3d1f8984f61f2422cc68cd19ef047325b73517ca61db92409ca8385a596db9e20a90cc0a326d04d03f4834b3560c7d5201ad399b6451d94200b5","ssdeep":"","tlshash":"76b0124027a12000c713b034884bc804f118038220990508745963700f0001e45795ac","size":87,"data":"","first_seen":"2025-06-07T14:39:56.594955Z","last_seen":"2026-04-05T13:13:49.155019Z","times_seen":4419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.js","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"37d584a0c4c6417b8202e1ba1dcd669d","sha1":"924c9ef817e07dc6cedeb75d0681a47a0744e46c","sha256":"d6e4a56dc9b760f4aab10fa9df737523826bd80205b5ba03cb8fe641d488bd5e","sha512":"ed09e5d96a93ac3a3a7d89dcf43c51b3ef93bbd31fa4e68a2a25f776bfc0bad69282ae8ea0f65567cde7ec123efc912a74b62a80cc1615430c4584839cd54a1d","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX1pM4llTSRDgF+RQz4KytVoXIl7IC4FCQaFLa:AT+Z2fuvIlQsKyDUIlSFv5","tlshash":"7563c6ce72c3753a9bca6074a03f114ab2799daa1448c4b4e629c0f53c3891da57bf7c","size":67891,"data":"","first_seen":"2025-06-12T03:16:41.165178Z","last_seen":"2026-04-06T08:29:30.065227Z","times_seen":6154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4ee2963fb708143602356938de81242","sha1":"980a8a068ac3939456967b20fe368393e4a9e241","sha256":"c0020e06a3e166d652ca40445fe23c11c64f04706263958ea171a3b6b1be3b7c","sha512":"fe74ab2a1143bb24470efdff6fe84b5fdc543230ae0e370c0b99c671abe66b65eadd09231451e56b98e11b6ffb84dedddf5db857f1cee162c3001ca46f175f4c","ssdeep":"3:N/BKL1X8n:eL1M","tlshash":"9d5504c0755070704414cc43df51551550054440501d740171df04d41730c051110540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.177675Z","last_seen":"2026-01-02T02:49:16.177675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-04-06T08:09:53.407827Z","times_seen":249465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-04-06T08:09:53.42038Z","times_seen":247125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3afac21c97306c2e58c392037d409c05","sha1":"376f9557b0c286fca9afa1a1b662e12165132010","sha256":"e8398de3a1ed9cbe5c95713c11a4e7cd4241481a8aa02f14c9bed1e1e28fec3b","sha512":"1a1d97d62e534607b648f1b7c82ff36fbb25ab0f1fc56eb162c9deadb7507a65854eca7cf233f4a708702cfe56a0ffb1b2a71fe52869c9caee68c8f9e727b6c1","ssdeep":"3:N/BKL1XDd:eL1R","tlshash":"5b5504c0754070701410dc03dfd3545550054401501d5401f0df0cd417300011014540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.179606Z","last_seen":"2026-01-02T02:49:16.179606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a47a172f60bff3024e0a69e85b533bb8","sha1":"fab06942dce060846c43e1815ddbed3132689c43","sha256":"0a487cbc56a7e7a58410768f92905d3e99caa9bfb8970823ea7f4a752e8d5985","sha512":"b57db2b220c9448ca7ca26af187265513f93f94633c3dd0632d461fc3c208a65dcb5e14d7654ebe2746562960eb469265592429e9e160c1198a264f9f5ec5d23","ssdeep":"","tlshash":"0811f04dbfa57472633120bd5aaf121bca66f8c314c11f06c580c9c5bc9895464aff75","size":1099,"data":"","first_seen":"2026-01-02T02:40:00.741809Z","last_seen":"2026-01-02T03:27:35.800534Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3143353ea18ee556b5ebbe05fd46b30","sha1":"7933ea0ca427d22c191eb74edccb6d6376fe665e","sha256":"9f9d0158099c4738ad6b7ccef2c0b1b40a4d94f7b2cfee3530eae6d7416192ff","sha512":"6f82b200e9a047b831df8e26f9d8f484b9edbfd0b82e8b5ee137cb61cc2dfa43a09298e287b8d8612797fd3614fb6f1afa9169d407ef8abd414c62f3a0caae86","ssdeep":"3:N/BKL1XPk:eL1fk","tlshash":"045504c0754070704410cc03df555455510744105015544170df04d477300411010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.180901Z","last_seen":"2026-01-02T02:49:16.180901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ef7bb94e1b0aa63c9f778a42412534","sha1":"ce144fb3b286c652bf967c582c8af3428d990424","sha256":"48705ee179035b680fe0318ea580ec827dc5c734194e6a92e21942c837be1f58","sha512":"27d001baf128fd3a18d024aa8a29826def2a78491d65a74afa89a2cdaa04069fb7d14fc988c738c897f14aeba40a39057e59bbe9ed2593d1fc2584ba1d05953c","ssdeep":"3:N/BKL1XmBn:eL1k","tlshash":"3b5504c0754074700410cc03df517c175005c4405015540170df14d417301011130540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.181812Z","last_seen":"2026-01-02T02:49:16.181812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/elementor-frontend-js-before","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4da6c045dd4342ba765b35044427ac77","sha1":"4636c7e5dd147b6234693896e1fb0bff2cdaef2d","sha256":"15171a597aec32eabc8c76bd2c2e3d961ae85d8750b7b7ec368bf5a074b0ef58","sha512":"5545317aef5a3c80ae4c2e4d3d252ebab8e80a3bbe294f947471b772506fc2edf7c4395285b32c6eb4d59f8f4a4e9e7866920c3a6ae33510731d0f4c09fc5a57","ssdeep":"","tlshash":"42716365f604d97a43d287b43a16be16796c0921cc41f9d4f0bd446c10bda292a8fecb","size":3754,"data":"","first_seen":"2026-01-02T02:49:16.182665Z","last_seen":"2026-01-02T02:49:16.182665Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-06T08:15:15.634885Z","times_seen":109269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ed6e6a15f4578cb668163c21d1e16dd","sha1":"67dea4d41c62a89204e5d25797003af8367f17e4","sha256":"81e4e9ee1a02ee36ad9baa8c467e5e73625da353d4878bef20b6b90db9368d8b","sha512":"8d7ab818556814dc1447b50a8c43d3d7274478c0cfdbb8041bf023ee1cd56ef4df06388c6fbb33101a00fe138241106817c41413b20236d5799f1c7615af32c3","ssdeep":"3:N/BKL1XK:eL1a","tlshash":"e55504c0754070700410cc03df515c15500544015015540170df0cd417304011410544","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.183465Z","last_seen":"2026-01-02T02:49:16.183465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48c9e3da44715e4b6bd51ff5035dbcc3","sha1":"ed38f91e839e05e97ce3f18a43db61f529e3f70f","sha256":"249256751da2459c89838d26b1ff21b017cb7ca77fab474eb93702fab53afeaa","sha512":"c6883b6663eec319135d6567771d7a4f0e8dbb0af97bcbf60a3670dda38f2c57c1867d1384ced337506c235ccca9313f755f4ec7fac224319d3bc55e6b4b5942","ssdeep":"3:N/BKL1XIn:eL1Yn","tlshash":"395504c0f54470700410cf03df515415500545415015540170df44d417300011014540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.184332Z","last_seen":"2026-01-02T02:49:16.184332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51ab0272934fdb0913a722a94e7534f9","sha1":"05d3935cb22e1fc297b85111b8f7e64168baafc3","sha256":"085360d9db88774aa108f9ab9c568d14ce35c3907551597908d7caa2fc735af2","sha512":"7bc74e88dafcc9586242995f78c33571addeb1f74f36e182b903898b507d9a2a46826c3c074af571c1297c8680b1b4706c1e58b1183a35c50fe1ee55581405bb","ssdeep":"3:N/BKL1Xqn:eL16","tlshash":"905504c475c0f0f00410cc03df515417500545405015540170df04d417340011410540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.185175Z","last_seen":"2026-01-02T02:49:16.185175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5232e48f76e82636d53f41a2418adcbf","sha1":"a8aff03312daa030e930375d5f44e9179d335b20","sha256":"f2db9de47ed614f0249e41dbc7bed787d2f8561ee6b3188bc77a9292c39b1268","sha512":"e2fca1a91ef53f39ce84d1d13a12c53b5ede4cffcb7fdce4ee110292bc17eaa1bd288b31acc54cc543ad7c68fc755eb44fa179b98803ed3a1b91c26112d879fa","ssdeep":"3:N/BKL1XC:eL1S","tlshash":"cb5504c07540f0704410cc03df515417500544405015540171df04d417700035010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.186055Z","last_seen":"2026-01-02T02:49:16.186055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d1965074516e4cae135b5a1b7faf9dd","sha1":"c76e1ae1611033b2f401fafee19438f43198427f","sha256":"83cc7bd65f572be77ed1411ae2876f3a70c74e495e6461cd503c59fe149f45d7","sha512":"ead406a1e0d8a5bb821d5493d3aeb4cef9b2fd62f9872eff4fd2bb3e7eb8c9ec916c50f0b3c49ba45ab269ca5f5c0aad5227600690ec98626b26c00640008d9d","ssdeep":"","tlshash":"e9f05cf43062987a9d5b45c66c47096df9581cbad601715176f7086023a5fa433586ac","size":448,"data":"","first_seen":"2025-10-05T18:41:07.825327Z","last_seen":"2026-04-05T03:24:40.109567Z","times_seen":1214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.js","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"37d584a0c4c6417b8202e1ba1dcd669d","sha1":"924c9ef817e07dc6cedeb75d0681a47a0744e46c","sha256":"d6e4a56dc9b760f4aab10fa9df737523826bd80205b5ba03cb8fe641d488bd5e","sha512":"ed09e5d96a93ac3a3a7d89dcf43c51b3ef93bbd31fa4e68a2a25f776bfc0bad69282ae8ea0f65567cde7ec123efc912a74b62a80cc1615430c4584839cd54a1d","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX1pM4llTSRDgF+RQz4KytVoXIl7IC4FCQaFLa:AT+Z2fuvIlQsKyDUIlSFv5","tlshash":"7563c6ce72c3753a9bca6074a03f114ab2799daa1448c4b4e629c0f53c3891da57bf7c","size":67891,"data":"","first_seen":"2025-06-12T03:16:41.165178Z","last_seen":"2026-04-06T08:29:30.065227Z","times_seen":6154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac316f6fe853f8b3ac5d299d229bb888","sha1":"6be5bfe84be89b53bce892237fef18631278ee94","sha256":"d956a13b3731d5200203f7b62eda95aaf211d7a69bb7ee51cd9320272492c746","sha512":"7160c59fb3ce8c859ba74ddf4306c977f2a37d2704344b7930d8428e3338d7058216b62a78eec9dc05e7a74d1df047f52d0361e6224da0729378594246b93921","ssdeep":"3:N/BKL1X4Xd:eL1m","tlshash":"4e5504c4f5d070700410cc03df51d4155005440050155c0170df04d41f300011010740","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.186984Z","last_seen":"2026-01-02T02:49:16.186984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a86acf6800bb0556f2144cad41324fff","sha1":"b627a24b99c91e47a87cc4f0d4569e5fb34cb994","sha256":"d7dd2ede68229391109acadf46baf9d271a348276cdc30b0fdc6c0d2b42bffca","sha512":"8a712292b222c37c2f3fdfa83f12e887fcbb06be03f0627c90ed7314e836948922284b594ad2025a91d195296d70bf30d29728a4c75c0eb11276bf88b5d14fb9","ssdeep":"3:N/BKL1XMH:eL1E","tlshash":"195504c07d4070704410cc43df515417500f4400d455540170df04d4173000110105c0","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.187896Z","last_seen":"2026-01-02T02:49:16.187896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-04-06T06:39:20.214002Z","times_seen":10990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-06T08:15:15.595894Z","times_seen":110472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8be6a81344a1182b9bdc4c3a46f450c","sha1":"3cc8bc6e26137a4f2b4da5df18ddab6667b21053","sha256":"d71fbd9329a4ab8d3180820abf685d192a363a7babe4183a24fb2b8359a09ab2","sha512":"68d9e974a87db9c1d656512443b9cb76e1f56c8de07d5b671eaa4cdda69d4d8e65619189f94accdd28adbf3fcf1ffe16e628128aa3256a85394595ae00f649c5","ssdeep":"3:N/BKL1Xb:eL1r","tlshash":"275504c0f540f0700410cc03df51543570054c005015544170df04f417341015010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.188685Z","last_seen":"2026-01-02T02:49:16.188685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3688fd64c409264431201fa55a828e81","sha1":"2b7eeefaa1edf3a7621f7576b35b01c895ef5367","sha256":"944433761a880eab1d567dd5389499af76aa03582c82a8aa88838e3c6c2134c6","sha512":"1393fe2f189899d68717be994820d19a7e89660ea5cd90cf4a2d3dd07b41c95c2f63a3a0833d2407f16be6a3eae698ab549eac52d4ffc82bcd2da0e4e46da210","ssdeep":"","tlshash":"bae026faea5a457101e6a1237bce739e293665a3a92a4c402899ce806838dd31126ed1","size":333,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-06T07:58:06.747392Z","times_seen":33003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T08:11:37.439648Z","times_seen":642589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db4e19f6aea53de7eda52c2452488408","sha1":"25aa85396debee444afa33096aa137cf354dac56","sha256":"b33e9228667fed7daf64f6f440f96c5af2b4f776b3d904195d6332854a9eee35","sha512":"49a1ec8cc4b7b4daa176e9303b69c490dde05a1de2d3d277b477436b66166d64eccaa08b7217a5d71b2e4fe2df82ef26057a5805d4610aa6113b1ffa02fb0b53","ssdeep":"384:Yxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Yxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"31b2d9053163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","size":24210,"data":"","first_seen":"2025-09-09T09:02:24.870444Z","last_seen":"2026-04-05T18:44:52.966334Z","times_seen":1124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-04-06T08:09:53.415419Z","times_seen":246665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.10","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc45775120bdf2338ee63122ac4387d1","sha1":"d7d95f7e1778736060ede956f40b275223f75ea6","sha256":"67972f042a4b627bcb3a54237fc5c350eacfe8f5bf4845adeff21614f17e4a06","sha512":"d0912e5569f7a982d0142cd252ed8e73f8da8158bc58f05a35bf1c854c0402bd3fcbfcb31920eed70f07319f2ce40d8ca0ce904609b4244ef9691c661604a00a","ssdeep":"768:uYEPx6KoYcFDTHjkkoWoCo9or62RcjC5LltbmxPE22Ve3rTX6VzSD0tIzQ6IFNd1:uYEPx6V4g62Rcj6lBmxPEyydSLWNdi1e","tlshash":"59b261a663102a3604fe17e7f5daabc57671109ffa0944111838cc6e19a8fd352f1afa","size":25544,"data":"","first_seen":"2025-08-20T18:00:41.42209Z","last_seen":"2026-04-04T22:57:46.840226Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/astra-theme-js-js-extra","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d74170069207af502b79cd46eaf2c0fd","sha1":"315e82b3bccceab4e83bf258e717ccf9828fea7a","sha256":"aea04aa2f9f99ea2c8168c9557d76f46f538e9f854d20223a3db4cce69e48e67","sha512":"5f0fdf32280e915df8b19cedc1af621ea3620c685b08551dc8d715d8d36b04c825fdda29aa6938d91d4ba5a88b35b1284ef76d916f6cef9d41e338acc802b99f","ssdeep":"","tlshash":"ef11a710c2d21d0176db4c7250118f64b0fd9190d1d4f09d9a7c494862e6a1a1768109","size":1042,"data":"","first_seen":"2026-01-02T02:49:16.19057Z","last_seen":"2026-01-02T02:49:16.19057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-06T08:08:39.102109Z","times_seen":148294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-04-06T06:39:20.179582Z","times_seen":10329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b4807c48ef87c4cbfdb4fd3c63276a","sha1":"5e00f507ba073ed19ffcec9ba1c95ccf21b120fc","sha256":"d344cc0248c8e8587020f8636204f6101c63bc29386d9f09ca2c0e638c17d73e","sha512":"bbccc31f7fde13e124fa68d56d81b75f4f2d6b68e2af068f3aa1ad75507eb6694248830e05b35db6903ae689c492c1d3befd3e94105a710450cbb67f2bca3094","ssdeep":"96:B8tdUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0H:ydUsc7lGd12UNgbXo6tNsaXC5CyZscsh","tlshash":"8cb1df58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc179ec032393bd","size":5346,"data":"","first_seen":"2025-09-09T09:02:24.931647Z","last_seen":"2026-03-26T08:18:57.200328Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4ee2963fb708143602356938de81242","sha1":"980a8a068ac3939456967b20fe368393e4a9e241","sha256":"c0020e06a3e166d652ca40445fe23c11c64f04706263958ea171a3b6b1be3b7c","sha512":"fe74ab2a1143bb24470efdff6fe84b5fdc543230ae0e370c0b99c671abe66b65eadd09231451e56b98e11b6ffb84dedddf5db857f1cee162c3001ca46f175f4c","ssdeep":"3:N/BKL1X8n:eL1M","tlshash":"9d5504c0755070704414cc43df51551550054440501d740171df04d41730c051110540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.177675Z","last_seen":"2026-01-02T02:49:16.177675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c61ee552d604e9b1815cde42f0817f62","sha1":"386acfa907efde2b5b2239692a325aaea98803b9","sha256":"d0dcf7e4ce77dc4e44bf8d9568a83e98c3897a47631d3e5821dde5f812d4284a","sha512":"966d8507f76f3c0e9b4ff4d813ccfc54b47c6f5d17c62a53a3380f605bc5e57d31cfdd5bb8f2649d6ae461ca9d74c1e204fb47d7881651c97bf63db8800db17b","ssdeep":"3:N/BKL1XKb:eL1e","tlshash":"d65504c0754070704510cc03df51f4755047440050155c4170df04d41f304011010540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.191782Z","last_seen":"2026-01-02T02:49:16.191782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b94b356faddcd03e20c34ac7b88efda9","sha1":"7eefa4811adaca44295fd7fa6ebb1e74ab22e8da","sha256":"83b384388c238bcc74652414543ff751cf5942c52f00196eaa483dff0ec05bdc","sha512":"26957718cf37906c2796e11cd2efcd5608e6d96d791ed585209ed33abbd4674a92128ef28aa04a9073f67f7cc13b4dd828d1f427e92b6088fd48981fb52cea9d","ssdeep":"3:N/BKL1XL5:eL1b5","tlshash":"3a5504c0754070704410cc03df515415500744015015550171df04d417305015110540","size":1337359,"data":"","first_seen":"2026-01-02T02:49:16.192734Z","last_seen":"2026-01-02T02:49:16.192734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","size":50001,"data":"","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-04-06T08:09:53.420918Z","times_seen":248250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-06T08:15:15.678098Z","times_seen":44791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0b48fb0d9a6bda22d29b5a0ec641e0","sha1":"76896d21367677a771a37ac590a30eaae46c94cb","sha256":"fd0b173778bd07aaddeacf3dbc52ecae71e7018093a002d7f9ac813c5d9ed422","sha512":"ec8809f9ab5e0a56d98dca06412c7280c4c726a3f0bf682a5218b6dbe5e16b5c7da4513a3aa8906138e9279009000803568f11344e4ca313db92b9bc2795f351","ssdeep":"96:B8fdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:WTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"25d1569805489d2f26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","size":6248,"data":"","first_seen":"2025-09-09T09:02:24.79777Z","last_seen":"2026-04-05T18:44:52.908833Z","times_seen":1128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T08:11:37.479434Z","times_seen":689712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/nav-menu.a23fbd67486c5bedf26c.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5fa40d2f3e55ef46e42d751f27aaf48","sha1":"26e3a36234e589df2028cdf83650dcc1b1b9eb7d","sha256":"307d51b835e14f1f2678ddc12814a7075f47ca61c5898ca424e07083b883988f","sha512":"847c9702b1edb8da179d6f4b727b9348154a54b1fb877899363358b63dff8e6de177c50cc049b6d36f2dc4db920419b534f1b652c39b6d89af20fa8e6ad93441","ssdeep":"96:B8nm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvkx:0mSjqOf55/UEpUTW7vgoL91SEj/xZdUP","tlshash":"c2b15262729229a7c58f816b77534a2df2322998740656ad7a396cff11f1ec033f1b34","size":5282,"data":"","first_seen":"2025-09-09T09:02:24.946173Z","last_seen":"2026-04-05T18:44:52.895255Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-06T08:09:53.333074Z","times_seen":667688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-06T08:11:35.013399Z","times_seen":752996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_43_live22.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_43_live22.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 348943\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f0234addc272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:00:53 GMT\r\netag: \"68f34935-5530f\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2knAimNsxrQ6Pb7vojGSpu%2BSNhqaHaJD%2FS4oK3Ob7jaX%2FPUT1BhDcgFcEayaMyU94kklaJdhaxxXP6FZINGeplmN9hh2GVwq8Ij4sKDBMqujvShfIMwW9VCO8Q9TNEme0n%2FQ4t7p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2998\u0026min_rtt=486\u0026rtt_var=399\u0026sent=13065\u0026recv=1086\u0026lost=0\u0026retrans=4\u0026sent_bytes=15100618\u0026recv_bytes=106555\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=130846\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13730\u0026inflight_dur=1162\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"97ceb0ce3ca8dbeb749b2c9cd247a0cb","sha1":"c5be2752ea916db3cd38e171ddb9d0e5a455e7b0","sha256":"c1a41a630a5d49e8f5ca116c4021b22bcbbd6d2cbc7e0e14a291e2f077194c5e","sha512":"ae15596609164e1943f5923a867c586e560c7c7e4c72d0dddc8d9d7df46ff3aec96a33ef0cbfd3cb2a866fdbc954a36380d0bf28a59e29316714dc71427ff00b","ssdeep":"6144:MWMScnXfxNvMR0OAbdRNN1dhuLKvLnmo8VIBgNJXng+QM+N2Ze1m/+hSzfZVPk:MWLcXfDvqAbluocIR+f+Nx1NhSzfHk","tlshash":"1b7423a3faeed8a4cfd71b675ed8913cebb15a935bb4d3270d28c18819244106c43f96","first_seen":"2026-01-02T02:49:16.080679Z","last_seen":"2026-01-02T02:49:16.080679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":202,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/0726b2d81686a5392236.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/0726b2d81686a5392236.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y6zBYEZHQ9dmOrtyUb26GJ8cim2lapzdJwuWQzmld0hnIflSbIMmTA%2B%2BAKxLdb8O6X1GtYeb1aN6OKer%2BJlPcIEswUvHb4a%2FluZsUnleCeKeTJS0i8GFZNHrZ%2Fl46ohnY9cCEaDi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f023aae4c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-5abd\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3137\u0026min_rtt=486\u0026rtt_var=206\u0026sent=13913\u0026recv=1106\u0026lost=0\u0026retrans=4\u0026sent_bytes=16086722\u0026recv_bytes=107617\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13801\u0026inflight_dur=1227\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23229,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (23096)","md5":"0ec70d312412146292973f6e51dc90f3","sha1":"9c897aa10b109261b67dec86576b73fe5f753b35","sha256":"89b3591d4f83b5225de19790fb631783e6c8fee779edc45db94db6c83f8920b6","sha512":"61b50a9510f6dd25f87e62af140d14d8bb1764156edd0fb5c00561c4e90fbdb780d1dc25ce0a2a247e1337a60fe2e9ffdcdb675b364cf0592ed7eaf393cf5b7f","ssdeep":"384:GC3dt9cJvGbev8/UMO3C1ChYdX5DE9h/ddA03/0XIjdwryFGFFQcAV1km0MFzpGE:D398GSv88MOS1ChYdpY//ddA03/0XIj7","tlshash":"4ea22add6c1275b69fee81c9907a160ca1bd114e740ec0a0e2cddcf9147bae96067b2f","first_seen":"2025-09-28T23:23:54.643984Z","last_seen":"2026-01-02T02:49:16.081761Z","times_seen":8,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/favicon.ico","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png\r\nx-robots-tag: index, follow\r\nlink: \u003chttps://duangdee789.website/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RM6S9ufTyCbSU7N3J3R3D8DiRZefhEGJywxkIKCYgusQgaosaENiCsauTTrTnkAxihfAUxPzGZBKg%2BxMLSIY%2BQiCj97eVFfIkKakmv9Bn1swnd0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b76efdfacfbc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":6653,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XGq5andYgu9vtvSEEHCUpZTqOEBsFJ2rFszNvoprp8cFK1e7J98dX%2FUvd9KXJBGF%2BulUw6aY5f5%2FYF0mdmf9MMKT2YXIlSvoNRFB8c1GxWWbIZjbXzw6KqJ9dlvUmrYAbQmUyt0S\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99eac272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-6ae4\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1053\u0026min_rtt=503\u0026rtt_var=354\u0026sent=212\u0026recv=96\u0026lost=0\u0026retrans=0\u0026sent_bytes=157063\u0026recv_bytes=42290\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12347\u0026inflight_dur=105\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27364,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"c9b67ea0440b6537083ff462ae061225","sha1":"4de0ec4cd074951abe1f53d4a5a2ad77b2b5dcb7","sha256":"0ed03b5698d526c993fb284dcd8b45d7df5516a59c9f1bbc3aceff31e13d6544","sha512":"421e2a3f6a36f2950cc0dc079ddee346026a8d0f050cb49ff3dfd177d090f18205fb619db3086359dd263703bf3a0b6f3402bd5187d996a906eddead4db171a8","ssdeep":"768:ErPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+jz:I","tlshash":"7bc27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5910f41d7d5c6bb7b22","first_seen":"2025-09-09T09:02:24.759255Z","last_seen":"2026-04-05T18:44:52.973479Z","times_seen":559,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RGsxJZJfVlqG95MjG3WZK95iJ39u6h5paDLh9PS0tiwIOc1JRO%2BeH0p%2FWAxheL%2FQCgglQLYM8AUQzoqOpNOgHi%2Fn2tF%2BueE6yz38%2B7gO1uM9MoM2Y4TNDUETP4tmzziAkN0%2BIeeB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0287b4dc272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-14e2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2313\u0026min_rtt=486\u0026rtt_var=1605\u0026sent=14565\u0026recv=1119\u0026lost=0\u0026retrans=4\u0026sent_bytes=16858748\u0026recv_bytes=110370\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14557\u0026inflight_dur=1298\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5346,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (5302)","md5":"f4b4807c48ef87c4cbfdb4fd3c63276a","sha1":"5e00f507ba073ed19ffcec9ba1c95ccf21b120fc","sha256":"d344cc0248c8e8587020f8636204f6101c63bc29386d9f09ca2c0e638c17d73e","sha512":"bbccc31f7fde13e124fa68d56d81b75f4f2d6b68e2af068f3aa1ad75507eb6694248830e05b35db6903ae689c492c1d3befd3e94105a710450cbb67f2bca3094","ssdeep":"96:B8tdUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0H:ydUsc7lGd12UNgbXo6tNsaXC5CyZscsh","tlshash":"8cb1df58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc179ec032393bd","first_seen":"2025-09-09T09:02:24.931647Z","last_seen":"2026-03-26T08:18:57.200328Z","times_seen":160,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qo%2FobDV1MtsDD82EdIDMLSj7e1yoBv%2FJa5gvM4E9Gj9UYr4Bj1RCWt0DmyhT48Jqqdu6wbVbg4l3fpaBJD%2F%2FWE8RhhXQUEqREbyQsbHlaEPmi3x4FZqQLxAlDP%2BYWqATAgsidLIE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9b76efe06d13c272\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1542\u0026min_rtt=503\u0026rtt_var=1340\u0026sent=71\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=64106\u0026recv_bytes=3399\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=2843\u0026inflight_dur=61\u0026x=55\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9b76efe06d13c272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6653,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6653), with no line terminators","md5":"56057780ab294efa60c711b8b7e7df97","sha1":"409f625023f6c22952cfda9374c2c5c0bae6727d","sha256":"e3789fb8daa48b7ad4c8c35d3c9e7e035fafcad6ff6f361d69039c62f4eb2a61","sha512":"32d49004ec59e9fab2138f6597b5ee784c8dd1518da62104079922b6ad655c218563344c68de337d27be9c3aae7a0f3675636f099cde54bc7574f9a47e9fb56a","ssdeep":"96:PNybXZtIEb0EFW87IN6NLnOz8FwadZTigcqWKMEgf1NRsqUQfYzueh8uIGmw:PNadBqePDdjcqWd1NWqzQy3w","tlshash":"c6d14bfa6121f01b93b60aa35cb376149325e320cb0491d4fae1d4dd81def4a45ae9c5","first_seen":"2026-01-02T02:49:16.085386Z","last_seen":"2026-01-02T02:49:16.085386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Prompt:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Prompt:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 02:48:31 GMT\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7609,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a3bf59b5f4d8c5417052bbdcdd5cad3f","sha1":"b90c195b8d04e406c564d56930089ac3897c5fbe","sha256":"0c7f729380aff714854c878d101f30f72831451e5a56848b115a287f09179924","sha512":"229f47ffa81afda622865950c8d05581ebbf15a16c8a0b9f60ec8dad6876950c54f51e04a82c0f85ae303be1446d07ea5a4894579bd7ceb67e96612dc682fe1c","ssdeep":"96:hO1adNDO1afUO1afMJc+ufO1a0NiOEa9NDOEa7OEa7Jc+ufOEabNiOXavNDOXauT:H/pyAEef0cf5gFbauKuH+d4nzn9+YA/","tlshash":"3cf1bab00426d500eb831dc663cf7e369e8eb162b460c57aaffd1888edeac21535575e","first_seen":"2025-09-22T09:16:08.096744Z","last_seen":"2026-04-04T13:39:57.318424Z","times_seen":38,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":111,"dns":1,"connect":15,"send":0,"wait":39,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LXhK%2Bt%2BsD0JB44CZeokvUuLZbfJDt4BQlGyAlE8ljRNRg2t1LZqbn%2BVtrRljzTMX5Y3YXykd3sj2PlAU4%2FK%2FZ5RJXDTnfVW%2BgJHyq%2F5KnJqa4Ny3Fh%2FwEpacHbeNH%2BINF04GwIa9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01ada0cc272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-2a07\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1919\u0026min_rtt=503\u0026rtt_var=497\u0026sent=523\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=498187\u0026recv_bytes=43521\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12381\u0026inflight_dur=137\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10759,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (10578)","md5":"ec2777f6b09c345d2ab0def96b5cab9d","sha1":"10713118d9f7aa90bdce30ea21508b2e99b8b33f","sha256":"d9b268266af74b5c0834e2a519303ca97c5427c5fb7abb3b89ad29e07664be14","sha512":"77b8845daa7449a72a6365e75ae56781c82b503619f7d90ce4ba0f5a8c025b59f3881f0bd3b51570b2c3a6567a6be1e783615954d84b9fff95812e230cc8ffcb","ssdeep":"192:Cr0AcBogU9EEk7Wxcf55I/6wG5klFhBsR0PWXYpt:Cr0AEPU9EccbUt","tlshash":"7f22844a320a2b015b9bd271653da8cbd77752c8690449ccb074dfce445cf59a2ebf78","first_seen":"2024-07-18T17:31:23Z","last_seen":"2026-04-06T08:20:49.311201Z","times_seen":25367,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1567218548:1767320842:Ikc2vlxjoIDwrFEHa1E5tHlLK98GFEMcnVKuKZs9gog/9b76efe1fe3d56ab/DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-02T02:48:22.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1567218548:1767320842:Ikc2vlxjoIDwrFEHa1E5tHlLK98GFEMcnVKuKZs9gog/9b76efe1fe3d56ab/DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3692\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3692,"data":"hpGq8lHtYJJ6Dg0CN9ETvc0fDsi6BSzsMn+L$BTO0qVI7LAYvvNIxtkyeTm512baoJQuNqN3HxbSIaHVN$RrdqKpcP40gb4tRBj3op-KcPdx$DzZhC4gmw0SivV0d4faxvOnVdygLi8PIZEIAPNrMn9p2ucNwRurItNgrixBf7mun+5O-Nm7vzawRGge4Roka7$POjOjKVBWcvXCbxirDON$324zS1zU4bI+TVBm0Cb4b6XJCGoWPv5YL3kdEHIokrL0fnIQIuAe$w0-w69m-W5mkPKRAWqdV2YNaQKdhqoB2A9CS2PlN69IJ6V3OB+CGCvNq-2PLptNhpE-Hn+Bn2kCnLD4$s$yqWLDm7OTas8Ye4bJxwjhzsEL$A8DELOwNVxiDukBqtMEjWVz9zr9aKggETn4+YkB0c9vk+ShP7bxvQ1JMmAw9cPj$G55uKTsKkWmd3NQsEKHiP4b-s6quLe1AQbpLY9JveKDvhSd60gwezy40DEdr78oBI5c-b1MXbLfm0SvOKKdCDZ+$+$GXyGEEjAKwhVT7UD3uhf4uNSczjJKOetm$M2bodrx67lpbyVl$YYiuTRcHzVVBzAejqkKnXzqaBA3Os8nc3h49oIdVOc-+n5-iTt$HB33jMlYidyqfnv73A3dveNGtN0efsh1V9MWKPHeAb+qRp9jg1dNuYGw2V7I3ZMnzW5VpPZrlo+C2jVzw+3-VtY9MnQZlE0xTtwb$0JEt6yxkE+Zg$ktYNZOjILnW8A6xSmtunP0p3d6cP7zEWWOoottvPlLdZ2AMG+WK92lMmN78LEVu33oQpH+Hgr-7JI2-BC8hs8-crCWCwUsj9r5MJfwnLbNCNQ4jv$yTf0c-NauDId4Xq39O3YdzQwySNzqxIVTQsZOK-66Dmh$Pp583$d0gPw$$-+Nw5uWGaS0kN3t8RgpC2rZR86zlfKeX0B$v9zXx-OM-3MtDlpxIcYAjGkfma3qweUT$RRD-YJrmofxi8tIR-Q9gHTrYLtmSXaDEjQd9qVEPwH8-J53MuqNdbnwTp$GH3pXHwItc3A-w1xwi0QpjeYoJIvsOwX7SptvDUzdbKqMrdvmA6ew$8cK74PlW-2$RcXcCxK+s95mK8-KyoU2J+uPc0tv4E-+fK240e7-e+a3yRHl0XorwQC4MGtx8w64PlyYbd03ZY-w55llnox9K0SWIUDcA8$ipU5OkvalrMsow1ol9VGgc89-7Uz1rkrOaSUzNRjSHK7aNidI002ijXM+6iwaykayp8Z2P5SKiBPJpGN6xKpivx5jTPVSvYhamMY5tW0XHPmGgsizqX-+0ccx80dDcCEL$AgwJqZq0ynK9OZ74G2CEb8aM8I63doda+iH25HqcfsqLx9IoCRkguA5w-bHM9fqZkE$V9QaSWvAExNT6TTosZkdnerjsxWZESSCULbO-sN61vNyxDVnMXioNbWz4aK26wkK$+EAx1d-1na1f2a8nA8uU0Cji7on3pRPA45dEKla56h3rghK3vzal2p7chzJfkUKj2GbMGI+omDOiLW2g1HihzxM+N5tfVI3V+Q-hRAPGgajGe3jNAZQ7GWiqimkGVYOQwDRJNLM-kgYOIv3G+j7NtHoddL5GJf6VlzTKPmrAjL2o0Oq2qauMoi3l5YcjQNzU3jE2iycvniMfdBc6QO7a5NbSUPAJK2Th7oZWmnw5D2ZX2MW77wtzfha-3TzjkYz$T31Ijgj7VdINdHqIRC0qODJ+kkYhIvP8n5BX5znCg0OQ$WyTA94t-zh-yeR5JrkkaoGKfa3D7-JTzJai8WrnVQxh5kpagN5KIgLp2qJNla8CP$8HdKD6Gh95dRjMLS3YEYRR9$6A4jJfI4d8h3GgkvVp0Vt5$LU-4fLzp0TAe+S$TeDIbXtOh1s+CQ8lzUdhPp3pN4mkHeDXVD9CfpHtAs53mT4NB8Jy-8JS7jkoPRhT0d9WJigKZJwKyJjxrMx9o3segMNlpy5eva2uNyBL4yPzlTkXowKEt+O7Lftg7fIZrOj6mcowZ8KEGUMTmZKPbdllBZR-Y7zrEza9rnKJp2dTu74Lu9KQo2Ah9vA23erZ-PdLZ$VdkKqYKIxa2kE3QEwQ4$DWWcK2zv8smgX2wsiWoSgOz-gqBbSMB9eUeXWiW-jn-W+2-WiJ4cz6q7PkYQ-pMT4LDeUsm3PIzsNKfX-e7ePfd7IPiTfDnMkOer34YlCsASoz2E464A06BAv+jEQM1UvjqdeB$k3tx3eLDIsEe$xCKOA$WDow8AhUabC$u8Mz87kv-1Jah-KHr--1zhaAVUmJkMk4IM8TKCqZizWOGGg20r21ALmB1xjv5WGEvbV+kvk0NzU7P$0y-wgvpQp0CwBLJQ6M2srHHKGVK0VdtRudOPrCXjQbURjPbzhqTMxO1oraCld+wNw4iIxIKiPoT4qrXHgUd6-1ty-LJQqVA0VQyxhKuWbKy1srZV473ehjDL3Q0C8BY-9Gyp8mMwwz7BEXqIA---lDNS4xqISNaO946hwdXK6NQgYrK$Ld1OIX+L9I74s$6BIaBcEGy8iojj8qUoC$CdnaXWk0Pj6RP2Pp8ZlPpK1E8kcZPJEMtawa9QVc+KJ+NtcqjTnu$4VrQtf7Yo0xr82-vpidd49ezcmlB3BHPcl0gE0MAKOUvwgl2TWb-rrWJs7PnnewmkmI2JtD7-eTmXsHqKMiJ9i9PxYM4lJXPs6I16yv5TkbxJ63Hh-yQ1xcOqH6pNaMPwBjjof-9nl89b8IXmzVcjCPzrhE7AP3t++ig6$+5aKiNV8QLX6RwY9uVqdoO9TE9d9CkIJ9+T79oblyk54NkrXzre+qr2nDnobkPNMMWlRB2VjHXdXz5$W2tjOBYiPGuwWMKm8Gy3uPwre3UKz1lVM8yWejWOIuS-oCqXv8MaVkoA6jD9LWdUo3nztIKmWJkW8NcoSiYKaHvf2o0v5jHpCx4sxAGjmqi3jtV99kDua4$DvKtDn17UIiqEjXk+Rcm7vBjxiX8L3fq8VLpGTgqaLhH2g+hkesJIUTwyhTRqsjIuM-VMKJDnc6NIWTylZJ+neO7gDUBg3z3RN-kWNVLZxarbfXwdA$ePfotoqypv8SMo5Ji0bYpgfsaHoY40Qfdhr7NPfS5PGfteLOOm9gk0-EMMgywcGXH6arVGR0XHadDUezGe8A$wAg2fvi-Zio7dfjcrvEwlatcp9tXdiRMHatxC-uTflubRv+PfGcXspS7-y$JwP6OJJyl2tGgJW0bem4Jl5CPCGYlKXngQa-EfEUz1HsAfm$VngxD7drVxMczy7vm2glvQ1l0BBLD+$MWBI$L8Dj8MTW18u6Nvw3C0HJeoOoNKP2-lyt3NYAf$w553QZsGW91ROjgbZviBNC7Wyv3BDDYSDoI8tsu-C7pc92YQ7Kzjk$zB3kJzv7MHIp3+deeuNr$puLpMxOXgMKXWNnsSwrEDOOTowM4ZkdcE+Z6l1qBYNQddN+d82rfTnCu7Zx+ab+YprLBXYLf2Z3Kym1S9hgdc$QJ2LTuWf-gqltcBCsJbkClUleAyrOWuhOyyUJUtTBGCXz9M0L4ggVWUq4ZUzWt0-Oud2B61UNp6upDhw96BADrs5-e4Yzd00H9pADDrhMaI9u24IpJrplgvP+gT3MaGaptAulLpQ5e48RzTO5hLy0lX0RrbjLCmgNI3Qm8Lt"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$7vXBKVm9fX7uxHHDwqmy8w==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b76efe4af5b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202956,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bfe71478242efb9458d8ed2785b35ed2","sha1":"e987180cfcfc3c0ad799b21532c2eb1c6ebee473","sha256":"cf6197809e66f0e67175e43783ad1af157609c9d0cd8f7a032fa4b7a731744f4","sha512":"303d661ea1a4c0a4b71a5531608a344b235a13f400dcc62c63341e54d3f66d521f030a639158f467689e4859c36ca4b8f37c7e5c55af392dae6532c57e3998dc","ssdeep":"3072:TtDAF99e7pk7N1sx7r4RGUdl+EEtzq8V2+bse5T6maK0eAKHl6ZLLN+eKb7TehGx:Tq5e7CRbGUTvczq/Sh0eADa/7TeGu+Z","tlshash":"c21412142997fb6ac3b881995a1816524d154f694cc382c89f7d1ad7c2efe2c0f32f9b","first_seen":"2026-01-02T02:49:16.087664Z","last_seen":"2026-01-02T02:49:16.087664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/css/widget-table-of-contents.min.css?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-table-of-contents.min.css?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NrTa7LZ8Wvc%2F%2B5YHNNl2FpDwuvhgu6e0LIED9SCw6vEBl6JmjxhWoce5%2Fx9XAOGUIQjd7ryXZ4WvuBY4AhV%2FrE2JjBdkc4CXtUjwyILNOQJGZtuQU1wznwDvhQQlLyO6gmc%2BGlLc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9f4c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-102b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=994\u0026min_rtt=503\u0026rtt_var=294\u0026sent=238\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=185127\u0026recv_bytes=42379\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12352\u0026inflight_dur=108\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4139,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4095)","md5":"a44acb56ae5b4b1a4162ccaa646b10eb","sha1":"ab6a76042f6fb0ac852da12780612d1b341d3bb2","sha256":"85870db663c143bc81a4eb7dd5189c4e0ef06eea46dd5a20253cff3e2da23695","sha512":"44cd70700d327fc7d87422db803ed9c93d0f7c60d2952494023d29222f77a2f4fc39d0ac9b8ca2b0c711018de02071f09fb0a0644ee1da8df03044aa4c87c26d","ssdeep":"48:B8YW1vzW5LYr48oY4NvaJEjqSPrAun7aZa1YlVL6:B8x1vy5Er4g4hcEOSPcuQk","tlshash":"4f817769b90be9fe145f713b050e585e112c95d5eae36094fb98c30262efe953f21c0e","first_seen":"2025-10-01T09:17:23.333838Z","last_seen":"2026-01-02T02:49:16.088638Z","times_seen":4,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_3_1c719c1d6185f0828bcac638d5363ff7.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_3_1c719c1d6185f0828bcac638d5363ff7.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2269440\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01aca01c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:13 GMT\r\netag: \"6909a7c5-22a100\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hzSt3VIbiQKzU2%2FRKawdXEzczMgR3sZarQgnxaSqHCm%2Bz5bHeGfPc37G08bllQ%2B87unR6QOCdma3eoJKpONEH%2FjsCBHRTc1%2F5erg6htlJsXVmJEb6OmA6pBg0WUZvpim6SPHaxPm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=839\u0026min_rtt=503\u0026rtt_var=177\u0026sent=354\u0026recv=110\u0026lost=0\u0026retrans=0\u0026sent_bytes=306909\u0026recv_bytes=42958\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12364\u0026inflight_dur=119\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2269440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1040 x 1040, 8-bit/color RGBA, non-interlaced","md5":"15696aa79e211589b99193d0f619a7ff","sha1":"43410ce532cdcdd69dbae8f8f700f0ac942fb1eb","sha256":"bfddc590b4f6420a0407b43f500b0342e8478f735a899661f3abfce873cea258","sha512":"141f5b19b8d1c5cc519640785e1848125882152a6184478b96935a476ab81ecc3da35b478dbb2213a256bd52826c44ece45614fd34d975268b6703ad4d6383ac","ssdeep":"24576:JwCvCVpACPaJedJq1HVLQ/VUpJRZEK4gKE/sjtE2creJ13Mz/KA:JtC/AdIqHVLGUpZjczd3M+A","tlshash":"87253393c1f5c3f0e4d6800b5422d5ae673ebd531fe8bf12a528e20e5adaf52490de46","first_seen":"2026-01-02T02:49:16.089564Z","last_seen":"2026-01-02T02:49:16.089564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.js","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.elestio.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 23:16:36 GMT","end":"Fri, 27 Mar 2026 23:16:35 GMT"},"fingerprint":{"sha1":"56:9D:42:AB:78:96:44:FA:42:97:86:71:E1:CC:D7:61:6E:F8:9C:DA","sha256":"4B:CA:5D:9F:67:5C:41:C6:9B:52:5A:B7:2D:1D:32:51:18:31:8A:DE:0E:6A:79:FA:FD:15:A7:A3:98:76:0C:F8"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo-red88-xdev-u39818.vm.elestio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 22082\r\nserver: Elestio\r\nlast-modified: Thu, 28 Aug 2025 08:59:22 GMT\r\netag: \"10933-63d691f0bee80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67891,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2915)","md5":"37d584a0c4c6417b8202e1ba1dcd669d","sha1":"924c9ef817e07dc6cedeb75d0681a47a0744e46c","sha256":"d6e4a56dc9b760f4aab10fa9df737523826bd80205b5ba03cb8fe641d488bd5e","sha512":"ed09e5d96a93ac3a3a7d89dcf43c51b3ef93bbd31fa4e68a2a25f776bfc0bad69282ae8ea0f65567cde7ec123efc912a74b62a80cc1615430c4584839cd54a1d","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX1pM4llTSRDgF+RQz4KytVoXIl7IC4FCQaFLa:AT+Z2fuvIlQsKyDUIlSFv5","tlshash":"7563c6ce72c3753a9bca6074a03f114ab2799daa1448c4b4e629c0f53c3891da57bf7c","first_seen":"2025-06-12T03:16:41.165178Z","last_seen":"2026-04-06T08:29:30.065227Z","times_seen":6154,"resource_available":true,"data":null}},"time_used":3979,"timings":{"blocked":1654,"dns":33,"connect":351,"send":0,"wait":665,"receive":1,"ssl":1263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pyZUARpiHdfCRHFpP4L96myrrGdQAtfOwZrMST%2F70XOezIdSQ5KANEyfEd1SOertVX%2F%2BGkGuxXj3Fj3l7vYJYAIXi6emSA8SlItJsbEkPjYYn9NwQUotiRoCNxz%2Bb7dgJwwiDEUP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99f1c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b8-156e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=893\u0026min_rtt=503\u0026rtt_var=270\u0026sent=298\u0026recv=103\u0026lost=0\u0026retrans=0\u0026sent_bytes=246063\u0026recv_bytes=42614\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=24249\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12361\u0026inflight_dur=116\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-04-06T08:15:15.632859Z","times_seen":54407,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/elementor/css/post-51.css?ver=1765588997","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-51.css?ver=1765588997 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xbKZDxzkCuGekJbx4chzIEPQZIIBr4G48lB5tlvX%2BJgYtMCHktyfEc2R9%2BAfwBdif9wryRjEZ5IGXzhLSUgTCq30Dsizk%2BbC3%2Fm70W1CGlHWYCVq%2BABZCuN7%2B3KJ0yPTNXbtEcdB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9f8c272-OSL\r\nlast-modified: Sat, 13 Dec 2025 01:23:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693cc005-407c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=839\u0026min_rtt=503\u0026rtt_var=177\u0026sent=354\u0026recv=110\u0026lost=0\u0026retrans=0\u0026sent_bytes=306909\u0026recv_bytes=42958\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12363\u0026inflight_dur=119\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16508,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7848)","md5":"7c1d42e3f3ae55fe05218026c1f4dd39","sha1":"1b60303a566cf4761539a7c592bd32722a88de4f","sha256":"604dd2f48c41c1cf2dae96eba55d3fe86fdb0498af9e23841bdf3783486ee1e0","sha512":"ca3e477c25cca8ac210c829e49f6747fb2732d1813ad70071efe79f7b33b773948efe2e4a605b9ed5deb3aff9b50f8de99413a20b693115226b5d09af2054f5c","ssdeep":"384:w2uJ3G2uJV1Yt2uJVJB2uJ69wHp6zxKe6zx2:jU3FUV1Y4UrUUnk","tlshash":"8272ab917d53c029b23f006f6557e99c2a286ccdd53ea2e3f8649217f4f6e6233e0a14","first_seen":"2026-01-02T02:49:16.091646Z","last_seen":"2026-01-02T02:49:16.091646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_48_octoplay.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_48_octoplay.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 362687\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f022eacdc272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:00:57 GMT\r\netag: \"68f34939-588bf\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x%2BaklIPrqqpcf9KY0nHq1yaKAD8sihoucsXmZb9V1Lun%2BjbgxWWZrq4dM57pKIAtOkU5BDyxu9lDvz2aCaREtXUCZJNEXiaHY9CaTkUrg7DiT6XbVAxnWIZdTNXdjjITlQj44wxM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1838\u0026min_rtt=486\u0026rtt_var=923\u0026sent=12251\u0026recv=1044\u0026lost=0\u0026retrans=4\u0026sent_bytes=14173279\u0026recv_bytes=104456\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=210341\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13665\u0026inflight_dur=1096\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"45be8506788c777621a16252f4f4cbe5","sha1":"c9c07fef96f8135d55ae681446cd024a8ee1b0d3","sha256":"fb57b9746212654b7cd508980cccdb4f67d820deac2aff10252786d0379f4b9c","sha512":"27b32c040cd287f728a388cfb514d696ca96b6d635819edb7b9968e3d7af00e8781fd5b7257b4f4a4c27aa81c240caf9511fd5334b9e969ebb9d297ed6014f14","ssdeep":"6144:pCW8MJhrau5lLMk0MPj2gKy/P+ED5doSP/CPbZnk8YX/sRrb+ILzdKc6qvTe+/jK:bJhra6RXPj2o+I5dfPeCfX/c1R6qvTXe","tlshash":"32742384e0c983b4c5cc6fdb468a257c348471eb9e6afb971762dccd7893b0a6885f11","first_seen":"2026-01-02T02:49:16.092902Z","last_seen":"2026-01-02T02:49:16.092902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/blog-img-duangdee789-1024x538.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/blog-img-duangdee789-1024x538.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 189585\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f02a2b76c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 08:11:30 GMT\r\netag: \"6909b532-2e491\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vHHQIyMV1%2FV%2FNzaw%2BO8Ur%2B%2Fak56Btme999ImGS3dOfpf0omw7l35lbV5rUlz3D9BFr9%2FnFptC%2Bg3%2Fq30IiSb6SW2NrMMZZNcEChCwHapJWhOGhPRgDUfZhVYi3US2M5yf0JgVNb0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2035\u0026min_rtt=486\u0026rtt_var=1386\u0026sent=14676\u0026recv=1124\u0026lost=0\u0026retrans=4\u0026sent_bytes=16983071\u0026recv_bytes=112240\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14829\u0026inflight_dur=1304\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 538, 8-bit colormap, non-interlaced","md5":"d9b2f9bcd3b8357979c81ade737539d2","sha1":"475ccd5dbdff0a2100bcea04b388202d14ea2482","sha256":"2e194ff9a272894bc88007a245498159f6df258fc32b618093887fe6194333e9","sha512":"ed6cd5b0f37070a5cf602cdf5f3cd43648a4b3668c422c500c0bb1ff6c7bbdbfc3c6a9d085b58d5fc0bd51dbdc5ad23099ddf7f5b6d33e9230502edf951e1e47","ssdeep":"3072:B6D/s1BMPXgwzjZXm9CZzHiAtnQb33da8X3p9DBKepoBiXAWCi/D9LvzKp57ebV:Bd7nojZ294CAVQBX59EezXvD9LvzKpg5","tlshash":"de0423d0f0a58d075e9ead3ad231fddd45ce70a2d89688b1606fc8904d9ef6a17b4903","first_seen":"2026-01-02T02:49:16.093827Z","last_seen":"2026-01-02T02:49:16.093827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.php?action_name=%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20DuangDee789%20Wallet%20%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%AD%E0%B8%AD%E0%B9%82%E0%B8%95%E0%B9%89%20%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5%20789\u0026idsite=77\u0026rec=1\u0026r=541391\u0026h=2\u0026m=48\u0026s=33\u0026url=https%3A%2F%2Fduangdee789.website%2F\u0026urlref=https%3A%2F%2Fduangdee789.website%2F%3F__cf_chl_tk%3DtkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\u0026_id=56dbd5952c561a6d\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pv_id=vJgejK\u0026pf_net=0\u0026pf_srv=1628\u0026pf_tfr=4\u0026pf_dm1=922\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:34.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.elestio.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 23:16:36 GMT","end":"Fri, 27 Mar 2026 23:16:35 GMT"},"fingerprint":{"sha1":"56:9D:42:AB:78:96:44:FA:42:97:86:71:E1:CC:D7:61:6E:F8:9C:DA","sha256":"4B:CA:5D:9F:67:5C:41:C6:9B:52:5A:B7:2D:1D:32:51:18:31:8A:DE:0E:6A:79:FA:FD:15:A7:A3:98:76:0C:F8"}}},"request":{"raw":"POST /matomo.php?action_name=%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20DuangDee789%20Wallet%20%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%AD%E0%B8%AD%E0%B9%82%E0%B8%95%E0%B9%89%20%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5%20789\u0026idsite=77\u0026rec=1\u0026r=541391\u0026h=2\u0026m=48\u0026s=33\u0026url=https%3A%2F%2Fduangdee789.website%2F\u0026urlref=https%3A%2F%2Fduangdee789.website%2F%3F__cf_chl_tk%3DtkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\u0026_id=56dbd5952c561a6d\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pv_id=vJgejK\u0026pf_net=0\u0026pf_srv=1628\u0026pf_tfr=4\u0026pf_dm1=922\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: matomo-red88-xdev-u39818.vm.elestio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 02 Jan 2026 02:48:34 GMT\r\nserver: Elestio\r\naccess-control-allow-origin: https://duangdee789.website\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T02:48:29.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/?__cf_chl_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3629\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3629,"data":"2a08801bc564e4cbb92fe3de78bb51fae42898cdc999a9e445efb80ab8f60e08=f7Qm1UR2ixhtblZ2NdraPhC9.gN44jfFbHOYWn59JZE-1767322101-1.2.1.1-2H4DpopWjOsnJvBfiBM.0EkD9GUMhUEqvZu3PQgvzQMXDQy1mIat4T53nctAy0bxRoCYMW923dTrJ3QKhhehYaA0ahMVQnloCp1DR8b7t4gQlFXBAkWQQ2BSGNH27QIbrSqph9lrCCYCqgOt1E4qvUzHbVK.2IdbhsBMwP30xHQvleMcfdCHGLPklk8Kp_HIi.DP9Ms5rpGzxxccLIZzUIkM1qj4iH3T7ICACGeClXZYL.3W6ppIOBJOP3yVC9IkkfNf4LFebcztWjHL3kKR6xB_gKFE4YsreEpW2JL6WozsWoh74yx30cPs63PglSCsYSLwIPIaFiXloPIhhbBDCOXw3MadduiAGvLIUTzibE7kXXSZVqu0aV4KbhrHkAgoRAFfAmLtLLMfFdLETzGdsModAKBTZmM.wF5fii7cCQ3Ix9qwZkQjD1JOMqimBuEDJ20h.kqy222WA5Wl7w2Ld9JoDLWyxni186fkfwhX.xF6h8fgaM._kwTXz1cTeGOQtc1NLB7QZUU8UysDAyKdSCN5fISNHwZjlnMQos3CIj0_MxbgGCYEt1_2msvUOTDWc7OYZ9Sj0Y4.IMh86eixoNEZIhHdiofvHhFiJ7NHGrmSkfLHFP73bDYp1TuLRzUrLKgybohuihrCPtwHFhQRYgklWXUglq4OUKPAuJRGyUSO0k.d4u6ag7BFUPgX2cfTfle4jIn62LnpAXFbel.3GrCqgU_FJzhndEhSMjgWV8H.GWXCXLqjJa0fw4745JksMUezhgNN_NBXn.9GPCj5BWnmOamInxwIzTaL6sMwwWIk.5LstS4FiTrZDFn1NQy9UdGX2xkPetF5VTHv9T8YUNgdOLCC8NDqPz4620ue8CQ\u0026639bbeed998474d4f170734a84a244f08b0b322d4e486e5805f876bbceb171e7=rthiSHeNE9R3zn_SJoXuWdEa_eyHIpkC6lwwXYI4G5M-1767322101-1.2.1.1-c.tVknyCCWR5_SV6b6VwKy2Ci7TzpxZaLDZttcUjtWr6_mDUeyhdaOx3b4SeDIOMvYpy5T5Psstxi8UifTQ8m.Jd74nQr.dP85YgQwss6QMDU7ubtDJJ1OTYVfUUIE.0XxJFODWar0vxVFnQZimhhW_hPLyr_sLIx11_LyIQEyyA.HvpRG50idzpKkcAITsu9h14oQR2DZAxkKVf95kZeTunP9tLfjUVGNcN0jVTSJAKzF7iX74uZvcNk7c.yj4kTjLZ9EhbBChLuhA82Wqr67bPdyzwx_x01k6YXEKNQimu_qUXqcsj2i3bm0LYfZ2jP4w7P5QAjQJ2DJtuBPhEAzR9OBROPaXKXv9zjxytEZauCg_AKUQe0V7bB5nUDhdYXC2xROrqLLrMihwk4IBHREH8odDaUwJ8kdgqa_88waHzhKoH8lcefdyzfcXuowCqjv1Ksh20EstI8VKbfO37GZC5f6.OOHUnwvP9qTqJjTTc9S2Z4F0sTYIaq2AtTYL_yXZafzHWmaOQ3hBGT6p8tVGQnX_jzU17lqUnozVW3Q9u61sj1sshWzVZjyMkS3lXSpCQRbUkzhWQSrx8HjMrM5rTDvJWSH9EkpY0G2p7WvVTf5BRpHL7iU4LD5PHOC.ckCMKCvcN7Pwdn2tbLW11RMNeE6cYNJ9d5jEwY6v_80iVqOurlupgBi5l9JPz6hcmLrOYbVfCJyndV3Dgbg8pZLV9MTx6sLcTc.4WNIvri3Le7B3ZhfX7KF49Nk6_l8BHiUe4zgRV1onNZGl0empb49K1aFcnfYAkNsY3xUlO2bglGiauiu5olpVJ06J3EUhxC3f_uMQNutCl_lpiBIMoxKNdeuZtWOuGLpj3yIyOCUydrXYK4VZEzlheVJkKDVo8rLf90FhwGxVbTQsAeRmtLgociI1DqxC4j3SWWlRKp3N.niqoSbkAsfeA_Scg.6EGDhccTnixlOE9.GXIwV1IfZ5Mj5Tr6x037QHWsYsujXCd5OyKki.WyKE84ULX37MTgaCj1FLr_Mp3E6Omye8ED0LV0stD4Q0uUfo50edMsfa5jWRGQfJ7NGvmKJYNCMoFldpVw__wj.iCqpQGO7UgQKCyX8nGR74Nps2uTBXQChYSIejzY8mFlx5PzA.7PR5PBYoZ.TnZNDWxoJxgLP2ivHxNs9iOyVBNwKQuzjTojdmftAQIFX4ljgqOyzHz8V.tnS8rcD7czQYYkSIkQeHf7fVq1o2SIAtDXfRZoW5B5EbZOSdMFisFQT3Rs7pADHfh_9PmDnHNq_S6EDxc5PhdV1ONINsMs7US2ETfyCTi73ISjKJ8IS36Ac43n7xcJGlvzvmPYaX9rcyMwPrAcryo7wReUAmuFULaPpR_rrFEK2vqsyIgnxGNtEI6K4GuLILTVSOJagLSCKdq09ucpOOhhIzrCODIUVAvIutIUGolFs.yKfeGfcisiap_6JM8ShDaK7HRKKCUQGWflW8aEfO_.T59JNKGr51UH_Wb.hn4M0KGoSVCVWIp.pcLWFb0L48YwGpjJRKAIJ1CE_d71ZCpRkStj878m_ZzYMcp6VcrFfwCrlMSesLnPMet3cPbJtJdR4t8A75N8uL2EBywj9kVTi5HJXKV7M91fCQtrS6kJV_egfXnSJqMPvAQoq1gE7t4520rbArOW_us19nM5O93LV.FVwwYTANdWzbIgkdDz3uNpni0dSTmaffvQ2OJdH36iwpGOTV8ErQhGqxYphKC2nXRt9iR1dLrxy.qd28dc5C5YAqNEJOPgO6MsKntocWHKA6rO3LuMsYuh3QIeRqX0YXJF5k0zg0ddRv78lBpTSG2hUB4agXKqpeyHhdakXf_zf9KHwrPFvz1qppKrp5j6OaiRgTS1RyB_0IcKZfAjXrVYIQmqPobrQ1HSEwYRp5QA1h_9EfEtp8FU9MLJ0pML11r97haEPIE4q_78tWjGTsQj_xtS1gBhBL6Nl2v9sW4hlZmrN40rnRDv9SWq1F8RqlW2AqlTLwyJfmV7pzGEIHgrvKgim4EBPBFb2Jufflv0YgCwnaltEzt55lGt01pRz2PP7pcJckFY3TYtAjnJADc77BVU3TNSuiwVVc8QdOawPvjHMMF4y.nVX5JqDphW22K1y3FT87Of9j4ngkTv19CwR4hHMHjTvlT9i94PNRe\u0026b7ccb60c033d1c71490c24cdc8a4b2e4361927065f6c2ff5908fd04d55cb6383=Wnij3tbyQuKHjbX.FX0Js8LDaaZseBSrh89D_feIEnA-1767322109-1.0.1.1-43IJEt4HR.6o1_LWESvj8RMig3x6KIlPFfQ12lFJHokKs_AeDguHL8onIpV4.TLkCOIaW4iu47bh8nyC7afzR0WXfY1Uhs7fVImCDTBZ_Dyrx1sVQSxi0RmMR2m0an84cPLOoXNNf.fGPA23hatBQNGCCZ1_udTfo2P.he1eMniSkgmLUTn8p7S2mKcoV1tv"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Bp6VtcSTaw7fyINzWKJ0bR2MtBNNdPeGfr91f32QKx88%2B0ZWzHTLTd%2Bta3s%2BvZ2UVwQkfaib3gJsXgmz5m3K9xyp4OpGKQqC4WXvqaJVCKwWt5oi04XKQi3ik%2B1gdl4aB6UuCCuZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-robots-tag: index, follow\r\nlink: \u003chttps://duangdee789.website/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://duangdee789.website/wp-json/wp/v2/pages/17\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://duangdee789.website/\u003e; rel=shortlink\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b76f00f392fc272-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1288\u0026min_rtt=503\u0026rtt_var=598\u0026sent=110\u0026recv=44\u0026lost=0\u0026retrans=0\u0026sent_bytes=94338\u0026recv_bytes=16240\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=11955\u0026inflight_dur=69\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.32.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":197654,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57626)","md5":"6d9881fd09c6532fd09835150bc66a27","sha1":"93f0adca6f7cf3a44e8a4af6e62dc9a622656502","sha256":"656203158421df65bb142c59a8c6a716fa0c4361f63f22a8175d4333bace7f46","sha512":"c3e06e444c7b2757f5860cecf446f42803a26c22708fd7c035977fdf14eb85084c366fa4c543823078e4509ada3a78c235f173eb6570c4c7740eebbe6f22103e","ssdeep":"3072:CU23DLUYXLxnqmD/8BZ5hlIVn536X662nitj3Gv64+I:CU23DgY7YmD07j4","tlshash":"2814fa737b855836312f139ed21bb70c615adea3db4df2e1f0b9809851e4f9231a264e","first_seen":"2026-01-02T02:49:16.094843Z","last_seen":"2026-01-02T02:49:16.094843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1628,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_6_f15f349c2a64bb66fee0378c603d6397.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_6_f15f349c2a64bb66fee0378c603d6397.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2340109\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01ab9fec272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:48 GMT\r\netag: \"6909a7e8-23b50d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lL5bKQOU4bvOdybCZHJtgUE3HYFVOKJykk0nS2PjFTpX1aaclXrz3z%2BrhLg%2FffsTRU65qS7vidzg03k8vT3krXGsvJZyNzGYTPorg9%2FXA2tyRdQaobsON38rbcvhuG4rryYKSAlp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1779\u0026min_rtt=503\u0026rtt_var=620\u0026sent=486\u0026recv=119\u0026lost=0\u0026retrans=0\u0026sent_bytes=456631\u0026recv_bytes=43377\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12375\u0026inflight_dur=132\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2340109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1040 x 1040, 8-bit/color RGBA, non-interlaced","md5":"de47e6f15b028026d4c2c688368c3819","sha1":"304cefa12d98ee1c6e4eee66c0d5a371ac68d420","sha256":"70f64119a10504b560753f06e8f32998cde98a128cb419c0d93fe737820a7bf2","sha512":"06db1925287476aba6681d7e3be4c70b80ba8a05f4368a82647564ea84dd360d2f7fdcde95d88251db53b686070b53d68a8c56ab28b0ba8edaed7cde04811601","ssdeep":"24576:Ls6klxZymQGn/dlBMxwGpcN4f18RGKrb3i1/0f7ElkUv2:oD/QsVzTHR/+cj+u","tlshash":"12253366e5e262ffd6d7525e503c1e15222e0f0abf0dca8ca9b2c908cd723a17505fc6","first_seen":"2026-01-02T02:49:16.095686Z","last_seen":"2026-01-02T02:49:16.095686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hx2GJWLKXCxCbCiVIeLdoz%2Bctt0iR4vwJg%2FWU%2FhhrIaFK6pOPTm40e5qER02Qu3Zk%2BTrsjXR%2BJ8MF%2FL0ImFqh9S%2FcYfsQNNBeV0XzL1nlTECmemdyjAXkYjt8IDaVBSIoKB4xYuk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa18c272-OSL\r\nlast-modified: Wed, 03 Dec 2025 02:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fa2d7-14c2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2081\u0026min_rtt=503\u0026rtt_var=206\u0026sent=771\u0026recv=159\u0026lost=0\u0026retrans=0\u0026sent_bytes=767754\u0026recv_bytes=45520\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12404\u0026inflight_dur=159\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-06T08:15:15.634885Z","times_seen":109269,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:20.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 02 Jan 2026 02:48:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AKHBpvgTR8Jbv2sqkkIAJYRSN2N%2BjuHQ5eMEXcx0GXRtFq1H6JMmusPFvWTsMUMTC1nByRFgDzRXd%2Bm5AHoSVbj%2BqQEBhkmbqFGeX2Q9R6Lcxu%2F1cxNd3R1HraskPrUsJpJxaRfy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b76efd95aa556cb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b76efd95aa556cb\", cfL4;desc=\"?proto=TCP\u0026rtt=5065\u0026min_rtt=424\u0026rtt_var=9187\u0026sent=11\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=4050\u0026recv_bytes=1313\u0026delivery_rate=6884310\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=38e7c79c50b9846b\u0026ts=1141\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=orQE1ukUlyum8PzccMZCtETpXYy47pBZXKL0tFg51Sq8v1ZEVLgezsD1TbqZr%2FhR9lQ%2BIIQPNL8B4cDa4vxkqJSv7J9FDnP4zhrWragN3isDh6sNoYZqkJPDF4Nn49H6Jdemwthw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01ada0dc272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-164b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2322\u0026min_rtt=503\u0026rtt_var=842\u0026sent=573\u0026recv=125\u0026lost=0\u0026retrans=0\u0026sent_bytes=551767\u0026recv_bytes=43672\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12388\u0026inflight_dur=142\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"ed844a75bd2d74e3b64454dbfd440ee2","sha1":"4752da699b014fd519214fdbc6a93a3d6001edee","sha256":"4e33012a7e35a968355090bea6b8f31ecbd88b9d1660e76b9908d556d9e640ef","sha512":"d7dc3acacf33b697d0841f92473f7e508e0cb2cb9458f836c4bd972edd35449ef2a50c850588e8c69b3748b56870d79a36f4574445cb5394b5631950a6dc152e","ssdeep":"96:B87AtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:LsNukQ6jq9OVM6MeHGlQTvog02","tlshash":"47c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","first_seen":"2025-10-05T16:15:06.677014Z","last_seen":"2026-04-06T06:39:20.174912Z","times_seen":10219,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q76eqzrs4l096ab51v2p549JNv5Uk8EXRJaC4I837fFg9RtRg04BVv4ouM5z6H5EvXsS%2F0kEszMkCQuCTwIfaM0eM%2FMhe2vAPaA8JL2LbFWCEl0TJlp%2FpI1%2FJylo46Ts6PIREfxx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f022aac7c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-570\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1553\u0026min_rtt=486\u0026rtt_var=754\u0026sent=12120\u0026recv=1042\u0026lost=0\u0026retrans=4\u0026sent_bytes=14024116\u0026recv_bytes=104365\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=210341\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13623\u0026inflight_dur=1081\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (1352)","md5":"aacf22a07f3473154075e56a27fcefdc","sha1":"ac7e2ec30585bea63105e09bf249f20e459a9442","sha256":"3880eea31c8c66dd237eaf8167f0cfa85d229a111e5d50c75a07a1a748bdcda9","sha512":"ee19159190bc43676cde0d7960c2fdce93c4c85c3772c066f6a785d6bac3323e5fce2ce17da9352b5d23bfadd6d016d88f6d5a772f102885e31693b80136aac2","ssdeep":"","tlshash":"4f2103f370a398ed48cf148a34522d16f1570d6ca885a01ef5aa08db2472e853362634","first_seen":"2025-10-05T16:15:06.697128Z","last_seen":"2026-04-06T03:26:17.362072Z","times_seen":7907,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/table-of-contents.339d2b8b27914b2a038a.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/table-of-contents.339d2b8b27914b2a038a.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jn1jhhka90u7ZPyWcxewtrskgC24wtHjwBkQSaJIrYPkZZjLK3lz374%2BiVhtZHQcbDfTGnFdnxgt9x79L%2F8p7LQBK1buT1Xu6szd4Y1FMqB7MHPjx0J0ektSFVog%2Bh3ZoCH7cr6G\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f023bae5c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-20aa\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3116\u0026min_rtt=486\u0026rtt_var=302\u0026sent=13909\u0026recv=1104\u0026lost=0\u0026retrans=4\u0026sent_bytes=16082932\u0026recv_bytes=107495\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13792\u0026inflight_dur=1212\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8362,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (8318)","md5":"366f530b827d1b10439f30793a8b2901","sha1":"91658990151b5b98ca6aecfe5bcc9f73f0d0af1e","sha256":"2855ab5a44a5f95fa5998d3abe56582d980a5e6102ae7341173bfc64fc5d7c0e","sha512":"2eafa627650bde18d114b3aca863d13731f26cdb14b41ce5d97ef7254e4135141b675521aad2aa89fd58b608265b2f17be718ce88c7068dab286c3b8bd8c2fb2","ssdeep":"192:hvezxdx/SwZY4L/lhuBkZgJBZ8M2I3AmJZZ4BB3ores+QhmDaL/vItRte4una:hC0wZY4L/lhuBkW8M2IwmJZZ4BB3orXg","tlshash":"210272273042acb915ce608f74171325f60556acf402b8eeb9b94acb66b1dd533b837a","first_seen":"2025-10-01T09:17:23.393949Z","last_seen":"2026-01-02T02:49:16.098138Z","times_seen":6,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Prompt%3A400%2C600%2C700\u0026display=fallback\u0026ver=4.11.10","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Prompt%3A400%2C600%2C700\u0026display=fallback\u0026ver=4.11.10 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 02:48:31 GMT\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4607,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f436e97b2882249a90698a60b896143e","sha1":"8bd93d677f8f4db58af931cafd8d78aae6b34bb9","sha256":"e21c05a1e7ad2baa726e59a9f0a960d39852574337f7a34ebd5161a6d731a713","sha512":"e06d33c3a366b1f2a8e8dfb3e2c1951c47ea8992eebb60c8f761e7f8608fb8791a3994e23e9c0f2a7609321ed291d20bd7ffd9bf2cf7a9cec15c6bb9061b42e0","ssdeep":"96:hOEP9NDOEP7OEP7Jc+ufOEPbNiOxMPVNDOxMPUOxMPMJc+ufOxMPMNiOpP1NDOpG:zfRJfMsHjg4C+nAjYN/","tlshash":"1791aa7004269504ea930dc663cfbf32ee4eb1627450857aaffd198cece6c255351b9e","first_seen":"2026-01-02T02:49:16.098836Z","last_seen":"2026-01-02T02:49:16.098836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":313,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_5_a45e6b7d63d736940ff6dcee55e92d31.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_5_a45e6b7d63d736940ff6dcee55e92d31.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2154289\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01ab9ffc272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:35 GMT\r\netag: \"6909a7db-20df31\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7FMKJDYkCZgP4djvc0KQkZU%2FHRqypeFRqy%2Ft24z7EE5Vac2Byjs4b2j5E1kPMl%2BDMUOSNOycyNYtfnsIvECqR17pu1rih%2BerGgN5y%2BgjvAifYLjXaL73uOLs%2F2aSzMdqSS5HfxCI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=839\u0026min_rtt=503\u0026rtt_var=177\u0026sent=354\u0026recv=110\u0026lost=0\u0026retrans=0\u0026sent_bytes=306909\u0026recv_bytes=42958\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12364\u0026inflight_dur=119\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2154289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1040 x 1040, 8-bit/color RGBA, non-interlaced","md5":"d073f02035e965efcbb77ee7eebc3dad","sha1":"07aa884b508868a81c3b7787c21d6045e51e363b","sha256":"21712492dcadc05ba64559ce5aff2a3fc2bad838ea8f8671b74b6a150d35b8a2","sha512":"8742b00c474cf3167f175685f6be1b04368c94a620d2f2cc7d464c8bff6b1708327d82355d0709c3a69702d6906c5a4f13bff06e4b32163e5f965f7675bcdb06","ssdeep":"24576:AdGY3xEYVpAPeqfkhPDgdoJwRZ66osQpxsEHrLIpJ7/xBGqUMk/:AdfhEYVptqf2PDgdjZ6SQpxsEHrLI7/E","tlshash":"b325334ed1c4e1f8e73be135512adfac02bc8607bb742bddc9f4858a9115a89818dfd8","first_seen":"2026-01-02T02:49:16.09967Z","last_seen":"2026-01-02T02:49:16.09967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":540,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.php?action_name=%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20DuangDee789%20Wallet%20%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%AD%E0%B8%AD%E0%B9%82%E0%B8%95%E0%B9%89%20%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5%20789\u0026idsite=77\u0026rec=1\u0026r=326799\u0026h=2\u0026m=48\u0026s=33\u0026url=https%3A%2F%2Fduangdee789.website%2F\u0026urlref=https%3A%2F%2Fduangdee789.website%2F%3F__cf_chl_tk%3DtkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\u0026_id=56dbd5952c561a6d\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=jqPiPA\u0026pf_net=0\u0026pf_srv=1628\u0026pf_tfr=4\u0026pf_dm1=922\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.elestio.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 23:16:36 GMT","end":"Fri, 27 Mar 2026 23:16:35 GMT"},"fingerprint":{"sha1":"56:9D:42:AB:78:96:44:FA:42:97:86:71:E1:CC:D7:61:6E:F8:9C:DA","sha256":"4B:CA:5D:9F:67:5C:41:C6:9B:52:5A:B7:2D:1D:32:51:18:31:8A:DE:0E:6A:79:FA:FD:15:A7:A3:98:76:0C:F8"}}},"request":{"raw":"POST /matomo.php?action_name=%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20DuangDee789%20Wallet%20%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%AD%E0%B8%AD%E0%B9%82%E0%B8%95%E0%B9%89%20%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5%20789\u0026idsite=77\u0026rec=1\u0026r=326799\u0026h=2\u0026m=48\u0026s=33\u0026url=https%3A%2F%2Fduangdee789.website%2F\u0026urlref=https%3A%2F%2Fduangdee789.website%2F%3F__cf_chl_tk%3DtkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\u0026_id=56dbd5952c561a6d\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=jqPiPA\u0026pf_net=0\u0026pf_srv=1628\u0026pf_tfr=4\u0026pf_dm1=922\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: matomo-red88-xdev-u39818.vm.elestio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\nserver: Elestio\r\naccess-control-allow-origin: https://duangdee789.website\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T02:48:18.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 02 Jan 2026 02:48:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SjhaDjiYH3%2FZRTjM8V6ZpAmx0clun2O%2FQOeuIY5ZdozS0OkVLMMNwvQbE8jOJMuWKw6kiV0TeRuJg5Wa8w1FCBBmHd7ULkfudSl%2FsEtWXVSCMGNALYn%2BbWasMfNBU%2BleL35bPsgG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b76efce9f1eb500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b76efce9f1eb500\", cfL4;desc=\"?proto=TCP\u0026rtt=496\u0026min_rtt=431\u0026rtt_var=154\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3226\u0026recv_bytes=1128\u0026delivery_rate=6862559\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=5c037015d4d5f599\u0026ts=27\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7218,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7218), with no line terminators","md5":"261f0691de4ae64244949a0ab9d8e0aa","sha1":"7d3a2ba3d1b232651340120ca1118b028a57148b","sha256":"58cc95ac3a86addc0f6402dcbf45bcab2341dbbebb5cdf5c2ec3b156a04f66ae","sha512":"9edeb13afda02a3f49d6e87474cd8a768d07150461eef8e74de52c5b2532a1e6386a8656290390f40b7133f13f1dea47e3efbbb0eaf21ae600852b45fbe3ee7b","ssdeep":"192:PNadBqw8fG5tO6+lcRubAnLf/ztylrJnCYAxf6F0tyJdw:03TPO4RH7btECpf6F0gdw","tlshash":"6ae15bf72a41a03aa3ba57d74d6f736c6420e149c700dd59b9e3998cc6cfeca810e65c","first_seen":"2026-01-02T02:49:16.100439Z","last_seen":"2026-01-02T02:49:16.100439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":59,"dns":41,"connect":1,"send":0,"wait":13,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:22.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Plt6QReJqMjkVjst' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b76efe1fe3d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214107,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"ac469468be1da2fb86a9d99d388640ef","sha1":"045b1239a881490468bded410e13d5ea72b1dd2f","sha256":"1e904c8fdde90333b2a22625293157172536b9456f52aa9764bc93f735242237","sha512":"4987402c29f760e552663f0846dac2948a35f932d2d3ef32fe0e14c15d250fed5b8b08bbda21b74d084faad598efc44e0907c8f95270b38246fe6b255d428833","ssdeep":"3072:LZXdDA1iLUwBz9Y22Fjs3NCfgI7t1czEm:LvDA1iIw7Y2DNCoDEm","tlshash":"a324098a38dd75ae2277603d112770eaf27978c474085c0ce16179fc78ea718a367ee9","first_seen":"2026-01-02T02:49:16.101356Z","last_seen":"2026-01-02T02:49:16.101356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9b76efe1fe3d56ab/1767322102526/VsG01MOrDMZAHHs","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-02T02:48:23.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/d/9b76efe1fe3d56ab/1767322102526/VsG01MOrDMZAHHs HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 159\r\ncf-ray: 9b76efec19d856ab-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 13, 8-bit/color RGBA, non-interlaced","md5":"c65bb9cc939cd138dbf217f480d7ea2f","sha1":"9dc8ed2d5f9c3a8adc85337b1c2c1bede811b062","sha256":"a816fe332c9121e6d939d86151b3495cd36302c3a0bf1256c78bcb96613dcbb9","sha512":"91c913ef13514035f034225889759a5070d891078a38ba10892e012bead1a9b9de3ecca9ec74e94066c52bf9eb113a2359e8b8b9f1e6e452bd5d20863cbc606a","ssdeep":"","tlshash":"65c08cc9a1f4b430abfb2c3e1110a32748af02120c886a54729d4a313303cc8a081bd2","first_seen":"2025-05-27T23:09:40.688301Z","last_seen":"2026-03-28T06:01:50.368825Z","times_seen":99,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fJJKaeYqB7hPRuOXT5ZFQx%2FCyegZvGIhe5c3YgeIiIolka8%2BBLdS6bAI0p7zWtAnqs7e8MR90rATC6%2FqEkrHWz920g0QwG4qQwv72Xn4%2BJEuvWYoTqbzVj%2BKrFzalRlSgcqIw9cn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa14c272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-1590\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2100\u0026min_rtt=503\u0026rtt_var=209\u0026sent=786\u0026recv=164\u0026lost=0\u0026retrans=0\u0026sent_bytes=784483\u0026recv_bytes=45800\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12406\u0026inflight_dur=161\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-06T08:08:39.102109Z","times_seen":148294,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8qDcC0SSyk7HOssivb6SDqjtqAgyetpi3MkKDIQiyTaBOjx5TKCyNlwexB5eytqFNpN9HZwdF6fyiYohVKPfI4CfdaR1ICI%2FjWLUICR%2B8lOYqmMpMTpswdakmk31vTHlqluyKbYR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa16c272-OSL\r\nlast-modified: Wed, 03 Dec 2025 02:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fa2d7-161d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2100\u0026min_rtt=503\u0026rtt_var=209\u0026sent=786\u0026recv=164\u0026lost=0\u0026retrans=0\u0026sent_bytes=784483\u0026recv_bytes=45800\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12406\u0026inflight_dur=161\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-06T08:15:15.595894Z","times_seen":110472,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo-red88-xdev-u39818.vm.elestio.app/matomo.js","fqdn":"matomo-red88-xdev-u39818.vm.elestio.app","domain":"elestio.app","tld":"app"},"ip":{"addr":"167.99.65.52","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.elestio.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 23:16:36 GMT","end":"Fri, 27 Mar 2026 23:16:35 GMT"},"fingerprint":{"sha1":"56:9D:42:AB:78:96:44:FA:42:97:86:71:E1:CC:D7:61:6E:F8:9C:DA","sha256":"4B:CA:5D:9F:67:5C:41:C6:9B:52:5A:B7:2D:1D:32:51:18:31:8A:DE:0E:6A:79:FA:FD:15:A7:A3:98:76:0C:F8"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo-red88-xdev-u39818.vm.elestio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 22082\r\nserver: Elestio\r\nlast-modified: Thu, 28 Aug 2025 08:59:22 GMT\r\netag: \"10933-63d691f0bee80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67891,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2915)","md5":"37d584a0c4c6417b8202e1ba1dcd669d","sha1":"924c9ef817e07dc6cedeb75d0681a47a0744e46c","sha256":"d6e4a56dc9b760f4aab10fa9df737523826bd80205b5ba03cb8fe641d488bd5e","sha512":"ed09e5d96a93ac3a3a7d89dcf43c51b3ef93bbd31fa4e68a2a25f776bfc0bad69282ae8ea0f65567cde7ec123efc912a74b62a80cc1615430c4584839cd54a1d","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuX1pM4llTSRDgF+RQz4KytVoXIl7IC4FCQaFLa:AT+Z2fuvIlQsKyDUIlSFv5","tlshash":"7563c6ce72c3753a9bca6074a03f114ab2799daa1448c4b4e629c0f53c3891da57bf7c","first_seen":"2025-06-12T03:16:41.165178Z","last_seen":"2026-04-06T08:29:30.065227Z","times_seen":6154,"resource_available":true,"data":null}},"time_used":2735,"timings":{"blocked":772,"dns":31,"connect":370,"send":0,"wait":1183,"receive":5,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/12/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-1024x585.jpeg","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-1024x585.jpeg HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 128741\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f02a2b74c272-OSL\r\nlast-modified: Mon, 17 Nov 2025 10:28:24 GMT\r\netag: \"691af8c8-1f6e5\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dAxfN1W54ZssJ4%2BjROQ7JyfcyOQ%2BwQTizezKBkvF7yOZftet0HAIMGG6Nh45UqMJdGqFJw9e5gY63NOvLrTCHjdPIEMknrCZOiYPkJxBEj7O2XApB26J9PKL25HE9NqrXQpmob8e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2035\u0026min_rtt=486\u0026rtt_var=1386\u0026sent=14632\u0026recv=1124\u0026lost=0\u0026retrans=4\u0026sent_bytes=16931757\u0026recv_bytes=112240\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14828\u0026inflight_dur=1304\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 1024x585, components 3","md5":"0203cbd5173494ded2185fb1f51f1ed9","sha1":"a1c7ace41161b2fd1d0da78157958e193f180163","sha256":"9c3ba0ee99f6ce803f1c9ab8e1014590ac74e65a3ef708fdf3dd3c0f1c25044d","sha512":"ab0185e84e1a5a3765e3bdb220ea865af744437d191fdfc48c9e82ad2b02a9082ac7e63f7952934ba6179026127476c2b0ad3fd0b9c86d9c0913d8bd3780e0df","ssdeep":"3072:+C+MhixlJxYMWx4RzJ49w19uPRxstMrb1ASuMr5Dlbds:+CD4xYMW8L1ewtMrbTuklW","tlshash":"e0c3132f61e3c05cb9aaef85a1c663160329d8f1d2460dd52633dae5ee473e63c017d5","first_seen":"2026-01-02T02:49:16.103777Z","last_seen":"2026-01-02T02:49:16.103777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZOJwdtlGXbvzScQzlqV1NuveimtA2yvuPYD55rEiaBQsTwtAIhFW8dW4miWoqUJkFON5y0iuU6wYXpc1p65M2xRoAVCi9Mn0oUFL80F%2B8KBcbGVrUiOL6SGE8STIeg6MUidccq6l\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01ada0ac272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-53d8\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1853\u0026min_rtt=503\u0026rtt_var=489\u0026sent=493\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=463831\u0026recv_bytes=43471\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12379\u0026inflight_dur=132\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-06T08:08:39.124429Z","times_seen":219477,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_11_game4-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_11_game4-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55672\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01fea80c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:15:02 GMT\r\netag: \"6909a7f6-d978\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BtdRTrW%2BAVQV2Y4tRXfO8UWGeaqgAKl9HH6rkoyZYUKSWzhMtEzdP1ZNqPojnnWGlmPzZ0t2LAirvpXQM6eIADkDfqHZPsPx0HB6sG%2FwulIIdjtPtgZSJAlzHX7IDn5Zb9eoB02j\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=7979\u0026min_rtt=486\u0026rtt_var=10518\u0026sent=9389\u0026recv=987\u0026lost=0\u0026retrans=3\u0026sent_bytes=10780620\u0026recv_bytes=94906\u0026delivery_rate=76687116\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=113221\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13201\u0026inflight_dur=954\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9be9c2ae7c4a2747d12e4bf1fdc223c6","sha1":"23acd29ce55c0f3e4ce89b25e7d1bc8d0fc873a5","sha256":"f4d3fcff7318bc09705ab19eccb0ad4212a1c04113b3ba951ed575a9b1bba40f","sha512":"3009bd68319e0d82a28526466d1740525981326cd503b95161da92e81652cde8aa34aa154d1fd09151d1efa62f8e11638a513934b7a1394ab4100468cfef5016","ssdeep":"1536:0lgeqTtGGN7knshWnJpHeUy0bLehBVQkhEvvsRO2:0ljAUGN7ksht02hBIvvsRv","tlshash":"584302c7a3715104d046d570747ba8c7ced965a4f735de8eb682cb3036a874e48e06dd","first_seen":"2026-01-02T02:49:16.105598Z","last_seen":"2026-01-02T02:49:16.105598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":214,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AMDejHtFO4bNAJFmH4OYJBnlYHr7z9RV9t25b0Szu%2FkpaiXef6%2By6fDkPlhzrZni4CyAFB%2B2nL%2BkXRicGAOfsbGpCTrGahdxRQHIVmDJmHwz7r2yRuFq0qqku7zR8Z0JjxeTbl7G\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0287b4ec272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-cf5\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2171\u0026min_rtt=486\u0026rtt_var=1488\u0026sent=14568\u0026recv=1120\u0026lost=0\u0026retrans=4\u0026sent_bytes=16861314\u0026recv_bytes=110415\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14568\u0026inflight_dur=1300\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3317,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (3273)","md5":"15b648525c3c855d24bb0dc2f2137971","sha1":"8d7026d2089a135aa1c7dcfa5715dc35b6437d74","sha256":"eab5bf435b601d232d0a9f08786d544348c999b99c3d8152fc28680790a6d1fb","sha512":"2a155a2db1913470219af920596d92718695c660c261895959a7fe9a9beba7c42beefa1817ab3718acdcb13d68706c0c402a0af37206ea51b640157bd7cea521","ssdeep":"","tlshash":"2861785535966c35ea8f418bb40f010e6e021bfaad0570c9ba69d8d69af0fc73361b70","first_seen":"2025-09-09T09:02:24.899682Z","last_seen":"2026-03-21T10:46:49.141252Z","times_seen":115,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/css/main/plus-extra-adv/plus-extra-adv.min.css?ver=1765588997","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/css/main/plus-extra-adv/plus-extra-adv.min.css?ver=1765588997 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jL9l158yxNn%2FgRMQCeO07FIAww1ULZCBlpvSrgV9%2BeVaX2WdrWCFICxhd5kUvOrYi0mbUKTkqAPhR832qcP0mRROxdXmsknavb2gR993pXMXoXZj3IlWtWOqcUBgaWMLt%2FDVvMPM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a89e6c272-OSL\r\nlast-modified: Thu, 16 Oct 2025 01:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f04e40-1315\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1104\u0026min_rtt=503\u0026rtt_var=351\u0026sent=195\u0026recv=92\u0026lost=0\u0026retrans=0\u0026sent_bytes=141283\u0026recv_bytes=42112\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12335\u0026inflight_dur=98\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4885,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2826)","md5":"e89fc8da0e8e5b6c0c102e26644e5ad7","sha1":"abaa32d7f967e3058d8cf11cc5a6a6c340931be4","sha256":"22eecf62b6954699b1b378a7af9e16896aaeb1b2803ba11626fac25fa7f57c5b","sha512":"3e9a75f684aeeb3be2aaddb5371f251cfc0dd339dd6f0098f35a64a2089dfda283e8cdf892f31fc64f679e14933267d024c3316c3b7b8212d17c1277a399ad6f","ssdeep":"48:zoGpT8KjTPVd8R7tKC4IKeZV6EIemEX6EIeR6EIeJ6EII5xyxvgI8+PycT7hpCao:zoGt8sVd8a3eZ4EdzqEdkEdsE9MJmsU","tlshash":"4ea15117a9d02018d12b8726e1c2176c6d3cc613ef7734db7311392a87a765a5163b6f","first_seen":"2025-05-13T03:18:24.329165Z","last_seen":"2026-04-05T20:39:13.66715Z","times_seen":638,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_13_game6-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_13_game6-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32562\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01aca03c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:15:04 GMT\r\netag: \"6909a7f8-7f32\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B7RjmRbeW%2FM2srDJSaZ1HTXlaVUQ8da%2FWBB%2FR5V2%2FQ7iOXKTXxGw9lMPAsjK8LsPgycE%2FibUpN2FlfCeIMTk6xgVv2Hrimwi8QN3xIyQNWDrBZnf4uWsfxY0WiawbYzJvyv334G5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1669\u0026min_rtt=503\u0026rtt_var=767\u0026sent=453\u0026recv=117\u0026lost=0\u0026retrans=0\u0026sent_bytes=419863\u0026recv_bytes=43283\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12374\u0026inflight_dur=130\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b757c80aeae12aec7cb55cbcb8645a7","sha1":"4989a32cd7c9dc519ab36ff3e6694269c4dc4514","sha256":"a943e179f4d2971febb7357b515f874b57214f5e5cdae9dcfeea72f7df476f90","sha512":"0da13e73eea2ec2bbe64848a4fa8e32f63d09d060979e731699397b123cf27a0fbd2a71ea579b853ee6596e5e5852635805887898daa0ca7af4736bc8b7dd9b1","ssdeep":"768:gThTDvImFUdhAaHBfGcchrX38NfT4UEI+j:+vjUdfBf7ctB3","tlshash":"c4e2f10837955f92f36a1af9d5651382bf1aca4b596dfd241490ca1f296b0903de820f","first_seen":"2026-01-02T02:49:16.107514Z","last_seen":"2026-01-02T02:49:16.107514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KdNodVkI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KdNodVkI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:22 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489970\r\nlast-modified: Thu, 28 Aug 2025 11:24:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13192, version 1.0","md5":"411c0b4692c9ef0bebdafff2a7d12ada","sha1":"481ad8102233682a320b606ad91acc016fbe6be9","sha256":"d10643e148806b6ec9976370cf78b43b0542b6c457ca14b5fc89a5d2fdd156f1","sha512":"d64327c83cc1635dd6503525dbeee80c16ab938e77c1b2f59ba0f72aed4510618dfab01dd97ce2c03e23fa01f7db80763f203ff931f94ddf37ef839bbcf8c984","ssdeep":"384:yB4Hky5vaUfUEk3hXAVcyWd2mDM/JLIU8:hHky5vjfUHtAWYmDUI5","tlshash":"7442cf536094626e71f41fbe84d886543af7a2b34bd37a74d130981391fade192f4c2d","first_seen":"2025-04-28T22:18:44.543524Z","last_seen":"2026-04-06T05:46:53.211235Z","times_seen":1096,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":322,"dns":3,"connect":66,"send":0,"wait":21,"receive":1,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1567218548:1767320842:Ikc2vlxjoIDwrFEHa1E5tHlLK98GFEMcnVKuKZs9gog/9b76efe1fe3d56ab/DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-02T02:48:24.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1567218548:1767320842:Ikc2vlxjoIDwrFEHa1E5tHlLK98GFEMcnVKuKZs9gog/9b76efe1fe3d56ab/DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: DTNKu9ufdJmW8yf8PUxjl8wGD9WyugOMrpx_XHe271E-1767322102-1.2.1.1-unOQ5ioyPwYgaZp89IQpWYRWiYu46fQnP6cqsbEdFl4asN7FGntmfKeJOMw7A4Xy\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 34466\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34466,"data":"hpGq8lHtYJJ6Dg0CN9ETvc0fDsi6BSzsMn+L$BTO0qVI7LAYvvNIxtkyeTm512baoJQuNqN3HxbSIaHVN$RrdqKpcP40gb4tRBj3op-KcPdx$DzZhC4gmw0SivV0d4faxvOnVdygLi8PIZEIAPNrMn9p2ucNwRurItNgrixBf7m3tY82md$Dl6zLw7zZpxmZynq0r2Xt5$Kszz2mwyKfqsnOphxReQIvJVvk56ggUaz$gIlNzYHw-rX4kRvv3QMzXMyIn1c3wLZMmRBw1Db8D2-Oi8anTOI0ppiBs28nnsCP3c3AIHRcID$l$-h$x1gTMwjRKXZ5D6qTQEtWiT$MGYgKzNA56n9-Bf+$cdXWVXaYbo7xetp1HWupRGlTchTaJOqTbvWTSyfhDzq3CN2qyS+4f+hVL4s5p-J47rmWAanXtS3azAVHN8W9rR1isjWN7zO5zhXx9HovYa6k0Ck9Rl-WwjdSe6dqBKPp34HUlbX$-Enn4lxZRJKefRODptGpBckXQkprvKACv$-AzJcC5$5CE7P1uWDt$P23suxerfvz8Tw$UjJyy$9iQ-ujDnSdXX88nE15CKD9kKzC+gTug7wqVzvab-I4waqgP2tWJyPVK2YJr-jH9OvWh6qdhaYALKn19Ux52uUtmaIoKV8erzhyDgLJIIeZfLX+3XVs2N4-U7R6qxKtrp3wihZ$7sShg66HEPMsI7agAi1XZXVzgyBEiECk+kIz2zyP6muKxmtjKB7qQ893yN$DpwkTlQe4hV9EVOaVw1mLEKy6O0VQhieLuLPPKQGAMM68ihRUG5CLZNh7Apgqm4i59zNZnhEO0CvTVP3JbIsyxNYI2s2fg8$N0cOlic--3ijxiUKe+iRrQIAsY3RTihThXin3jmRjovjoNyDHyx2a$46euZoX3KOkl+UwoxVknu8AlpmsAJMRaWSQTgPtvdGOLSVVamrazyWGb$jnN0g-EEgvEz6-XXeJXUbVn07mV90WW$tZ1gimsRs5bC5wjCj-sopCPOmm4in0MiIxr$knQIEK93-JLDniQai+m8shLg$GM$5xjr0Pq-XO6b1PW+XVN8eZ$IV5WzmLHOpH9iRkxZNbfx$v1joH1HKaOZ6vBaJ3ORieBkUObLnLIkh+cVUsdv0EMLJSk3nz2CcGrPG1EPXJ5jMOmG6TpPJQa7zYP51Vmh0Jlt9nR5IKnghaPBec72KZm0WLA4AWMC1glEy+RZ7dJI2msmSbL$81uU6GOiiqawR2Odw9u0kIpVsBNvLve$wrIXczSK+5BR1SPu8pYVMTWNOJ9sNWlyUaaXhxcYnnQVzjCzH4UW22fEycIQSlclu89j2mSUotLZP3aDTVIaolzRLccER8PVx+Wjj-WbkIabvfJstA9TiH5jC5idsbTLgQ4dwOcCXXBL93aZOR3RQ8-ZsQ8+jMuyMhUupKrcgt8mi3mHLjOXTM3iQz6CbG65e5YRtmw5Z3YEk51H$w4yvEIGGtmzYQrldHfwE1S0e91QHTEOtuTHPRM5UK0Kt+jnXeJwaJsEvDEXI15v9kto9LZw709l$QdnbwQErxahaOCVOGqHSuoKN-YRHNr+IoO6jXkRf4X+EaSY1J5lQ4ggNTw12oJqswM6hHJnwknE70UkNr+4Rv-8w34rjwXJ5TaR+IXuV5UCpsKfx4U1zeGITt-3rHCEmrWzhO3Wdaf5c2V3zThZGNW$6h38e2h9acHSvYOP0RqLp5cwthNpE+RcJAa+t5aKCNqWGL3GLW7C3LgJTqhUzE15tJRsIb7vwxDoj2a7lATW8po-jmrYIIb7GxanGPngzA1l9yOCOWqBKDw9WhfbDiU0y9hsyOQEBjmA4SkwlWby3wVHSnZI1G854AGMw8AXDPot$-LMk1i6ZiGiuuTs$Vs+hvTyxhZced5bxXfimCTvZlxz5$cXUQlI7-H2mreTcRK+tkri7-iJmsM6qPlNz5b6QpcqbfaDQBW04f-AtKEHgOhAaaBhpw1H6c5w2Yx+9kQvWMoUYIfjHjvehEOx69rEYsIw3yuBaogb2k2dyUed3P6+X$DG8v8l$iq2plejqdq2zS+tfy3h8LyhGiM2PdNBw-y19u9JOM9hwHKXu47wUhDZ-fy$4t5npawJKv$ck0o3Vccef31TQabCgdBnGQNzoLRiDx4X-XX9jcV7nyPJGbrM8RhA1Jqz38tLkQgofPu442siWiseQAHk6ljUzwjr1GDM1ph3L3zeUimyVmRl+w1UZ3APZHJmmV6K$tzDVM2AMwvpyyYs0wm33akZ0Sc0LedNu2jvIQNJDHaxJ1p7H53H8J4en+9KXdmVY8U1djfO0JgQAg40DRG6jAL8iXPwEL3NbzZdQvtesyR5fVerWruBwasEDW2YACUQp-qkMZ$4G82xuisg1w5DAbL2O3ke7nBlMK2ZGd$s66amHpBc-1buzQD6h9zTnL0MAIvRE-h3YGeX44qb6nmZDKMPaIggjQd8GVJsNDL3G$zi79SQ6ubLefgfx7ss9NkxlAo2NdiGIvd$ZBSsT6MjsxYvzp4gXjz5I0TInRBLjEYvw1k5NZhzXVNP0B7sa8CjNJw3aDIbpDk1uH7p9QjKgxNxdiO6V5G$YNf9pYqz$bzXjxrW+PYAKrRa8hXwA-wHufC3CZHK0CGfsvRN1iDUbu-UBxQuYgGbba4NDhW9SVWZmCpQCDxtqtsQOq9ak9g$v+TkAe-qd3-OdVfTLUAKuCPBMcv5NkpYD25PomLMAJZlecmwxHs45IrXwU8ZrjsB5QZWsclnEn2BxQ3D7puNeSPIaL44svamG2NRIhtetMtqpJGPSWo3--draWcJYrgNMLJp$YRaaqJ4pcK+wprR9A0kOj$TITtwPBb+ycRS2aNwCCWxbyl$z0GI4Pk8QoWPlu$aQ45kHb1UM+U8YC9-E5RV4lryjo3Bm4j1sZCpE7fNKXSr5puAC7HMzZGnfG5mH0Eybuav7CMJmHZAjDcgA07hu1Hp1f5CBbb5rGOiD$hTK9WrVNs4tBZ2M6snN+pMvO1x1+EPt+ZZI2HcBOy9YT4HwIydNlSaXqo2O0o6q64Dcz8R+c7aT3NrB7sI6YJf7$n+cq$1SgTn6X6B0WsAnb69hC5WJ7z5PkauYxBTzyHXHd9inY48YjG+pZLC3+7jOkZAUnNxjZTBP4gLVcwiqt2gsqyVd283YH25Dnf9giPhrqYG8axATAf5yxLqQX9SRRPA7j8BOAbou-7uVIa9xjskp7E9iddsYtQOC2620jmYr-ZSc1tp1Namb+4-LIi$fug3X6xNwyHCTTfaoaGO6MxEfUMUxWXuUdcdzsb7Umv+BKf1Lgh5$eY2j-C2bABUla95NoxVytpCZalW9jTKyOWl80xUvnKtMA3PB-cp5LshibPEJM4YIXESeAcrTLtuy7KZyB8y3hTpLcfKJzEJ6THCHqaX0vM5GeydKyIX7cQK8G+pZHQ2sdOlRQ6irIh5dqyT02SgrG9BTcHlhE77cRjcUooCfNgsroQ4PDBIM1hqIjaIPorVh4rySj$$Hbt9hZfv1lU-$Pn$sjzeJkbfw+z8OTUNzftsqmSf8nV+SNgjG3k08bzCLq5QhrUaMU1zxqiEkKrTer8z4ZM0j4JDDwu1BUeKppqPY4kMsh-t6bwzLkyLsbgP$GW5CyAnVbezKd4EGPLrbQr7bvrOofDE8mGM0M1vSqIopWPJR1Hh4dgu9+2QITWAXkuPjNbfvIPrfi-3kVkgPUgscs9lGyWDYX1j+1B0fUP-W5PtmtwOBoiA9bcV5hp4eLaAWb4VdPft-Dc-GEe2K$gH355D86ynzjLb-oLVUkeeURJVrm$5GB42tV$ovCrCM5aGc$bpEnyqdnZDxK5hqvpzbCmqijkK6Qi43jKDHrPcYtC2fKSnCG+LVoJgoJonxmVCm66i1kfb5kgRGb95Utx42hunhBCRa6en4Rvh+XWvooQcUmpe0nifv9Ym7N4EeSre6Iq3ga+G8lqAHgXRUvPkTS+UljNCfBD3yJ+TEIXd8hEx713+eH1Z5cnsZ8u7QWP2vI0l4DJd8mOoI9ThLB6b20YSfrT2ry$b5txS8WcrbHt+oJCxAZVKlBrZOdvIR9lm$SSSvCX66OvlJHJzZUU4IRe0v5dphv0sTa0xyNI1$bWrNEHMzZyG$Y7H1-T0j7UkKjuRsA4svJ+gEq5EbpMnZTK+riqCqoWNVWT2BnZj64tptyB38wDnLYAE+o2uvn33MO8jq6lXx5X8lYfs0ojScWtffvn4l1rbjCVWzV+evglfWH2Jg40g$KqpXwj-EdipSk9IR0hcS$bCYMdnk4yL9DRAejU7MOj1Hw4qGGgaQ1aYt+lPOn1lPJs2dahb3NsGyzN+EzMKkyNmQPprd0$uHL15SA8IEvSN69JKMDYXhsm2zYrBMb5JaZoLKnVjK92z3DvcsUB2pRRpdOoAC8s5oumHG3X6lI$4zl$RGNnaYe70-yo5Hw$nE56Uh5u38YhoxZCdNUKZCPICrEKWKBogGMDhe2WoTDUh2Cb0by-XQ04J$yRPqjD-o17GPWHnPsRotjqzSZntHA$jPQX6tGJGNj5exQfkX$7u$VcMSPxfg64YzyDGQ8CuVs3fqslvZuw1S8LqxYGI$Rofe9A7vyhbgc6c580CE4vHl6vO1TNCbX$WNW4tfiBdkItq5vj2wf5wB$Li$3G2wx5bOL2Csbv+LRA1K4rk7MWNSgP7lpXGQcWNP6nxALSCDjjwDsGbXEMtbMWYErWaG+MC3gOihNNoCS9-6mMzApjZiINt4L5gwfY1eJA3ID-nfKOB-GGQsz1kqmPNe3k+Bx0X09Pu1Rk$pe1b2ByAfX1ZmLW+JbfmX5RklJL6fXykOv+-d6uX8HS2zx2g4j8jevv8tzMS$J402QjP07h2a91pvcUlA3h2CmP6ZT3XyAn1qX1ZHjtI+89XLJ1ohAUmaIfGBzoKK$Xb9YMzAjlo-hTuOJzdQEbeXhX8y7dqyQJNXWdfv0QTmR2NqbEi8SHjHCsrbXIDj$8riXSXGQqpX2nvjNfGKaPZOyiQfT0yPnkJJ2iE$94X2z-iOIbrCWp5zr63uz63SnnyCEz3roXt6A-nQU+Q42ajBh346rBj2Pq6WTaeAzze0JiM+351ctKryjOWxtMMM+$DKgjYkz5xPYSHKjK8WSm3GxTs+Q$J$l6nO08vzEAeBpQ7zfOx$kr3Gn4fcLtBWtSVDBH7PpUflZXdQMpodjG02VM2a0TsWzBbM00E3uBuRSGLU4h2RTH6e4Amq0C$xRPyTb$ggTCgtj349WBx38rdOu+r-gBNkcTLndztX+YwZa61xU4mmTdH6$xG3haDvMlTmHO8W6kwDpdRVqshH1V04OAl6fbsv7tY92VC2C5YOHXE+z76dZOxz2EW5ZJ0Ggm7iDHwLcMc-CPgB5OUJHshEfMLGLkT368IC6ehL8Y+90f-7Le2XKdKBNmeveORJZxgSp1IkxXNfZEyfWGkWKOyVdhrcYcRpOOIC6440dEVZNo7uIi4zIkC+Ol7Xw5JU9uOMxylR9JwGYZvDsGQGY6TP2DwyGEcde$Kqz4mfGwrIP8wEMu4Hj6HQkM0P5bHp6ovuk-NLsOxfBLkTnc1B6vi7sc7tZeUUACHf9b-pDN86PNaecgx9fzs0zgMaEkWy9ksbaiRdjq$iWlh$2hwHy9zdNKMXnP7ZJ$-emgngbWaK3Zn5bIny2VBdSSbapwtLepXvoEgC$xrw+fHhERsHrcZQEajaUNEvw2d6AKfpzV5tkpk4MHV8PajxAge1Wcl3Z9bDD+lG+LNxULg2zuQPtQ4+epiM8AMgipzcOepXlQ8+miV-BKrB+ZnRpMVrQyevfheinsnrfyUqabawf2M8v7kVTsXb$YNv$55mf$vlz8aNjIHEI40EzopGHU-q3m+KnZ7reR+kMH-5O-iBr-pRABXyqLyfGkgytCVgLnq7DlXOwDf$RCWdqR0RUL9lgPU623zAx5PpzJ0RPQlzDuzBginesty$4VtZTpsMI47T1fpUo-tef34Pg392t5PGHDqEEkkBSqglE3erTSmb65wPdr+$xjSWsEyk+jvC$bv$W$scMve1eh-IokdzrUoi9wLmlDOzCw0Uj684rgh4fVGEMrSxqVyah79XxwH7+rbhyKC$uAHEIVOmn1NXINH1HA4AeSna1SrZ7CJ7bGw61UBGgE2XgHCj7S4BHHQ7ka9YYou3rvEA1xfhtZoD5BPG$bt8w6hJtXPzr8fB0WWwmlPB7f6cntM3OWbhA02alG6EPGxqrf+azOwfuw+Q1OR2voMj9PN05PyBY$rlVr6zpdwpu8P6L-4EVBDOM1y$lSMPSHuJO4oRXKEbA5tUfcrZ4e$-pk7$ZCBO8vAuvKqItOl9WGrCaWIpQRUERRlYVcz7t29NY1DCo5TNxmceefLz7p8$DTpazLwG4X$XpgcWz2dmTJ8OZuartMK4AVnsA$HyUwotyjdq3LpJWO6TtntRtEpwUifMt+UVQTbExvI1rWROs28M-5DB2Bxj7UDBqnLJTIXu9fCAaI4gy9CCCwTLMBif4R6lp1j6nZ$X2oEUxXHUK4Lrwm-1MitisUtReo99e4oj6I-scaa94+Q4rHajW24Eds3dXKxiK+XLN3Ii0G1LX+bTv7Phe1sLAGRUuvrPMDuwhC0gDL19SrbvuoIztsOd8zZHY2H5PR7EikgV+HbkT77fg9Wl8MCooq9Mt0TU73Rf8pOxOHqfgCJ38TIrshHp3cXzC8UT91xIK6pxQaz7CHUVlua3jjW4tBKXjmQuXXsldgSyrVx3vyncl-36jhAr7xJ2sGCKLrop3cEZ3m3shRYMLUQxHDjNxcbJi9kR7Xg8+nctG1zlb3D594Kn+vL-blaTUprlNAHJ4$icBNOU1oCEtZu$nKa4Res6YOnMcHchaVurZes5-Z4f6s42ZxRCqx34jrbA84dulks6fPd6Kf8kqyX1M2sPBlvL-kIRcWg0Q2Mzmyr9CxqjVAMDO873+dCDLqyMnKCTtATPEUGr5aESOePdMmv9ZJfgJQ$c2IPvPypgTPq5RajLmNWrmC$1qQLwwscyXxmLu1$EIsnq8GyAit0DxX-+1A2tCCdVGzyardxKhegieElRqlVIM2vqAoIT2ldXbyu$Jw5SsaI$aE1pXdGR0fly0ftMdmcXfERfKi0UNXKa6Ho5SLnjOGvSud5G1CjASCXwNeItcuc3fbqXDkhE7N7YHLWyPratGibbhDViZl5gEa$DZ--XaI2D$kktEbLyEzkdUWmpvhsv$P0aNqEBlaIsy1v7W5XOY+tHOvRk7Tc8INrEno3hvTQfYYce4kP603h0AQj8qgJulV-lk0sgmQUwi$aW+VUr$5yMYbXM$NPk59cUT4-Mt4zrodGuqZ-$+3BEIi23tUXrxmvgleIdpvPH2C9uSzLxU-BZ5VqDMqP6eaa3Z6UuapGv+O4rn5ODLAnXHchL9AvGYP3LmUrbkJ7EUMMcm-s3IdMJ+Yf+Xc947R4n8Bmtb-VGRyGXRcK6PsCMko-UhtXG9DiCm$wGfQWK14mzlTHezN-q+89oqe8aV17ihqUwsUXXrN-Of$t5y0s-xxqTppyeIQd5Ovl8tR1r7tYKK1P5jGX$p2dRom-ICUgqZCigZoDndL7UYwdEg+rR4HTJuJIvx3Y4x-IUAOc7nX6yQiKijaiMH7r7glajQU$OTr76qTQk+1Cy$2lMpguVpQsnKa6c9u0Tg$36KJ8L2AK+7zGY0c1CHL3I+TkQhSs8uK6ekv20WxjuG1H-wVPXAyjzU+fqTn6GTlqJC94m0zfCvbCAX0DombgqxeLhfThlPYy2SyLDSkt9szMQQauHd$Gdt+n-8$lg+Ed3oMe$qTDSpWfAaSbcs1A50hI+Kn2EYIc0QLHVQ3l15nyKxtq3QB1Jh7k0a0-cXf$88P7JwOCaYRySox6hXPKM54tGRx-I0wcdLbGrYZZdQvIDB$lMnAYNBSlvvbqo9oVzISM5wYD+GglBbpN5bSxcwwehzLEJw4uImBfhMuy1+sg07OlMpED1HmjoGDpzQGklyCticX2+97WreV6Aur7$Z8m-SnZ40dAKdIxuUNhEVgCH+Sl6mfpmnpgghBBnTAM9yb8Z3T02Zm3tt6E1cgYq5SQOI9sYvuGxBAfPpY+ntxcwqAS0DYkuaUHfp6QQzTjHOIsg1fNT+CIbgUjLtAseLervnOCSae6t+5O1ho0bQH+TAb-11iWryMLue9EztDdMgnuwY3NLASSjimlpSAUdkBwbc2fHfweGS+Lo64qOYRvTO$MliZ7IABCRSmPjGlP+5ufRMis7m1m3T$1UHgP4od2kE3s8l0lIG2zcBNWOHAqlmQmBMxuD6Gg9tzDCD40UzRbc3hAvHPQVQL9LL63ft4LMduop-i6-tqU1$TLRku3p6jv$zEIQVOCt1DBzL6vsZjReO1i82cDzvBIr-avCtboAUAVBvxrENcVL$2IuKifE4SQfdYSXfMQcxU++8AJ5NEcbyk-PPBBYhLrdbjkq700SBnvtdYPc42EGpvSNk1MvbojgLcS9ZC3RnJ+dq0ZgzbLJ8-8dlGecx4HsBYTUPENGAa2dJb8oq9V3K+-48MUhrRZ+GUbtBajX+SttZ+vtL+soxkPhA8asBEDdvDZuqtqTS7UVDXoxO0Mg$KJRxS-L9Vaer8RrIeMDPJSPir0-l-sx49xndbEWj-U$7RGjYcXS+AH4nAboHOdCpDugq9AcaqS-sIZ$XGN$eM0aLm9MW1GXqEzu6Q5P42syMdeMxTe3iv79Dn--k+LjvgGvBd8sVYJIKev4LYjKNR$mQj$X2anJlMCO6y2CXOhqP2qU006il9zoiu-v+uZ0B$afnDZbyyTe1cQ-+UI-U6M3Mq9HtAfk7vw6JUDzOGW2YHpTJ7rk2j6wB2Ov7stXmAUt-YHW1cQtPjkv23$abMY$AzR5Xgr1r5d5ahcEG7gPNuKSsORh9TeDytvSRNy0MYkD-cKgV1Y6nPBEs6IAAWTJ+Q2a-m0V2JreoDQ++E0NIVob9f83Ei5wmu5$IZflqc$x2GgphW2K+yEtB8e5CnjpfEjGk3yx09cmt7CJrG68-Rv7WrM+tchS3fyXAD7VfSLJN0l8Re1U3h$O9STzYDRPrqzKPZaJR7pQaC8S0qLSxaKV2D4y3moGPEH+6neDo4pIkWIwScIP1sY$WdJW5Iz+W720KBvWVB3JKShOYVt$uuE21mB+78uGQWSJqrmouqY0qz2YPZgXvBn3eaaHaR47Yues4xcLbHrPnrfSS4Wwal4wdi9H2oWQNpBig6f+r8SsDNeBwNbi3W8L4C3D2hqXR-0IPVJ2J$-Y1PBZCasS$k2ZHH8gZ-eUYwD-GuzIdZg0UqfW8NtWPDZU5mjDuqxVAQIElroP2e7djyy-CBR0xZjOSXTie89T30Tqr0uw2Vu9a3IdzpNHhv0W5n3jGd8lL-s+8ZMntDGowCOUNfCiSKR+$4LvuoWgxIka2PP4WJ2c5662myG0sprXfA5xHqnAuoruvhscn0Atan4ZxlPc5DvPgjXP3CzN4ZQNslXreNW6hb7077Tcf85DxbnaHwWXPY6yusIT$kY2vsXBDnDRZl1-a$IPLK+pRjK7loxPrTgV2tmEr-6Ul8wKjQWAC1GsYvfU0apV-t-PNR0hYZuJyURuMi5skIvQ55uq8AoKCfOZdK8Img94mzb0$PnE$HZbON30dpu$9S66vjSAMT09DSzV62K2lnuO-VhM2xueXjWeeXpijnfSPlIrRu5tRuLh$ex9VvT3JuSUA30znm$5$h1zc4hqLSkYUM0$O89+r1p1NteSy2lupLrzMgvPsg2aey-IdzBs05QZlobxkgyUZKasKBDZ2vwhE8rPQAlxjdKMBDb3abyb6SEvn1DAvk0pnDk04ehIs-sil9XwTzf-Db51a0nzHoM3StPh4ecT2G3bjOb-IKCnOshLRSi7RJvH+6SXq6$x4UI7rlbX0ATC8$HjJoTCsWs1WDrIRDQIZvh9DX2mnBzU9aMMj0dNr7I8zaYHmEBjXAVINtib20H2X-Yca9SpEm6iiURcqBxgb8dXq6b7KBo300aA2rYcMyAHdmO0mJOVUu8G2N$zZWpqC2lX47EQIcd16CKBlhNjf-UksP+DIACBOPEyQZaVfupJGM4-ra$jzy$qgybf03Bs8imGpY1ZamZS0w4AAAYe6uAtGadSKU4oAxU6piAtINdWW4-8n1a8EPmI7youZbVwWELBfswQEr2aQzyrGxCdqCs8v-KHy5v8KZ$KSKu+wwBnkBxuGey-c$R-2OcSWADs17k$t$Pc1$m$1JDASvlDEwqZ2Si$WNQ4p$97+3XEyB-pAV8Z28GI9JHuCn0eZozUXf6ORKa4NsWXWAEcZw49j-2U3S9sz0U2tYVcpPX1elePbM5xyqaZux8TJqSHc$zTykjQXtwuZ0dvJEUaQ3VsQ0eXLuwUVWQ72wX7Wx7Lu8hf3sg6sEgQST98wtyyYvw7S4nL0oZwDtcZ8ermGGgpa-c2yOqlB-91Wr3yWtscj8ihqc2zBlsHRIXPwJ7LzhVjcHSlXxGsDgOSGZvry$t+IYpU0TZdxfUI4Kc602Esatk+CkKHzrQNBGK6eAj7ooQcs$KjaWbYuZsAs2$fIfIdzSBNw3QY8YrZ8xO1tmq2Z1fHsa0PceqJcpVtRGhIrobJNy-ZErZcwUI3fGI5B0BK45UK9ze4Gof41aSEwwNgHlACMkN9kaWxEmaHDuLVeagIczdzU7TpqJUf0tIGKcT-T1n$Gw3yXlt3rEIMNZWL0udTjDcIket2ufW91RngcLqf3Zm5cQxl3KCMdXeRaL0BoIS3NEybPu3rPHVji7eToeIM+81Qghoaj6WhfRztbXTiHmtfjVvljbvdperqgAaXWAwxMyNsA8w71x-5AouR3hJC7OokSbpRB$rhDlPYOIa47NeqazXRZoKdhu4ZNAHj7zsZ3GeXexC1Qpx730e9EOD7Q2GX-NgkbNo57enM6nzvYZmCaimft+QtStvas9a1yx1V+kdtIxhGe4j1w6Yd2V8ajHWISHx+kfPdtWmfQAdNZT9Gf22cX-7zShIrcTX3px-wnW8wATbydluyWzI4xdHUj4W9x2UPj8UbAi8uOl2WMOoB1m4cp0xa30wlw5fi1t3XxSLU3RApXNgbhE2gR9xOEhvRWTUJEJxCAgqwLcfA23Lq601giNr0+ZcNe9wkVODJ0RyjJdT8GDXsXsdJeJBBUBxvW4i3NMcSNeyZqLqBbcIewH0tVw9kz-cbEURoRTNPOn1B91cRW8Zcu9U7ojnzBQ0TJj9zAoZLePQcBmRkC09niXtR$PJ-T-pw$oqgotX2c0tU+IBjsGaqkcUPrsYJY8$TDsQURZxLN62UmZrI$emYMsRWps3YqutrGnGwPCe9WQktYOQx-4x7CPL5E3HoXUcewfiNrRXK-hCTJcMWjS03ZT0tKa7vxxcEzTElOCYz7BAd1JEwolnyeXyIvu8Ql4ksHQqrdJaag8EQ+8Y6HCdNaobB9R3TpSPZKCGKsyTrOGvHqp1IA7qQaWig7zUfDOuptIEUy7ftACHyBafxc1Gu5XRrNllTYm35IOri8E1faWsZ8G+jvO0NS$Z2MelHpJuArjMiM9XhcZBabEwVXLfVnOINMVwK7tGk+Bbl$fZYylmay6oPT$8hqU+WVS04o-SbU7+PP+wffada6AYYErT-oSm4bgGU36EH-LDp9-Rxv1H1HZMmgwllOwLUSH02CcnnfOvGVB-D$s+2OIy0aVmISUc4Ij4zda9yslysRDgaNopteY$B7MtvD5CfYp63wXyze6UD7fM3TmNvEQcQ8wSQDPra9sX+l9rApvxE2N+V8ceRKiPUaSo$bDx9OtsbJJ7yniy-wnKtg2o+DZW$Jh32xjKKYHshZErcof-i4HIjiie6YhqiH99SHLN491ctWAyuZGhAfCkW4uvU6j5quLkb1O5$Kcni50u5KTGB4YU8AeHP-hcN$4EqNw4UG0cQoUpGYCipSSg7iaZqcwufAL+Ezf9hGIjEw1UcalZKfuZZ+pcS0U9v9jACMNpaY1l5GfEtXB0GqKcomdcWKEff-LzuXyV+qnDss7$EAfA9tpn6I+2iifoUpY0gj+55VYr3amS4N8jaP8ZUX-KsAtjjy$uDhYvTgNdypoBeA7P$+nVC7xWVXBw1nmDCQhql5GfqrAfknxfbrZj0opPepk2WAsucPCi4rDronjwLkLPZs4mATDq9jgIwcci2+x$E09a4sim2b3xLvdDNgYgfISCQfzgIHTIw21qE+5GHDGh4lQw47Bw9LRXL6WEis0pND13-8dB3jvUoDvI3un7ozT5cOhQoI-w$nZba+IVxpI+6I+D4OIEaHsOKcU7UmmZ6hi7yd9uATUE40N4yUN2mm7$thJrEcf2YLgwZ9M8twutkM+d0Mn0R-WPnhnpXp7+wadH6itGIB8ZqTRqi7z34VQOq-f32zLjA1SXqUrXN2IUQUsjZS1E3pz3KeiHsRJfKsm-x6Wk$YxxQvgKVfQyNM+OaBu4LWX6RzzZ7kdAVmMDmtwVSntg8REcY1DL+wCMnIX9LDZaCpYPZ+kSM9gSCKx+7rMouCPgcSJ$uw4TuBjswp4GWrVmJKhpQ5CnbqznbhPHIvKx4UZ7Q8OhVoxefVwPRdhJ9nT-8D6d8EU86WtRSH2rMDZUVTl9ZpIcmE0cnbnBTEkTf2IGrfLnl1T7OnE7d4aE6DrY9lelbcKB52S4Enur$Olzr5hIMLnaJSVNrB1az4AOiu-+orm-bkKJjJsLrcDj$ocUtfpnp0nRNAKPJ33fviTbYHUPpwqXdA2XBxfkjgyjn$pl2aEWoUW84fBk$gUwkUmM$XXJK+IVsOMi3-HWPPydlonH46XeYWqJloRq8lCuUB8Rb4Xo6drz+b$1Q+UWTUusPvltzi598wjUn$hshTonb2fSn51n8AvYUCYvl1hK-TJmeEZVAbWXYP$m5zgQY5eK+7o80W-jckY6ZaDpXPTtT4YZTDYBSXf9kBdK$tRE6nC9zXv2$15zj$XCJ93cpN83dXJavoQNUsJEXvZxoBTfEVKwWurnymiL2cJa88XfU6YwXYnwGmwrADGV4owzTKClaO1sKQcrC6rZC+EjEmJmGiVrhz$M4OdOXC7A8xj+$xoJhZ9yQ9q92ArUcJziU$UotshSahY7NhIo8-JD8pPPGv4+t1gOE3KxmZdzMcgc-2nZC-NfkoTGUlmE3VygScxI6yoWe5hYi5zyDUAQxAj1yUfS-pCh7EVZj2OwIEWlfGL5Qd9XVpvniQQzX09e4US7+N$eKulpjPycqGWXLnyA-g-fryaeIBjdY9e3Y8R33p-2hif9jf2Kr6BhE$c2-OSUATw7iYr0r+373GUJ9j10QnSR0wYJbaGpqU4W8BXXZN2Xgvi5IOSjs1cPKOw7rnxjPwC73d10kPttErGI$vPaYEq+Woja2RUnIBN2lngz6uv7lc-5D8-K+9e2hN7DHniGhans1cyoY-4xpaj8NrlCtu7kEjN2xdKROfikTV7VYWKsE6+fh5B$XMLeAHccihj$t2-n8e5scPsyCk$ZflcOfxdePpdZw71mJOrC8fecLMZSXm5-k6c3RP40$qyhwkaEHevjOJISlN62dHxBbq14BVK78r0qTKxVvvN+p2gXxDLpYiC4bGpB70JoYVQJdL1XSl$fW9NR3ivoAzOi3yrZYrRw0GdX$7JaIsGsH3fOGdlAYr9xNO80MUWtmVo4t7z9nbyHIvwXY0DqTW8myjtAt8z1Gofpz9KggBlE3aLv$t6+adnBY-lWOXApC1Wo2sS+4JSQtwniKJOqDn7Egws8cr5+Q0WtzJv2Hzqg410$4GortnNA9mR3ZbOZBCVSwo1xUWjhUf-ADKvcnD9xebneht8onIt0xqlHfwPfZsg1tMT$NAyP1fQGI5iACkd6N0flIg2XcMJaGcsqsm$SthenP5G4PcLVfEb4gcu9ODBW1nKC0kJRY$Eve8Hp4diHQI7zclN0wuHPMuy5JmEbmYJrWiTwlzSIVlYc10pWpX6wc6sMjxVzSvSYpS+fCPSDQZMq6Dls-edfk9eGGJX3i1UMnrU2WfjeCyLGZRfOr+vWpzoRiGmO+DhaQSaAxg6iDj$x2paQQctJOtlnI74N15n$D-$MaqlbRfInIJaq542rbTMct6hAkPCr32w-bXCeXY8t3x52P0kr+8+wk9tHR3$-cMveZn7rcXbLycEHIu4TzUzEu$HWHU6YvfBkZU6yL9Ji29kdkZMlIeK-uStmzKRRgY5p+qXf$TtZ0xApCMwTNauGy04bdP$KWJZ8AZtICLyAYOEpcoaa$fZ2wRG6VC6EN8ifVV6kXO6UNm-sj8qg2ZirOmAR6a1-Wz-rmBlddX-6WWN1r4wi2y4m1+tctsIQ3qdmazYVWw-Z7IKEvL0eMM9LueLAqwx9ou-8V664mXMo9c0-ifJCb9mCyG0x99r14mwUtJLlTTUOxh8iqWDMxtzjawq3MT1qOROiV9oa$JhuUtHjH$rzSNi12UIbt+HtxoGOH4$MMuS5RrMSV7cObKwLCB$6eCmA1OiVRB7YSH0j9B0UZwMzhOYlbymV6zqQthdZr8aLDgVRaJ41o+sy4aAEjKMBqkQQWpoULXT0zH9hrAjPR4011GP+ELfQNj5$0-uYmb1Ym+6wRAgnATQZ4R78kIAkxmB2z$QAiWIw1VaCsf$BUQJnp9pp6EhO1hJchhA+tKRqn5o-MasTrulW0utCEVbXKdbOcoEIMnRKbKl5LC2NKg1A3kSohz-B9S9UtbQ4ntiGTYhL9XRR7NoiHbtNlS+tQ3LQ1E78swLh2dKAfxg28nHAXmg-Aj18oQgHEIJ1KL6kxooEKbaQAZKVvdI$d$E$Aw3GsUXpHV3TKti-0aWd6n6YHRCc5SI4HUY5WjUJRaItsbZrvmaC$zrMA82lV4Ve2jkdCG9cczwcsXIlfpV24yAEsf8QAYPezDqepZbr7B$txDzrjZSfPvsNrszZnaAnW8CihDpOfPfPk+BrIcT86cW0$iIg8tkvKW24c2GkLUaOEUW5l24--SReYjK8AVxK0T+MqqXbkGby8$5YI5iDYzoUc6EMxr$houoAs0sgVO1ZfP42Ukur4y3i8CIkR7URZeC$Wu15tB$gark7iJc$cqRUsdIGTlL8DJwaXzxcWOswbmSx5zQXt$Se-uyls1UKpfPcYYY$o0mDcbZJ4mnf3jCCqXdbGLp-U6Ufmz$OOEi94W5nWfA6bVvavPaDZtAko9+M1Wym-qEnH4jHvlANRUf9YPt5qIX0Q-vPdSDVrK5a1UmBhtNlmx0RpJhoieoOKQy6c2rW2IlRj-kl+bVwTqoSwu6-7x3+qc6tqUULAn$Db85ciw8Y86PGdOapnkXhiSmPmz8c3okKYkXXiAy6BmwpGI1Y$VsY6Jv-rnSETVt+Ds4nE9H-DqXw6bTmiDt1r+mrPBQYCE1DR-Q-U3bbZjZQDRSvWZRPx8yuDaitU43kr1Tf1iyWaDtlo8ZdTNWrhJTwgNIYEhlpsZrrJitfYh57CZIBe0M-jNfDuzCzoxzzGIyQtcqTf3DgwXKkd5TeSZYtN$oBw8pJr8hjJQcX0-Q2oqmMeDHpE-OSxE2gny2-H2dIf4ZcjSfgeGiyjfpue107EBCH01ir9dxn1+4KTXBe8D5myyoQ4nsoPJUn$JfiJYXQolvxXY4J5BMdh+8YYL2VJHa9RfJIG4At4qp+bLd-Ri3kqUsD8DtmomiYHIHXIgkyCxg6QivWNQObLghVWRTyMsX2T0Ap3TkVWXU$qCM8XWE3uIlxXUHjh9pfLPjJn85Q--pfnHc-giXXJ1ge5W0-jgvAx8+GXgDmLYQPD3BDYRQfBmIdwqxKvB8Csn1usMhnqVqKG9a9R47d6u90bJS1ELQT6o+QTYGjUwtTPle-hqbig7ongl3Yo3bc9sTBi+Nkxr1kIL0aRLdpT3A+32G--j+U9ZMUZalGKgdJ5CwCEynS9gLiO3OXKgfay1$n8DxNeQHZHLX-C2yybQdG3Wc751O+KHE+Hi3Su9E+0niJnt1d8ksXkyVPM8mLBbauoTBMY58DgW$zdcHU7CmR1fuK7vqnTtBqYPJlTRkLEZb+RWLnHIthuxnr$Vuc9HiEl0WnuUCBUr8u4b2QlH2G-Odno07xZoKaEVngnLQmAAW27SePx6djeSBUz4lgNn9esC8CJ+87HZxQ45r4LZPCtWHxLKTGt+fesPP0avmsSdsvm4VNkjouor0qWaqGjNCSW1C6X71HHwRHBiLYxQK673+ELvLmEJm0v+DXyKOnt-e925XdkZkCxadDHq5h38Lp5EBDk8BPTdRYezvvam1GxZ3dArNfLD4NVotcWlV6vXaT2g7Q24xDq23We7+IUrs4bUkcoeC5m3TR+CIdniiU40SBorKXx6w2Z7ZXQxHWW-neTXWmvZACyVBghAjA+BVnQ88aCWj-GZ8UlXWoT1229Po2A-E953srUrVq2Qy83pCPpaLjW94c$1dQc8fdmP4YibxDlumsga8HAlbiGs7ewMoqQcOtLvGUgraIWA45ybly8MYq7aqmf922UbMBgBw0eE1XpDLqgjMofemcQR06qJ4JxPe9HT4al8oPjAj75BBdEo8Y9jRwVN0LegpanGu76yYK8V3xbSdJh1EIUi0VGSBWzgfbaX7DHnqQdYO0GVOfyz35OSfn$N0QNdJw6ZbNjul$Lr3QrqW1SGE+KTevkbN7-61WPWDb69nKt6a7GxiUZyWdsVuZMIE$YyjuCIhUr+kQGeSzBlyfKURQ1IIvM5hpdn80Bj7sscDd7BsGaN3gb1t2JRhWPA8kDEJpHYKy2uOCY7nCgYk3U4R+uUHHbqWpH47Ehhx+$7RhPP9YHeB14+3nM58ggTYsmeu2Oe4KOKGH+OLU1e0cX2xkv-SXKWoAz4zr7yqsHZRduhOwBuImbxvfHhOy0IU82zPlGlCOqjOgqA-1EB0get5fkc0ZWQUTU$7VVWQql31dSRz7Pd2tkALUAV1gpQU4MkkUXYhbi1b6nOSqTiE3mqj3I6a0xjlVSMfVK3O0SsCowupK1VDIZ2H2PcDCdLKIn5qY8oJrjS2zN1wyxKu$KbDET5lASKk55d0LtgO6WsS872l72XSrcAt4q5lRVbYojmpUWQAaX5b4u2Y9jVPes0yUZDt-uoLr6A05XGHSGadXZKBcv5ERYc+5d0ZQk$-0JBdlMY76n0oDpEuKMHp1uKH02Kn3dR6AWzhl0UO96hVnm4Pqorrlj8afX-2IAqHgr0fUq6whNEzYNkZPQXfpqwbUK0WSvoUl3wDvytu1C4vcsIYKgXqIWIqjAHCcl+Ks89qStHo7B0+EaaZgjPqyThEcnt6zPKcUOeocc9IfnMQNSSTy5HQ5eS5I3JhiJiTzwKCn9fwNw4aBQWfT4NbZTdQcPcOZWJH1S3VspvU+xKWguNhShGmGspmgJsLi5GvtDyBRzcz8P0IXdNHia7PWuy1qtAyZqRgmXROEmQOmRvBa0fmm9cfc5Vuvv2ELWB45PBULBIwIVZJ5O4wCQ0tpwK-Kvw$2Uhd4MBEL2PA2I9InI5ktorbTCtjD1OgeTCjlNixEM+d$G74sZjR2RX0GwvfYWkoGTzKDJ-GkVqfePLacdbJJN5vyk5rJbiw4AbSvGeUXX8AXZdNoUnWCV20ZLIaglLcwvoxqDXmCgRXUt9moTBV0gCv4qBVR7sfa2fOwzGkl6yspU4T0joCsbmADlaPNIdrl0RYICi2ezXz8O25hnCU54QiiKBdvo4UPDbROw+vvZH5hEmougGhjcVV59S+I$BbRXD$WbBQBA-mPRvoppHmcRKLqa1Tp4V-XNNVshE2TjSi8cXlmvT5Iun4vD$gJW4ABCowe$4roqU0mxBKr7jC1PhHpYvTu7zojQZYJ1SQCNQDY9AeGRahdE2hTBDehvu6vu3uxOcjZIC$UkyXHW4iocMTogEup5qZvtHsbv7-gr1amQRdA8U+kCYAbRlJ0tf6oVMKtlVYqcsHv7ikfBc5UHgiTSOvO2p--CVPaahDizoB$Uh-XbuVb1moarSXJ6+mhuoLhTu9h-nJygZAvdCJlVVuTxqIQ7$SV0byw+U+7I4+dW+TB5er5xYuiggedwgvZNlJ2s0Qr1nqlgsvI2ZjBGj0XQSL9YMLJDV4XzlUEc2K3HXDMTa+Yq1tXyjm9itu8Cj+mvqJqYsXEt-99Ahnkz+DtW38lijISvRpooBU+MjgrZGE-7mbYn1-Pr2AObAJS$2J-5wAzgbWL6Gok2kuyDMpGmWeqjH+fs5Ltol7He$W6AzHrHBnCPC1KWPpLPOebeN7LpKSV20hS7lff7wnOCNr0apMaXbwmnAken9Rjoaae-0PhMNtJKZOI$2nEWtmyG+Z3uU3xxZXcM1BWtKDlpCdnyagrlrnHq9QwtBAqeXpfIioP6xupZJf0i1nXAlyINt7pYEvS542sMXTTrVH1Ne2Yba4f7SC5E95nBIoA2Cu307uBbDe7f7DGsmzi7Q5-+ZcwmGwTXsEtHzQv0+-nolkrkdDDGUEEC5SEMd6dvyQAXyc2$jNoETsn94ngw4ZqWwMPOyswBPZEqOzyrtzYeOrGZwhiljc9tlR8-2M6dfIKh6s95PspwyVKgGQtjhoKf4A$+C0q4JcxX0YouO6HqVaCnfa8BtTG$8YWE68ZW2GwyA9Z01D8pE8Vj23b1vw+Z8GjKWxMBf1gQR6lAH$9zDnAdjZcry96NasrVmrAcb93QEpJ6H3t+ya3Kr+4McmGmB3kHSMJU7XLGIEqyzRKIV5i3-8NgGhJQrT6M-qUlO4+RpqzcNkhyHZ-7qngqSqlhzVH7YbphwdiXkvxHrURbp4cGw0MfncCgH8+i1mXVK0IgfwADHIcXkxLCqmVhGOBwvdbzs8zrO1fDiq5EtCNaHl-LKf+I3H5mBYrLSQWEVnZUz0V-dGqts5T51LYa$ux+JJo8aAE4jA3uX9CNDN9VThPL66UqynHN-$i+dMnxy9Y-0vNI7eTkWgpD1ct9LdiJs57yzltWDDZkjazxB-egeyNbnBX7Cffdrjd2SO5uPHlc6kfl4VogukP$pJroed+artjk4JfYWyC+N-xnsx47KraggImUKS$qC-H$Gu+sVGnDL-dIVY-IgzA+EWwXHK2yMkQVtg2T6nOOTcgaf3ccfOKrs0D62t9GLGWDM7$-safYKyNxqaOzI9jdkAYwmkUiOxkj27jMRY+4cWjO-yXgD+2YwW7tgkk77QOoT4V2IV6G$Os4Ve24y2ysPa3jHaBDZA-20vwpuku1QlNPT9+aHGkOaeQsDaw2+khRC0UsJ5fz$lBM-eZNG9XKuJBY88Ovltees9-2PP1fGlYx--J0-neMb30-BOwudRmMIuChxf-zxlvM0VESXq5vW1Qnae7OWvks0Jt57hfhv+amJIQ+1eLD3Jbc+0TqoyvgD5uIHz3JsjC$-MByPIHtWsgdbklyZ3qgvIdI3KxIcspGAXwvWe0Q$9YQuhtQf5VbwOHZBYU589BX99B2v9uBl6p+t3StbinzedU+BWrIpjN-nKYElQT0+Yq61T6Uthbogo1g3ja6+i9Sr6pJ+Llb36Eom3t+v6nHkQ4j2viL4D33wIi5juAOALYi+QXCU00cZj2YEmHHieLQHh9uYNdvWAtpATGstgkmsPzZzMwQXJ2AknMh+1uGtQv6ZdfmNAsNdXa5oWzvbUcDKRzjKDsrwVLXQubczaYgb+Vc5nAcQ-1xGcmBEbEQuSWKC8lCrQCnrQqZ3Y+fjs-$nAb53$VQku4aAgsb3iEk1S1r2qynij+weLfCn$TMefsm-Zp$Lq8pdNSmhnfc0gxuI6MMOBO7aP3GTteJyfO7TjlA8oBpV-C$AnX$ygdxaJ5o+1WCJQNxK0TunQ0sD6HJNTw$kjT7Tc+850Gc3OS1Xt-5nw7ZY5m-xybL0AgKPqmZXAaPkkQDP7M5xj9gLYqgHJh+kwubHP4PeEoutd+ZxDsALoUvjylUH9-RP5-AWPD83QYxy-gb9UXvcZyu1P4v$K4mr1WU2UBzKdSRO42yAoko$S3k2dtOcxEPj3pDSoubPEHuUuqH4yX9Krtz9gaydErBNdQXVvZYknQL9DsUhgXwVPNTonXz57Z7xKHu84yrM1LBaeEnqzqcwp8zXDV1NPypjL$XvcyTeZWcnGiY$1LS$IKvuGgjbikE1fBrGHcYoOGuA0EWJn5owOcJPs-GQie7Yov5BUJpl4ya6$cHbMbf5w0EWwwuPIGZOP1wMY5II++11EYYYVppmN7-MP6O3wfqZmXhoePBWn$-ai8vEnr6dzGMWa0OEalgl1ivnfEUMZVb2w-kvaWlURsa6u-N2LCaV+r2LqY57ZuCGPkdhJi7s8M2LGONxhrYOt7T1ZcKfSChxqxlNR2k2on4T1GfIuy$iz3RD+suxwqjhaDCWzM9TunmsVoJT5o8ojoQwl6C6rOQ$X541HY5fvWbKl2IqwxkaQuS9O4L+nLN4jMU1MBTiTsU5qGoJsE-9DuImSpoL8K$MhxhebEI79EpCkxES1co9lQlkLOREBgewXt45Mat5ggZfWpg$7IapSHS7dnlmZx4$qGGsMPaUnu1z6IAkDNaULXDh+j3Xh3zy-N+asKmt+lTdK5m2dp4ryQhX4tnkUndgphsMR4LskUo8spipHHN1xoDWlPthWm4UEG+Tu3zvlcUN83n$Tvljviit1mUbKRx+1k-eb+VR1hBkgWkONNRymaEMyTxY06UUvlc7$4BNNG8-dhoy6-Dft05glRxTGgzbWrhhGJR+ZqP5KgctIwspUfmUYVGSiZz-WveZxjepEUber0RSq0qQfTUhRVpbdRnHBwS7vEoTkgguJiqiGQLko3hzqLEOwnHgsQ+t1pahTaqhyg1aKi8bMfDpkM8H$x6z0g9JeNrcruWwfwdEEZM50zWsv9LOnnmbJXij5HgMwCT0Ix4w44Z-7I76ij$G$7emVYb0o9i49YXhMhbRcQ-V+roOekmacO6ZVb4GCZxXx1Or+9Yf$skb2rYkg8+XkQ7Yid57aKZyOu3O7$rd8N9IJhxSydrS6d1to2eG76yLULZAsZkAeqD2qXjJfT0VvX56NgqiSB7IADHjHv0Ki-8HZ9UMwsVQJMDVeO+75NgaW0zoBD8v6OEDmuiQR4460lXoX-X04bSoJy+qk0aAU8aKfuJecCZNQyzRCfXVc3eU2vq3tfbl+TsTwvr5m1MSBG6g1lS0TG0H+3bM$0e6RmXelDNrW8Qp1$sTI8dz1wgtNYYOYAXW$HqDUQkx2PU1hAJfYXA1KbJvN10c5HjQVrEgfHk1ZZq-1qgve$oJ+rdmOwYtzlxoeNoKj-YrZ+vLjPQhqrJ3VXtw9VvyGSM7Aistfb59$xbuwPCqZc+LvCHy1Ou6R34G$I2YvJgNZTQjk7EJkgrhhcpysoflJPWOhK-5ANC2Qvb6x7R-D3$pSU6zCkk4HOD+wejfIyxIV3g1CGK8SSog6Logv0vwTqvopQ09hw1sgmD+eB+qqHqVc0dj$c3Xt3Z74dg3MDjBhLU$c-HSNZyMf3o2utJ9Vp5j4bQjjO0tGTOsXR53YgvK5fxmyP+DqLpAZuUJ9-+bzg7UK$XHN5Vp8wLAAJTrsJ1cCVLyZ3WhYcIZnA$E0sXa0-vqNCzgtR2qZMo5WmJTt6Nl+QpH467ET$QPiPStPWu02$NXu023SGclqN$$rVZkakici+yzugtpuPPqcrjBIk51j3kmOh-m2L$GsPKOwINnsvlqEM6ccmDc6URXOpzG1ufa9mB-Hk-SiY2JRQqB1WmRIpOvkGhJ1TWelvbidzA4itWwLXfU-HQ7xn9veAyood392EIjpB7pQWaBYtbaW5QwRBpNHCCkGc5j02KpvVK69jbdK9Me-fWAKorTcmIhNtsHny$GA3r109EPs5s65PrflDgD4IUEzmqXHkLYnj7cwBRaQ-G8oPeCY8Y8AZKsVeqEIxOS7debBYhwSkeaQOk$3AxV7ETTA-wQwDtEPjzCJWyleN3cOuppMQoLe4+vRcB4ehdLU2sz4hrHzeq2fJE6IEamHRgxeDMTxBrY6yZlpu$HiIS0ZJ0jGZQ1rn2s1N364PT-YKC2y9O09mdD3VBhA8KR2Bat398Pn2E53DUw7zBs4VfCHwRj3ete2dsEWBTpnbb-X0Z9lLtZmH4SDETnyKKApkUaKNBOEX3lCbuVCpSvQGQulnaKCnWZEg+8$4TJL8C+DIrVZVx0JK+v21-6Qi+h4$z$I5nKm7f3HPeogLsW6QRLR+WnYNT2ritck4ArfDjggnYCvRb1KwZIcJ$UpeSQL+1iWLmPBJIDgn9OewODWWtn$OWD+XxWYAbb91pd17y30UwT5S39ZT2ADul6I+4z$vJmO$$fX59nnxi+t7JyjV+tGzjb5Kft-b4ymeg2W1LM-P-y7vKEPhuwuEHuNii1pAmu63ZVXN5GtIMJITw0EuH0gf5yYLuXQNJiqAGJQm4VWjR0a8U2cg$N7epJRYN+T179uwktuQbXbQd6oH8H9-drkIVJt0Ol+bxfq9SqYHmxuPYnIfwIw$0VsyjD+k1ic8f-1yjfC9uRvnAk3TS+6ntxvelrz12hKz+ULjX4PrbhoyULdXRvZ6Sva203zkSxfPVxc$m9ycsNqj6dpWyLuEGrfHrMwqi1leybp+4w3u5LWjmgm4MU-8quM1+PanI6o35GLs87kb6OaszE8lDdIqIEKfP2+y3mYP2gz$1vvfWTC8ew4Aw8fAMS+yyNcL$OvfJcXHRbP$+c+CmZaJarJPO1clnAkcT$yC$A5meGWb5iPUbN0PhlK95MxSpZ-p2lUD8H-fz1KjgD16ibdzw7em-eEnXaYgdyzjqLbkj5wac$yLX2KIunD3C23LRIE2BLVuUAUhtUHmros4CpJZ9vf09CHXo40SQkzCDWRGYbPHGDqVNYv0UbV6CtC6wW-f937AmuPVAENHqkq2rpLD2hRfCxMjh1rai4lMDsttXBoHVV01DUUE50rrQimjI58O7xKlC4ZtIXwrxXsopSVw$X$rz+rZtWcbQ2nI2iMVNb-QbDw9+jVg0u7+WjNTkjMXf-av5npIBuStUjoWMKkZ7wM9adxy23WaXDIl4KPQr5eyPmUXL77h4O2Di47Jm-6rxQhjme$ArAGKrYhXTSCEd50AxGT0JdUKa9HVD6A+58qU56R08C4Odo8Nqr4a1cscpxRMf$PXjKAyNWjUcN3cWrkg8eTrctq1rVeKDJ1vrPThisJyH$x0jdcl0SKDDZz1P-M5Wu1adYc7yGmi6ADatUEoLLf7l4-oaAqW4uOUnpdSxwYWOgIzEinGikQVVceSByLs5NrDa+0oXGDIHDhGhJLRo-X9H5LrcMZNLaEh8IAX+7$xhGl002$3HsGrS9qyL7WD$s+Ic6GEiZTCavZ9IwP8mtSEiJjiVcWbRhJsYjZ$724exgpXnAkmMEjQLQd+4Dq7OORlHDOEfUdu7grTZApQJEW1klqsEm3mZo9t+hdc7v+HjunP3ntWnqnmNNEo9qbadxUJEgDIQox9S0QkWxcYgnqZLikvW7Isjec2NlvMQrQfWoApuOaUCs87IwZ1n1e-5S3EX04apzSsoI4BHghJQ6fj2zAanQhyatyr0WMdeP6xTBeLRAY7fSxv911KLpuqt1BPNW72MsMD9-9sk8l0wSEeM5M6$7hWNB-W8KiNTocciIOYi6bLQwKxq++5W+aQ5c4BbN4ZRuOacgY150-6-q30Zip5VWbw5gmwXsulo4HHqPKmWQykaXs3EbTgM9LkhR$vDD1DM9Ut1wJkq9ojmBu4K6n5zzoUyvaoQw2g3eWTE8MqgNGGHpzTBlwSM8jPArEgoNC2HS15$or+WuYMm5YUfw5TVwWt-XZD5fZ9ot7+HoO1XpIev+4OODGQdfuqLOp+SWlzyUWwABJX0z$zEcPC6KbiBaYGjm4kHpi-W+uGqWPr1CjU3E7xQcbmSCNzs2kK225W5v8bqyNz2PmtNMZjwLjSThzxd9c6tOdyvSPjh1VTywfRqduWrYnU1TbXsliXpV-xwH+o1UuGSRhSeKiH0GAzEoU18-$n1aX233KISu93P3zsM+xPBXWimh$7-RGiQ3P1wmKtPoXv-gft6p-3sQsZzgxLQYcTP2k92DdX1iwGk5UbLeQNHj2Kx36-md7EAj8+ZEUNNaYBpTR8Aw6gADhKw-E0JEx863ONwZmWIdt87otU745LWuDglqiKEGEUxXfd3aH4c5$6mDp02YmhjyeXjsQGRgNjaLbSrvDjCyjwro6smwl8$sotDn5L87pEakZAXMfq6vkEoJy-Q9je4Eih5JxMtwAw3mLulEci9Czs+EjZ7QE362+ImqWqxB5n2DbPIA9bVMp7qeOPxa-ejqAp4kI2vvEeIo-Ezdk1+owJxEAJRxV-y6rD-JfGKtaZpGqSXJWr0QNNp2E62WTUz+fNLZzsbD1zMCOW7aOhTt2uvgiCGk1d9HhwV5$4DLdNGE8cqgSMuphddU4SNvjhv0tpBgxuSoBbKAGhqiWZxn$IhuAHM0tJzxNp$w0VHplQ8kQDDUbEeJe82kfUEcg9zerWPIruUY+LJCjAbotMJxHdA0J4PcBGX5YRO5ruedbjCHYDTGcbgnz9shyk1h8X4PywYKuXjoLNDIrA7Ix8YhcuOXG1TinxJJ2Bf-J-Ly3-K$Q3X5SbydAE+nN18wOz$AEKiQI6MJHmbDt3QR3L9$lRi772n+0+8-djssWjjrO-sm2IdIEgd2$utmeQJqqu5lWSryvS4wRafJW8BiuLpSya4Tu9E4S8DHt0wwLnIamTBsf9BYh3uiq3T7ny0f+2XSr8JrqhLU9lb1JlwnIHH6u-HZywwaXO7mAHw00gQxxSfRpqoMV1Tk3jwE-T7jaM1pv1jlvGu5VhQ2YPG$CcuuiPaHzVML5lTReCizZ9stC$dadk0V$g10X2EVsOC97-+$e6jtfvZeBHC0I4L4fBfMA-H7jSE80CslXJIQ1SyNjJc9HSCTp-Q9YGKsOGwjXdr9zJ4PheM3kCHEt84Y47+INOfitSCI5zioK5vPOYlu+PtX4U4fZ1H-f6Z3Klo5duLl-1447AaPZDZWUxxXensenBNEpqKQBMZjWH1ZdvLUj62Je1WphNRNp9++60aaG7988UwiMzk$RCD92QcveMJlxeWnGpOZB--nI4P2kZZVSY44xZivI7AMOYUHeI7pcHhTTj$GOGl9iVI9HrtLqjjqWfPpfJ7YouSMragO9g8IKbCfGPz4HY4SGgr74TofRr8D6$RhZAKy$G-QV$aX$DuO-DiEZgP$STf15Z4KANNVPYWjBmDVBwy8+DM+yivdxzOlUa3UqvYSCDchMp4VRE3wgERagWKP+adRNCB-IOrDxZXaNAsabucx7EJRAYohDCr0XCqaL-3MMToBle8eukr55XSugbNb52hyoR7kCh143EduvTLYpRMCaYoS8TYMQ9x69jyhiVsHQ9l26DovhztVCrnRoRcNOL+idEzOCKmfz1D3baKqVAc8WyVyNQGIK3n6u53VsdycyVtewHHWY-+0qhPc4fUy+ozVhWoPaXtG6R5iVCgEUj9U+uWD0vdVJ62jZfQBAi-SyI54R14-v+dkEmZ+GcgnhcYULJAOTAjUv+ES6OVqhhvMK2jhLmqqteSReDVWSYHwmT06d-36n+zGJ2$u0IEwdX+JyajdoWN0+s0dJXWsmHmxq+QbCole$jiM8WU1wsR9ct$3BvdZ-VSZ00lh8-bpVX-IS5co2HiSBRuDmaIp8EUm4Q0-GyOsV-MoyR$EasJH0+7PnV9OnBxDMvE2iEVmr9sApUtUHctxyY+KNN$sGKq5HutdaobiHBaVVaCvnQMrUeyM9py7adzkhmHjd7eEX0GyO8OQ+tuZwCObaD4Brxlo2inlfmdQq9Vu+cfuB7ML0XmEsJBcL7nJXZKohYeMQea818ci4JhxevW$fvuesXYNE86MJmx0zBUUBcEq+i+jmaXuimjvua7+xgmqZbjZKs9c1tEnewIM34YSZb$M+1OzdOIkzp17SlMmXo6d+DPE34nBtWSPf9J5HnDARenUph$yA-vsdB32aJ0Qt8$RvQl+tj4QhaQuKRbQlYK3zpqKopJZU+cB938yJSJB$o6DRZkU4$SuuwK9inNk9mvPiJ$Px45Aa0ttDwyIVOYamPek+Obahy17AN3d-VeBPUbepyuK+xMB66HZCckjct3tddPg8yBHRgX9T4zjY3v2YWQPb6fO7bMoOu67sprz8jsmXr+fIM09iH7aaNW$HaQYiwpP5pdXkjSnGXuRW9iQ59r0Xl8MfU0Dhci24op8AO4+35WWDVBfZnzWduI45M17jdrfHee3g9CON48tUzEqaxxPz+koi0241mmctetsBfbwg6HGwfM-O5eTi+cmIAdN6XZSqWUO$Jl0C$sAqqd4G0immVa2vRU0EXLdBxNlhBXYofosiW4d$UeiX3uKMOOoas4gQZaamtXoAzhWgtWAUqczmKPsDfRQXQDtg--Q355IIIbpIdRNOpEnBE1cfvlVYn6xpuwOsu6OfdAAgNvwE73Dkc+KX5qt6$SGWqzb8LOs-Crm8ke0rPce6WKxB3UZLo6La8fwk9DhNLlhqTxggRUf-16fPUIhunWZNw7WzaotYTCIO3T3UlTzBLScoH0Qe9YgAvoqkV0bpvOpo$gjxZpPX6RyvN5Qz6NJqyjUUmQpOPGlw9sqojjhEo3Drg-TcLJhwZOqZ3ubPwrbUHZu4cEY6fe65qHMoecUpTsidDI8Bpea5jnWbz8sySyEchS+rU-wj6EVL04xwLroxcDBCPJ37hQSMv9WG0zyx3aoWi9wKCOhkA8zyS3dGL+atY0xrOwNYeGGcvp6ebdOl30bV7voGiCLkJPKZ1OMWjqtp9$53Dby8p92L2uxJhRg7H+scBdA7oQRQYzDwRlvwqAdE$ajSN5ERDDHZdPdXlUVA90qxN8HcU-kXa4RbndtgA+fOn5jELEQzJnVpPKZOwzlg-1mw5j8CnZbh1xg3UZoytpxYSD1nNaPmmWXU$+BCRC9+Ltg3bsNBxBtkR2PuZ8$lyT5jk1f5qW$W7k2WK0rGI1DVKxodBUbT0M1a0cDW9nz6ttSfP0w30B3BXawVTa8xUs7ZE5cuP+8CW5pAzxpnv9xe$g-tUmawk6VgN-lez-6PZvqDTkEgTQxynBeiC$BGujb$E8hIflqIY7hPtcz1uEJKOpeeIHL7kobGD-yIabQy$1Rp3gD7X02Mjjamnv2tabDHvsg9HH8WcdNTl+0AaXRf8Lg2CqeTfJRqn4J8qRqgXKHgKoVjAaWv2zw+mLXCss7t63g-TpSJvIveH88WOkDGscdzSh+Y9zboAzR6A2dZq8TsNcdrGYhsaxuis0ARCBdMR4IAwSz-bS-gvXKjmzxBCO0fO0f8QpMJmgwcYwD-EbjMR3tGI-krlk$Kqv5AkC5QSK87rmV2$SIa56Uz1Rm3-oCWAMjpZL6PcA9DiP$4a6gcsAcYXc-Zo-v4HvDnU3pQeQvZ2aEv0nMl5gk5+alyn78SRU$hSj0jALJnwiwSWI-IsSKNag6n1mw0IYY26cgqegrzvvOWdgewog+++3IxD9fDz-hoPSlAShLcI-WAUcMxZZDTZqOLWV5X2w-Rv3z6OW9Ct-CG$xVjSXakfnDrzp5vWQ2KV-QcQnsYUEGqNN$-CnhyY8uZq-mhzNfQa1r76t8MoJ0IxijE9d0VxJuIi3OQZI7OMeJfebDZIYpIl5nNaE8K-y0Sd8BgAHdCnmonUC5VUt4b5Bk90j0SCBztsMC6o65v8H3wmjyXNcI217PmaltdO5nHHZT7JyGZxc1SCY-VBEoL3xtuEjSlw3kmYa$mynsygL70IrbfT3iLC6r0GOujYmH8zo8DjvS1oXeZCoTXUrLkbvukytb6yif5YLrSxxVEo8bvvRp0HPfnra+eVsPzsSUuUc7S0rWGMWTAe9eiAWd-RP8bTfu-HE7N8bJH8GdzKAQQiMY0UYQhzU6KsufY+UkbQAq9m4OkZU$OrYCcdgQ+qRLLsz1aazaPhIWI4rjiNxIIQ+WXtMiLfZSUpBUhxRXzqhriG+G0ULJKCVJkSfXp1GIOnC37soQ+1+K8NGnVmPmlcKv9R$Ya1HeEyPA+wKW7hRSkRUJ6lwXOcrXRa$T755TYUxYO4+Myec49xc5RytiYb8J0+aW9xyXZuDc8UOK7vLVD2yzeIdDSs2AA4Kl6eMsjEZoTR9SqSVkn44uctNBtxnVzq7TxpYkNM7$cjecISPPSY6Z+heLdrbREN2Sw-pTbqkynARL-yqiZ6fl$XgoG1nuozg9Jf1oib32WUOMnl7E-2D0DRX6rxJnWIOSz+yD8e-VuBoePU3rByPIntV83iBT1h3-vjz5vUmksbYWfPnRmAsmev7CQPXfwn4jzDwgg86AYRRoDk8ydTufNzS2cQJUdeDdKUZ2DxaJAKRjgfAUhHWrndS5KWtHYayX+UdR9HRh2monU0UpklTfi73Wkz$iU-npZsGZtl0oPUx$kqVd7L4ws+rkfwRTrZM4j0MfQTrLkfvcSNoX6UL6jx9jGYcTy$fHyVK75KTWezKPBAQszXbbuB9nC-H+uoZYbY8OcP2tak2fRETsZcrKpayNI3lxs7n+OOAvPqQ5$rMXoZz1Rz88maCoGtxY3zaxsyMDyTXD6w18OJWLUjW0HEUOIue6Crbc-$wOCHMvgPXZaiAww2fxvq+1MrfKqCSQCvqIcBwdlwV8g4WD2qqTu8bRP7tN5-tb2-UrinW8WbjgmrX$PI7VSLkc+XXnp7IyjseHUi8Tk5py2ZAekJkvSHqp+WByqX3Xx3JRHiqsX7oTVGmxdTji$TYO3NOJZhEQZYwDm0gTRH$9rkb0-sO0JO4Ou6A5$ZNkzgDb7hXbaL0G8UAo2dmteQbo5R0wf0PY9fuR99$b3AUY4o59e$R+vi2vn-81TiKW4hgcPhsmEeVksTA9uJKc0XGzqQ87SzV3OiSTVTaqJIgqQ2ArjMObya5vBxuP$qtdimReLyLVmIMt+hvCaB-8IgKht6u1daWrwepYkmoVw1wdq6h6wfvJOLEwIztDOl7rhnx3JunSvau$gm6OdywK9Mr4vwZXiKjztrvbJ$bmnyfPSrPr7cJd$WyjnboreYTlzvYVPVK3Ql7tEjoMDrPlDesHl-as4nd3vD-$cuKY5Kz49e07fziYj3uy5uad6Dlso1rCvH2pqvRlKh7DU1lmKRGBa2civDybkUgiNACOj2kN1gHKyTQh4IWii-K4qY6GYkfme97ylam4EETxPG$sRgGIaakx3JzjsU0mIrXr-cIKdPzt8lzNs9U2SpITe5SyINMAnQR7Y+R+lkmC+EwUVrzG1gTDm19QhbzLBM8Ek4bktU+O8$06U399VvsEN6jZPpexObgcl-HRJ+MP3ug2T7zuh0vbe0bsKeSiZGGVKCiOnaiLd9nRlhedgenQSl2GVecRZKnCZcSgT1Ar0e2U7InwjbsDzo4vEflUD1junSmU3ZD$mgTha2Vy3Uo8eA8AN0kZJWO2N2OVhlTx-CZs1vLg15yNTsrV-vq6p+tcxs49vj6R6HwnqrVNDPnuPitLau9aIR6v4v$nI96Gt+uD$cndH3OA+9Dbr-vIm6wTOetqbqBpMcifT22lJjnPyhBRJrvtGG8+X7cXe6LL6QEb8uog0uz8LexQZrSI02$VgsKsMBn4Y9CTOerhJIlRL3Opz8WijbqhdTOimUzo2K2Z2-mz7e9gbvp8Q8wjD-GU-5C+QUc2do4u2IqiLkHjrr15uTZ6gYz$Bne5VeR6CRJ2KGEU49r+$WSg4Z8oIkRxR579wb0L7UCrEjdZ9oBpYK+yTgrSYxI2nPucjHDcOCmSiWJd43YqKdwVywuwJ55-OxTO6obDm3zaRULfi1KflnaNtYh7DVXrMiu$1DACN-$I+uMj+lPWZ73ATU7NWI2y0k6DG1NHlEaKUS-j4zHf+UJRJtlqIrrPCZID0zsCxRyOG4$NZ6bQ-mQSDOSjhMSp4v4a5R0SXUSB6obAzL$JcxBfNMWrjbxQBN$kd0wn5vYtTRYH88PQMZ3W0ZsRvfppD3GhGOAbwVUvWQxSDE9DiiETrE6jidDYW47O20cqkmasUhU1r0IYyv$na3G2T5G2AUnAmE2iSYJI5yojfR2roJEt3maa9tLSR2dzW6n44TTA+4e9X7nc7Wa2j26xQ7cy2KzK$wqYlH5vjbLmKigZJb2-B6566dUYmvn4a8I98OZBEf4CmaSKA74-ahichfsaGO9YHnv7BR13OAg10yCzTsRpDV2PA1qwOPnn9xnoqNKlp0yB8O1ZMKl+I7iZMZOIZxpxQTujgiK-zsxR+KSAg6QD5tLQCqMwY9OH65QV$4v4R5lail5b2DOV+vpnwRe$UUIMuM1nlYYeGvlWIao20wg24aXvVYNhD9VgCBczCp8+tXzNWRD50Lh1l2iyO4zs3Rn0zZgOy03oTzRrbyhwK8EWmoblDkxuvcH$boGK3Qv4AMo8YN2zJIOB0odo2lN9X2rnmcK97oNiqaiI+Bz+rQR0Mo4VvVdx+QVQiwQJxaHrpSc-e7UP0u7LEmyav9PD83$kerZb7HOT6gK376$1TeJgswe1eEhs9cpH4-ow$osz8rnEkkbIiB$sGw-Lv9D7P9mlXbGiCPDC-dl+f1ZRhdL+EOpRRZhJfPLzXvkS5uc3E+GVzZcvxhWc+TRIDwacZ0zn7fdKp3Px3TthzhY3r5o+zlzpia2dK9ShwX9Zttyr3Pj2JqTtjZvdXCUg1EcWlflNcnGcbt09UTsMTRk4Hg+-skJDmHo-thQoI4aRZmODdK5VprVKAPy3jCPi-HHOrB9-bB9eMsIuf01q08QrTp-Ch9$KwW8o679wMojpXX5+CzOixRyQ95XDTsEL$BRoGy6BORZqK-+lOLuyhRv3W7RlBGPRr56J7MDTkJCJyR0odJZjvPytbzuInM3Eui2HhpifB3gjSgNdwP+t3qVO$R4nu05M3JJcJQ6ureq$zsjb1L8Cwsww57nz$QLDb630ENG-b6HwNiRz-PkQA+Ub75mVg-aP+xKH20rvHhILZctmeCaU+aNxeQr6$TqWBmjisSX8aqb2RzdwH-w45SNo+eB2EqiKJUa2m8x1wMzjru6vow9NHcNopc60zm2UKCnLsqPb1sDnqg231kPjxy8ByIibW85K6M1opcmLqpq8Q+gSgGjAVkjovadgvrVuHNGkAUUzBEuGS$kjsOwOKjIeHT1aZdeLNAbCsp7ds0Nf0Y6IoiXWgGq5tL3GloXy2IPkyrKS3vPdkmNrhMvTpEIW3GdQfR5nvgqYL8Az0pRi0LnkMY8+RA-ogiEXipJGzVAMICWbXMSjX48blYxhaRjbeDJejEcQ9mKLqlV+mkeVdU+aRbUT0tbQcvQm4eRp4JSYbHs38qM+4D$zezt-mP1DxBM8lQwwUHrTAIaDxHDXA-vEoBQg-bWzNAymYLHZb7bYtDEz6R5Rl0Up6KitkrJo61iUR4a0oRDLCUXysbXSLeouP--t7-BNZakoCNVij8RCCPtY6l+nHOAQC-M-8REHbsGL9hExRz5ytkayrQpjmRT$J+0mPTnn4jDnzJHtEnDMO8dVYm13r5rYexqkzf9KwbP4oMUi5QvTHcvB1s$wEwgK5KJtbDNmMPgNzqCAQfZgZJJZY-3q-wSYSXhQLWO$GEhQa43Q2Bp5tQMPc1erKHRh5e08f-Lvty0eE22ytSB6S5hugH7Ni7fggIeUAigqpeGKw4GX7w7u2$8ZOo29wzN7EIAIZqGaUcvJMLNsil6j8wDamcydV-CxRLj0-25ClGYf9k$oIpv4b-fRw28s9m5TO09DIKroxoKYEo5IA-1AnjXM4hw02nMAEXj87eBjPaLeXnsvrJQpDjTxo2D7d9WEGQDoXrE0t-Z4YcqwwdUAACUE3njCGGGhxRh10IdKJpV9j1TBg3ceVgUhx+GwuCzrlA5jl8$p8lyQeXIueq5ma+Yff6xoNB7xJrpygG4$hXur5ygv8XBWt4Wqfnwc0LXE0w+W0YNoi8CKNz0e3PT5J5fIslMupVYsq5n6jWpTg44c7y4y4AyEC$hfjZaJu7x8LrGLPI+my79RbSCflKIDXDkIRbgwvi5zsTORzUuqNRO9H+$MmhY861P$2lzp7rSeEOMNUyvJ-GhodNV-TDddP$E3-6V0fLs5h92KYrL8Apah2NcjXJVi5qWGfOLDA$lyv4gtHWyVmWji4OzTNIC3ims+u6psKbvj-uIatZxGAfj$AEcxohp-e6tjYJdA0Y9eGdq+mgyHgADPkgArhS$LG7-CC3I4QI-6Tsw7tcX54GN5Z59sVxXppejYcAJdByzzXq-vbK2jKBkse-5LiQ5zrIEYoEUXrwkejVnHPyxYEQNv9zJ60cRarRMZPVJQcC6GfLjDQ4WeU1Gf-stJ0UrO8fuS0dT6pwihNQLXNzRAci$kwwIyNcLrE6ZKVQJSuD8Mw9YXjazLGK681h$25z4tNYQIOl8b9ZlO4mjCBL71mgA4xw7K7fcSblVXprs5VxWHLj1EKybCsklcyQsDsNDJ4VOI4A49SJdvix6CPtvGA4IOez5CTk43+jaaa7L3J1qq0hBbXM737dOWVeutiS4CaHKhi2hHWTIPlEupcycB-j4wqlHMcSgDtSSq5JS3qD8oBqVhioJ$Qr8WWX+soN7o+ZanqbGVTHiln--WbgSpNo0KHVUBo6XquCxHouT+VWUBGmcjdTD5TnjZDnf8hQatq2Vd9UXMJ0Go8sUYQudC$YxB4cgRmsh6WWxclr4RLPSSEYgzkMfoOPv-NHWY7l3et8WpTVP9Z2m5Lk5yuu3kND$PXf3e2txoN5gMbRNO0LJ9NEjz$Ex79nI3-ALVRB-0V4LnUPWuu1dQIdztk4AbpXPnIj7mue$CCd0hU$4nSQ97wmaf7w-vkG+7R4Ptj0tWqD1XxenDBktCM2ybIy+Otx$bNfTi9ncg$mB2PHdRcqlmpE0P06jm9aUYhPdKMw0yuLdtt-VbWXr99D1-ntcA0sqZOsT6-efK+AnyOaHCpSvuco75SfY18yAKx4+1$vK2Ts1U-GTjbblgQ1$MJWQY$PKVUCfXldEOz6k005uVEEuZXYaPnlV-akSUVEpEDbi0P1SyNPCnjw9YqTKIdmHB0ulnm5CbSjJB8vB6MspRa23TG$58YuxKjSA6L3tgUtJv7kskwAEr8wY+ihC6tGbGC-56iJxHrjd3aA517xkdWIna86EY+wk5S1Vvltsycef3CKqILJADEvnUV1COaJpIZSnUW9h5bWrY9yH$GQp8KRqC7xY2KnQiKTDPS5PinH7yINp7+dsJlTfWMICO0WI2Q4iDpUVdRPEgOAuePZPIHj2oTJHTYwqzPMVdE787Ql4v+7xoCebiAZoEB6LBm3Lrb0pM+X3Do-YKIZKC7Am2twHdDDQMX0DCrYSDsc18luxVrmPPdpaJCjl2I0S5Zjbz--rzq5xVDu4NAQk+muYRhMWa+923UiC3llZyE6S20oJm2txexwUeNKc4ehqA4X5Uz0Dxw+0JrG-QqgqD0Lt1IEIJK+wsHbhCcAtZhIO-S-s-yiSo+z6qv$JwYrpAGUxatxerfmuolovwi6lKBBICiq1p+Oon5AAJky1Jud63YSi2zu+zUKJiRPBJJkO2RQ$iEekw-I2pesEVEinp3JOgcgCDgSdH4wC$UKcMNAcs3awOgSgrVjvKLh59vrGgPyUiyOcsW+Stdo+sBq4gHq7C47DR3SC+nA8zpNudEtxcq12V0WmTxGHYAZjqS2CQdfHqEUqGHsLdmNOq7zsPSpcocHCkiUv9nvPRwlYQ3T-xS3II55bJzGCB$E1vVmpT3PUaWGKEl0-JkNJH8TYYe4zX5-xmqAakpJS1aRKI5CwDdzKEdsC+LlotvVNbHkYShyTpY7ff-N6rPvd2-le5213LiOuw2KM+Nxl$CuSAmJDChw3Xgk+ro9k6Mpz1zltfNZ9cYyrz0uZj26jpmqkTmI5fKxGP+e1hTytGxDx7J7J2iN20Sqczl4rulhzrN5MeCU2ZzoPDgJhfRxfBb-9t9mo4RfxedpDGqmjZuw5v17funWPhO-cZZ199z77CiitSJTAECX0vuS3mV$MBhZ$ua99E6nd9Ly0A5Ai$djs8ftUicX7XasRl85xfeijPBzJs8-mnIa23ECWk8mGsNmIJnujDg2Pj0gi8NEg4tl8V3zBWJBt3RMN5Sv1JNH6cnitDuEp-AvJ-LXlyy5jgsx-P2HPujxvrUCmmyLgvGpbdCiHRp667Mluvoe38E06Sigvbv$9ffs3ZC-5ftdXRvVhguypy3l$f7dc0dK-jjc1LVdM$yQQw2HLc2PQ+3TIy5m"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:24 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: ya2D8leYMyT14gXF4T2wOQDs8Rifhroq51F7ql2kB4iNzDq/BRosd5140cPEBE0W$efX8jf1kKC05JenXse8TJQ==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b76eff1eb9156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29164,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29164), with no line terminators","md5":"347c083b7d0bfc7d66108d92c42a3c2d","sha1":"0eafeb59a2665e7166c3703353d919878991cdc9","sha256":"7aeb99455a2a1c6abe7796cf03c65673294fccd53fba4a622a23803b369eab15","sha512":"38878f3378fd66c516372db1a88d21eaed9fb43c963706f4ae21588725b18886cf180056d6fe9353220e16f5300fb5e2ededf8f3c9cd70c091e70a5b22b80515","ssdeep":"768:r/bNUYtoLBxmxF2p+V0+zrneMo3CBrcSxVxc8uCgCzPO:rxVe9xm2k+aqtioi6otq","tlshash":"8fd2e13a2d41e24f00141ad263c63a9263d6f369b15399e6cbe92b62b0f9d384435d8e","first_seen":"2026-01-02T02:49:16.108726Z","last_seen":"2026-01-02T02:49:16.108726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J8buZyqvbgTqRMZPwjJWiQh43jJ5FfNsW8nI23gxWXK01O%2F6zi0vhNhgZsCCnJq%2BdrynWn3DO3dyAY0YEu9ESayOwOU5CMr7Pn9%2FQRiBVgpaoEsjlGwcdC%2Bu868L%2BMRTMsga0bL3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\netag: W/\"68ef06b9-c6\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\ncf-ray: 9b76f01a99f3c272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=792\u0026min_rtt=503\u0026rtt_var=189\u0026sent=340\u0026recv=108\u0026lost=0\u0026retrans=0\u0026sent_bytes=292019\u0026recv_bytes=42860\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=38788\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12362\u0026inflight_dur=118\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"97db8103f62ef845cbe078e37073b483","sha1":"3c9d293b60aff72e6ae2c13fd5848565c0964d0c","sha256":"dad3795cefb3d9f5dc2cb4a6e621043322cc94cd90170f28f25b8a0c3eda7633","sha512":"873a257478fdb7ae3b1fa586e1ef97245f9381eadcc08811f95dc25f0fff20fa5f8137de00b18a1e27aa119fd6e622ef09c8c97e80dc425ac758555b430a0aad","ssdeep":"","tlshash":"2ad012f5ff0350080297032340ca2a5ac97cbec225111c7eb324100f00a384a778ba33","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-04-06T08:16:15.591292Z","times_seen":20647,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aAQpRcoBbyW4PxldyRG89bv2yH8sGP1h05Dzmf4pq4NXs3nTjD%2FwT%2FfbBANj%2Fc4FVBhHSV9VOxCGT2PArqrQPf7YGzk3u211SfEgmhOWkrTpo7klX7j4h8lNduPDukTslcxEN8dJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa19c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-5e92\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2174\u0026min_rtt=503\u0026rtt_var=371\u0026sent=877\u0026recv=174\u0026lost=0\u0026retrans=0\u0026sent_bytes=880827\u0026recv_bytes=46386\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12413\u0026inflight_dur=168\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24210,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"db4e19f6aea53de7eda52c2452488408","sha1":"25aa85396debee444afa33096aa137cf354dac56","sha256":"b33e9228667fed7daf64f6f440f96c5af2b4f776b3d904195d6332854a9eee35","sha512":"49a1ec8cc4b7b4daa176e9303b69c490dde05a1de2d3d277b477436b66166d64eccaa08b7217a5d71b2e4fe2df82ef26057a5805d4610aa6113b1ffa02fb0b53","ssdeep":"384:Yxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Yxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"31b2d9053163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-09-09T09:02:24.870444Z","last_seen":"2026-04-05T18:44:52.966334Z","times_seen":1124,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_42_kingmakers.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_42_kingmakers.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 287089\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f0234adbc272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:00:51 GMT\r\netag: \"68f34933-46171\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DMhxqQMsdt1dCYbbB3tx4jdAHaaYBDUoq%2F%2FtfZjKCnxUc5T%2B4Y6DBA%2F89ftbXI0M%2BweCBtCtzD3HRFG6Q1CIQCJs1%2Fs7gnHm3QYctsKtFwr2KdCnC5g5smj%2FscpVyu%2FKckuSch3O\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3027\u0026min_rtt=486\u0026rtt_var=256\u0026sent=13232\u0026recv=1089\u0026lost=0\u0026retrans=4\u0026sent_bytes=15289505\u0026recv_bytes=106713\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=130846\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13742\u0026inflight_dur=1173\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"e25135a0ab8c30d5fb9f349b2caeb943","sha1":"c477c7f12bfa074c259725bd17d15e5c29e34c9a","sha256":"6d56b85eba3ce9838af6cd636b733e571fa41643ffa49a0fd8c8876b90c37a47","sha512":"b3b3906862d17db3d9226188e287a3259ed0c0deb18aff39b4f774be3db0ebd3f0076d39cc1d2249f617bd616a2379af7404b81615fdac4dd420e68528d2b155","ssdeep":"6144:4QJA387bjMRquZ5nYSizsq9p3N35HklTbeaz2QQJ7949gGABv9f/s:4gw87bB45nYmq9p3/ElTj2QQ3gABvR/s","tlshash":"dd542368d5e68373bca34e04c39497e2b9b855cf1d8487da8417bc586df8e38a21bd70","first_seen":"2026-01-02T02:49:16.110432Z","last_seen":"2026-01-02T02:49:16.110432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":208,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/nav-menu.a23fbd67486c5bedf26c.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.a23fbd67486c5bedf26c.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wRWDYnjhKQazzXbBj7vrh75XSQXBj6OggCJIzEb6lrMcD42IgIIS1s1qg4puTApf8Ca177n3OxZVRsdIP2JPBZiHCHRi712K0n3pP%2FU8DBJqY%2BHIccVwUF1cZf2gumB%2FLhdUTi%2Fm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0234adec272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-14a2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2998\u0026min_rtt=486\u0026rtt_var=399\u0026sent=13103\u0026recv=1086\u0026lost=0\u0026retrans=4\u0026sent_bytes=15143562\u0026recv_bytes=106555\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=130846\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13732\u0026inflight_dur=1163\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5282,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (5238)","md5":"f5fa40d2f3e55ef46e42d751f27aaf48","sha1":"26e3a36234e589df2028cdf83650dcc1b1b9eb7d","sha256":"307d51b835e14f1f2678ddc12814a7075f47ca61c5898ca424e07083b883988f","sha512":"847c9702b1edb8da179d6f4b727b9348154a54b1fb877899363358b63dff8e6de177c50cc049b6d36f2dc4db920419b534f1b652c39b6d89af20fa8e6ad93441","ssdeep":"96:B8nm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvkx:0mSjqOf55/UEpUTW7vgoL91SEj/xZdUP","tlshash":"c2b15262729229a7c58f816b77534a2df2322998740656ad7a396cff11f1ec033f1b34","first_seen":"2025-09-09T09:02:24.946173Z","last_seen":"2026-04-05T18:44:52.895255Z","times_seen":694,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_57_cq9.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_57_cq9.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 377931\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f022dacbc272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:01:02 GMT\r\netag: \"68f3493e-5c44b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cTVG7z4Giik91U1WWeNVr8ZQc4VMCFfVd6qI8Kycbk2QoGKNu3BNxYDa%2FXZEnEm2bq2729d5lSyo96yY6zbpO9rzauFIBgswq9W9yiv9OMqDXrKA%2FcJTeTRXxpI%2BqRqMIW04kSHq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1838\u0026min_rtt=486\u0026rtt_var=923\u0026sent=12127\u0026recv=1044\u0026lost=0\u0026retrans=4\u0026sent_bytes=14029435\u0026recv_bytes=104456\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=210341\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13662\u0026inflight_dur=1094\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"75e66e024eaa60c57cd46a53c952038d","sha1":"de3631f3efa653b1a61f08aa6cbcc9fb9eebf695","sha256":"564c52453e289f98fdbd0075bfeccfa35067b71c4db2a60ee9c8fc8291ff6178","sha512":"692717c3811988e423d5598d8c39d28677ef8c5eb333f553562bacf9a2e2fa38782f3b3350288b26940f49261aee2d1515317d5e00f62109cee71af78b990941","ssdeep":"6144:SbRVpDhFRZN3/pH8kSbJ7ZciUDXdRtZw1mtkasfabH0poAOieE:Od/RXd8kSFVcndRvwQGbCH6Hjn","tlshash":"ff8423f8d494ecf2146d7e3401a06951f2009294ab891c6eeeb3eeaf7c546dc7931787","first_seen":"2026-01-02T02:49:16.112375Z","last_seen":"2026-01-02T02:49:16.112375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_47_hacksaw.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_47_hacksaw.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 314230\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f0234adac272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:00:55 GMT\r\netag: \"68f34937-4cb76\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hkIvQRfo%2FokqX%2Fl3RdGtdEZhHpxa0W2S5rWW%2FR3QwqrDi%2BryTISroBG8JDjEiF%2FgkzHcg3t6oc61gIjel%2FeHa0yAtpejlSLrDZjMPn22ksBjLRNCkLXckEH0P4acKv2MPgwnESzQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2865\u0026min_rtt=486\u0026rtt_var=337\u0026sent=13370\u0026recv=1093\u0026lost=0\u0026retrans=4\u0026sent_bytes=15446751\u0026recv_bytes=106905\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=130846\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13747\u0026inflight_dur=1177\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"5ae8f6ab71052a01e31341042982ca91","sha1":"c073983121c38c4fb82432aecc2f07c8c1f7aec6","sha256":"9db94472e25f20d3f953b1b1a9f64217c8e963864e3847c9241c9dd59a018a9d","sha512":"fa2ee15cf4f4bf34e595505e77b19095815f95bf9241feffdd5e96c99744b2401a678a4b8f891ff2db0ed93f173f5fc855f7a37fcd4db96e9bcd91e8e5a8d146","ssdeep":"6144:M2Y8qK4oKWI3Yk187st+3bKxuv+HhD5U136qfKggtvzlM0VEcm:CBK4o3w1J+mxHH3URJgVq0acm","tlshash":"69642320f8e14aacde8bd63b50359148cb84c157fb9f7f455fb2c6ec5184125316aab3","first_seen":"2026-01-02T02:49:16.113292Z","last_seen":"2026-01-02T02:49:16.113292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":216,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/favicon.ico","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"172.67.135.86","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://duangdee789.website/?__cf_chl_rt_tk=MtGKc9Q1HI4HVl_As.ooLDJ0Gb9ztliLCkqShKHZkN0-1767322099-1.0.1.1-UCb_NXisiAFd.Kk5jbE5KqjUhZKKpHiq2nJZmRt_lww\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efdeccd4c272/r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:29.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efdeccd4c272/r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\ncf-chl: r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4322\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4322,"data":"eBNc92bwndTniVZ7pxylOGfqbddyumdL4UEV11OU60kXapFUivKpLixuClKA+KjwEiQPcFN1$Ls4$QNY$o1$xylQZz9LLs8N15XQX37Sd73+FYibPreB454Sc9Rdjd5999nuX+krCB6YZb3RBKP$Ujwr12VICGE5r0L8inn2jxdUTX5ecdBjxsL5p4Fkp1phGEdVnV+ITg$MA$YpP6HRiAKnN8Ct$uCQedlQRFPUSr7G5VODXfRUlkFVCXq8GqPm1Bi5WFMurOelvz8sbr8fHCx+C-77M$AAnPSI3Q1XSC7aKuhc9-lY89CSIjtfxk2I0vUd1vpCLvaHYSBi71NhLVOt7RKMElCzugF10$nX65zaqzYTcejfZPWjtQ3xivv51vlOSNgWzts+hO4hbBTk19bbkI5NyMU1SQwnQMoVsgyF5KTMlIKUL2n1Lld5w8CuMxhNaOo0-P4C8t3A0x5ySLSyA8m2u6Rf1CRhIOMgldfMmg5X3KWgRiYHRhR7+3Clc-gQfILdip960oLUIDu3eHjpZIGtZ+3CS9Q9$kIa9hlo5Ff2ZB46RjR1oNy5jZOu17sFLcgY0Lqx+bfo5E4PW6ht3jku+mqOj6TUVFmx4SieIj$QgcusMi9G0KBPL3SwqD9TtAcFEyCul0ZIskIshW55PMGiKwaRBKErXec9u0yGU4aGAwxNb25+YQ0q3uEB601ls8WUA1rAkm8K-ysUX0fWc8PTFiFxpGwf2Xxv8ed-UYnYZhEDr2BV4pOlMMQyDhQU3xkPwmSB7qji9x5DiW7wizsEK8Uhk13S5SsuS6OEy5ATUPTAvleFuD1O9AUnbCqd8xE09Wo5pFjdqlhuYvu$krrzEmOEdjxcC9FgghAqRlniyfb5t1z8i6oX$pNFDMWVkmkx0uT+wVoxCNmWRbXGB4bcH-b3ytgzk5GeFMObrMHbLRcs18oSa7yFPiE7qEh+BM318e$e1hvKF0z7oSlhUMRzcEghZ8LeeqsmdbbQ-gx4u6pN+THeqqfOaE7AH-jY3pxa5tDS7nfQ-vKv+KkSMLqdvn2W1Z013ruDY753GU4cEyRGoNoqXAbuaSiev43wyqadhCTV$7PiWCY1Y0Tk6t9ZjtHQogPtx6pXsov-+KxyuTWnR+KPIVbBDVG3kYCqkcGQRKtuWjvyc4bkKFbrTSVdf7$MrYmpFqf4ree96ZfdvbluOXeBvaPgbIyIcvB622fWbZoMYGGV-gcTpkwEPecFUzR8kWcHdCQrq4AS+C$lyZ0mVC2xXakIg4R5DFHQuu6MgZvZ-vT32DSQdwkChz8RS8oC65s4l$WFpmvriD8iwoOpqXNUFCguMZIXVLyZi7sEk0ZhN+GQsM25f8ECiKgawe9Heh9ek8WA2iviN6c0-Tyi63zTqzV8VWRTaB0a$g3oDxXKfVp0p1cLl$nc$8sMZTBjn7VtNMzWvbYtpj79juUkHQDIKQ3TjEevOzooU2p639+c7r2Pv5kQDj8ssW1T5GlUGQfpQeg4XdwqiDr468bW0h$cZO3TuKcppK6GGe7Vnu8UMiFYu8XpDoS59tvuy4gSfv$xtmgwx9PGuCgl6aWUSGbWbnbVVxL2OL+CwBl4ftqm6GfxQg3$dhH$Ug36SW0GyEvO8yhiZP4AXgeobeNsT2Bsms8LYccLBZoviBp8XmkSA6VaK1rtc1-gqa3EuH6nIXsx+OWDIlqcQ9GHxsafseungeUDN+nb6UZLlFF4YKBcdBFlUetv2IIk-z7Vk1Ia2oY+1D6bR8HBYluLWbquZd7Qn$Pq7E7Wgkz2hGRgcoI4YMgaRn-SfYNyXiljaSV3EFpwh+Y4btk6XB8T1AlvE$YWM4P94qu0uHNLyxxKmLunEPfGHBtduQ+XP7jRi4d4L4X+H4k7+nt1hfizEEW8Eadqq2j5LYQWRK+IZ-ORND9gP3sSmjwEBcazIy7NYoV2rsfG9nQzbu9QfCIVu257$BdcIK6lm98fXEFKyj3ADNsOo2jE8OkzAHVAu-gKS7BOBOl5HPI+CeyU6bKVRmloDdg4l5rVIgih8KPX5zu7Fn1FARslZ9Uoy$asr7s95gFoRsycVFyU4I4tTsXX4Q7C$QkyE0wjLD4jXtEzyh8xO0viG7f2w01KqM38oCdwZRqZOTvjvKWvOGzVSdPKmhoEwrtFzfyM8Dr6VBlzf$sUsNXyMGED59ye07GR8sV6LLaC97eKRVD1ZUFaKokA13m2OCalYNuAbnr4puYGKSlP4e$laCSZu0KIRHzgN8P0K4O6Q1IijPuGsoym9EuZH+EQO5Crc5sr-kp3o+l1oeSUZfWu0PSnlrriRYpL-Eny2CroKDsT+i-6MtPa-EHB-$kPcrwvhwdL6V46A5f3$iDc+wyW1Gwd-ucOUb8mPlYfqBp9zwiVyeMSZ13MW$Llz3a+MEfhxpz5KeOGWm7mBrOwSdqN2csspLXBjcXlIWLHwpgXRW8h7ipzE$7$ojXSoavtvcm-ogXKuWB7l8E8zpOxOmhBGPuscxHZzrZGRnI+QQw0eEytbnQwb7$kmusVw1j1X0LHFmC$6-lView9dchGr36wDaNXNFHNR9Y-00OUjk4ba1HuzvFpQ7gLmrkqW+j-CZYvQjdPcVIvRz8XKvDvsQvLYWTsa9oAv1GSdswv3-O6EV+w5+5qdOAyR5Oo68dElAEIGCAa6q6nidIKpRYqCRWvIvwwyi-TsTUqOFpMjqZfn1aLHbfz3rN$Z8bprpub1waTVbsCb3Sz0jmApCroLojcQS2PzaaxR4C-xhGn21-+eHaScITsT6id9mBFHV+zCH6Us1Umh+HL1gNxebwXuMoFQbdz0HA-bPeWH4j4xB+Eg5C4G$AVozlpX6$1YS$$rYK2Z+up2Ng$e8RXsfonKbLgudLsoA2pARAjF3oVkowOqpDNlQunOQQEb4LZj0xXm4SN55xejSN$xOphpCivX1Tbx1OU3vEjgfK+xL8Amp1Sz-2xIeRdNz1gjf+9TBGbLm0WDne7QSqjLUi-$2-jlRuqqzTPw017wfgUDlCrAVqNumRIVNtTYg9IeV8exvvumBSx$F2jN0szokgOocObl0pzc-+-QECj1OiIBjdf65OiYPx1$4Sh$ti5qXev6hnT28ykq3RP6Y7W1mIT6YDoK8-54o9OZpBMurIyCl+j6B8p84ss4+aStqH69+ThzvTahIqOWpaxeaEE4wHOYcxQywcFzOfALP6+WCPhqkgYL0$BpBsoMkHGhd4$cgD2b5AEFHNxDh8Y2rrLKn4cW1sL5hn6OMLucWTqr$p62oyT$QhXnayinV2dSr$36Ok$dQdVKT$E3Y8fiWQ0l3G81o6-ddgA6A$h$xsmrNkAEtsCSeVO6QZ1HN7A2DYmdMTiCMnLI3nLM-FRsW9AsmbWw3XHzxCUpgbeQXFmGOM5U+nRXXioT2WyURc7BN+M1BEnF+BknCU3NRkmv$qKW1SMNiI-fPDgGex3oQPsyTKQInM1N3ahI5otKZPDGEc1I4KIk1l0Zkb7VL1D8d6xSH0eFpyPcEBRjYNUMcn4eHH1X3e8TaoMCg6m+cpQOX$WYf8+KlIIWRXiM78dLttL4oPAckFibOple6kxaO522Qnc1N3kQQkcjMn6DoxMmq1yIwy+PO02Rfm4BMw6jduTeCc98ia3lNf8sEN0fIoffxWsvz6m3o+3ELvuCfh18KOs5ep-4WR0KBP$UMSCDky+TL-aOMdk3CtYuCtBeN5fI6mzEzsTI3Wudy45svMQfs+Ahu9PVaj-UxUfbdfpYhOFdvij1ykw4xl1$3+ySAOnxe-lwmChBF80gZSzZWXIsed-bKys7LelqEzHrBUcoy+5P17YByYfCslx+KAab$Kfm9-iMqVG4Ru6umOdH$si0xmMvoR-o1Bso095P5axjlwGuMoSrAj1$uKUjwb78ITUUXuY0qxkOW-2nj7xLy81-qLzTUyIelbvK1vxF3+lXKbMu5LTIjWD+L3NWiuQSl0xWXwv8NN+GRBxLoolj19A7zQ-Y0lvo6FT+6lqvxr+h2DtU9AL-os+qrbZR+SaEld7LgHgHZgFj82r5rG$-poT896aat9MimZF$hhsYqFwrVYVNoueo7bs5s9gAR6k9X3YdRMqWUoUZRYeUhgkoPMl1wuIwq7mXndi5bKEGAF$uvzeGedPO8ut0Ev$Bz5eBGPq1wI54qVYd9BnGO+hiZV+h$3m57iovaUQd$V5ePDRG6kFnSV8IC4DrtOgcGcH6v70DOdjhKxqQW4uZygGUMLk6vjpWpdfvrzgKqw9sci1A8Vvs$0i4nZZFWPSlPpffcqIWQScSVnjIowHSN"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qqq55F4oYl9ZFybcKi4DETIe9gPw6RaFO1Qm0bgUnyqzuo2ZYGZw6P%2F5AQTz7x0KmhOITQYO3ONwEhaFo2r%2FIZGCVrX9bX4ar9b45SruLUc7Grc%2BPSLXCBRJ5%2BNRNVxmHg8UUvJh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-chl-out: Bt0PGibRVObRv7HClDeS6uDOQmQa3T3oGQ3sDnsR2G6DZsloDPS4dd8qNQqHrdeerSZVOJZ4m4dpRBxKB33b7g==$TsRG/STuXLU4IyIOIdHE6A==\r\nset-cookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=duangdee789.website; Expires=Sat, 02 Jan 2027 02:48:29 GMT\r\ncf-chl-out-s: WCmEBrY+GMZrb5LpuIhjZMkx68n3l7cvD7KFFdAH3hKcdxKrQ6ftz+ky1+9ZQVcadUeDozJz4bDKv2F5xMUPKsoaSf+9V5byGzIwAaVssALqLkCnA/XByOvWk7SHbuLKeooQM8VbACMtWyylviKOE3fpsfRN8VA2oyxBSx88TGPUHzDbzv39ST1E9SXAUxu5uRfK9YcHALLHt0AtWElwarptEGpaswl2eXXcIQSYWtvG+2r/SVa0S3fAWHP0csiWQIRArxSGeMNIPWj8HkqyZC22Suu6gRPQ7HHa1fZM4skTu22UBdJBgPM3GxU/HSigehmPv+zm3a2zYQfDCOkQh7abZFeiyM+U8WrJRDk/RdSmT5KFnBOu0uoM259X8eoP+kVBW2vCCRWHQy/V9wEgLgPzRfktZQ5eyzzO9RZgoUAD9VMX9GemnacOGpSSEQsu$Elx2gRMHBKgqklaAoYsR5A==\r\ncf-ray: 9b76f00e4919c272-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1331\u0026min_rtt=503\u0026rtt_var=685\u0026sent=102\u0026recv=39\u0026lost=0\u0026retrans=0\u0026sent_bytes=89555\u0026recv_bytes=11729\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=10246\u0026inflight_dur=67\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4072,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4072), with no line terminators","md5":"f80152b7ba29ccd460dea408626e1b5c","sha1":"77782e0c9f461228aa24d72399aea15f96c7ed00","sha256":"1fe83a5700a302b8b6063ccfc2e6b96f19d46cb9e2befc50496baef46d27b455","sha512":"5e9d10d5da657c963c9f0fef1ce6fa46ce14cb450476db8c8d5d885b01dec48ce4b911d02d2173c6d1fc8ca4824adcadc67a5ce1adbcbe677249cfd530154496","ssdeep":"","tlshash":"6e818ea03e609a8b4d1c1791e8f6de116ba06ce3c802d59ce9a344f24cb37a9910b0f7","first_seen":"2026-01-02T02:49:16.114177Z","last_seen":"2026-01-02T02:49:16.114177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.10","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.10 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RC1EY6NaY0QPQnjQ%2FqU7XpRobv6CHgSgfQr%2FN5S0IkX6j6WXr99%2Fv0VQhc2ffHVwP%2BA7Z9CTe5AJICOHco%2FgFlVkGGwPeGmryhnEHZYmroAEFToSRYTt2PZ3V4DfXJtUAocN5YOl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a89e5c272-OSL\r\nlast-modified: Tue, 02 Sep 2025 08:06:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b6a590-b297\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1125\u0026min_rtt=503\u0026rtt_var=410\u0026sent=185\u0026recv=91\u0026lost=0\u0026retrans=0\u0026sent_bytes=131374\u0026recv_bytes=42068\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12332\u0026inflight_dur=96\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45719,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43537)","md5":"bdfd244e18f1169377f8871882940bdd","sha1":"74cb00bc3ec5ec15e73699192365a2036764c024","sha256":"e92f17f89facb3d9a63f8aa7791b51b062040b287c6dc6ff407b50ca58207d06","sha512":"82ebb0b228e2b78c979d36790853a217d997320eeeef5d5ce610b39df3e2767762cc79a0c31e986575d7b4261ab3b1f43b0227931268dc2ed45187e30450a10b","ssdeep":"768:mPcOrk1rhDYollnk+FHkqYCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:A2VY+tHQtBU5PTwDuaP","tlshash":"fb23f96047d035391233873efad6b9082a694313d74f26e6f8ab8768c9c57d71a72e4c","first_seen":"2025-08-12T03:21:06.901064Z","last_seen":"2026-04-04T22:57:46.834398Z","times_seen":1320,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_4_0905faa7ccfce7193efc093d68b5afde.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_4_0905faa7ccfce7193efc093d68b5afde.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2435053\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01aba00c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:24 GMT\r\netag: \"6909a7d0-2527ed\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qqpIXiARrFzZu9snxoadwbZNAHe%2FURxeZ8ZHNn1gS0aVJljD%2BP3K6DztIHWZiTERJd%2FQM2nfaWuGgacqAXVEYYdDbu%2Bgt8PTFjKmWzlfMBGkrzn%2F3CLOWxKTCezVyavwy8Qr6mw7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1853\u0026min_rtt=503\u0026rtt_var=489\u0026sent=493\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=463831\u0026recv_bytes=43471\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12380\u0026inflight_dur=132\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2435053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1040 x 1040, 8-bit/color RGBA, non-interlaced","md5":"a187f8365df8ee1f7a65c4ce27eb6166","sha1":"27da3a248455e84daef8f4c15b1c14b7cedeb62c","sha256":"3827227cd660463ad4bd86d62ef9dc35d4fb850de60a043590c376077678a283","sha512":"11718d83aedddf9ee889e48adf58f90a3ba01ca0abb5922b6fb6acb8c364313947dd7784f655de32d0d626c1902a7e314d0b3d8037197beabce57006b7f04ce4","ssdeep":"24576:XcbRub4zQzd49IZq1Dgp+25J4js7OebPdIhwI8IG64k:IsbCQz+9Ishgpp5J4jebPdIhwTIZ4k","tlshash":"fc2523a8f2bc67f2d7224d47d778c274a01937062b6a633b06b1d51de803e2615a5f3e","first_seen":"2026-01-02T02:49:16.115578Z","last_seen":"2026-01-02T02:49:16.115578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":902,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Prompt:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Prompt:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 02 Jan 2026 02:48:31 GMT\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27515,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"43c6a1331c0f563b3915eb56847a5e41","sha1":"fe847b11a7624397c50fa3e0f093b197223115cb","sha256":"bbeaaf1185f5795fdbe1222a69e36efbb9685578ccfed0201cfaa607857e9efd","sha512":"adb4b552056658f3a3f41fa92d9dc1157a55e417de5a0d999e0137580017dc5609e4ea01abcbf7b3569d9f237e3ff88dac7b404abe01b47f64c8b93f74f77078","ssdeep":"384:G3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQICsAfX4sGRcnZzcZCfixlaSO:23HDaZzcC","tlshash":"05c298b0042ad500ea871dc667cf7e369e8eb1667460c579affd1888fceac22532475d","first_seen":"2025-09-07T17:24:27.803521Z","last_seen":"2026-04-05T17:31:54.007885Z","times_seen":352,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":251,"dns":1,"connect":28,"send":0,"wait":110,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/publicbank.avif","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/publicbank.avif HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 91710\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01aca05c272-OSL\r\nlast-modified: Sun, 21 Sep 2025 02:21:52 GMT\r\netag: \"68cf6140-1663e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ns2zmUjcnqEMqwsh%2FA1OqUOlokCO9bbfJgJQP%2FTJ4JFWibQOhTDgcLTMYaXhbgdLCVTW%2Bt2aWEfPhh1qVqXLUMPXjk6kekO9VruNzU2%2BBh%2B%2FCpv1FZ0w5RTBwOXd0szXj4XUZMY2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1853\u0026min_rtt=503\u0026rtt_var=489\u0026sent=493\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=463831\u0026recv_bytes=43471\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12379\u0026inflight_dur=132\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91710,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"90dea175b6aa83adc486a80782cfca3a","sha1":"fa66bcbe486be0bae59425a23847c9a956f47b90","sha256":"fd83b400ff05d867b5364977de2adbea0a5b6089411a4f1339e5ba45f2d62995","sha512":"f330e267db3995d745b6f3ea04db9f3c94398ae373b870c5e73f163e162d72cc9b1bc3d28e0d8c35a5a9d5e8e02f39a5ed8e1e2f94d80f346ec922da0d256880","ssdeep":"1536:Z6VeicYr8uMItAzBtCHBVSg6J86oGkYZsMTAHYwHV5hZSwOYM:Z4/r8kt0tCHB0g6J1xLTWYwHV5+xYM","tlshash":"5d93122b556d7584f12792ba424684beed7cf01588de4a0c61400edc9c3f6fdea2e1f8","first_seen":"2025-09-06T21:24:23.352418Z","last_seen":"2026-01-02T02:49:16.116855Z","times_seen":12,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/favicon.ico","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"172.67.135.86","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.286Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Fri, 02 Jan 2026 02:48:19 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nLocation: https://duangdee789.website/favicon.ico\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nServer: cloudflare\r\nPre-Cognitive-Push: Enabled\r\nQuantum-Flux-Capacity: Omega\r\nAge: 5\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2MPmnfS1j0vMVVqNvTZ1MWd0m%2FXfydG3XrkkUBvTuPnfNqm9mFSOO%2FWCstuwePsB4SccenriegJjaMx6AX4WOOwigSJfBpLpqAPRjXGAqTp0khU%3D\"}]}\r\nCF-RAY: 9b76efd088025fac-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/elementor/css/post-17.css?ver=1765588997","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-17.css?ver=1765588997 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JGUrDkQrRdrwh1hYTIL4dOysT3DWe7ly2E10j2jT5dB6EDcakX8Zi8rEc%2FxdL4zswtahAnGozyasV%2BQdzlAId8GY7aUrL8zi7qCcLA4zoGoPNVQR5fM4ya%2Bbc%2FITRxm7W1N7Lnwr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9f7c272-OSL\r\nlast-modified: Wed, 03 Dec 2025 17:01:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69306cf7-662e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=792\u0026min_rtt=503\u0026rtt_var=189\u0026sent=340\u0026recv=108\u0026lost=0\u0026retrans=0\u0026sent_bytes=292019\u0026recv_bytes=42860\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=38788\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12362\u0026inflight_dur=118\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26156), with no line terminators","md5":"3389ddb397f98df116c90e3d3ab49557","sha1":"6c9f665e7464dcc9bd8e32b38710630606c3782d","sha256":"4e08f4bcded5a9689c9379c1f3a1b7a22ee8b42138211e51821237fd07fcf1d8","sha512":"64633ceb5005550491cd34cc51bc96ada1b2a3f7489b214ba630a6747520f770d5a1f0d7b6c9d8bf445835c8eb35fed5c20320fda8c56b9b369a2e6445318e3d","ssdeep":"768:k+bppLNrvSv2AnMK8D/b2NJbEwUteIoyVQBtEtEwvRD+WnBDlQJnCEL+UtBMWUtA:xmgQjt","tlshash":"4fc24a543e03d128b53f046f6407b6ad242cdccad52f66cbec569213b0faea673a4719","first_seen":"2026-01-02T02:49:16.117576Z","last_seen":"2026-01-02T02:49:16.117576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8Dbzz5VXZ8aAbhOgh1ZxWeECdrnTW1lBa3L4T5bzr358WGhNnaxLG7R7SD8dUjZNoF%2BgU1OWaG%2FOluiBMPPROQ9lrw5nkDxLzHSBFUqxZ1rukIgUymNVeYSQIwLbNP0JPsqXuMuL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01aea11c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-e89\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2333\u0026min_rtt=503\u0026rtt_var=412\u0026sent=629\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=614810\u0026recv_bytes=43830\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12393\u0026inflight_dur=149\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-06T08:15:15.678098Z","times_seen":44791,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T02:48:19.065Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 02 Jan 2026 02:48:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qVDryTkldR%2B3cH7wqldhveuREZ%2FOnSzYdqyX%2Bp2qqdtomT%2FxFny7jlpJwMOiRtb4JM52oYhS8KEle1LaN4KxidAHWXIPftsWbFy%2BreKQ3epJyfAIPKTiEFmJzbuH%2B9KPRziZ3jcv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9b76efcf2fde783d-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9b76efcf2fde783d\", cfL4;desc=\"?proto=TCP\u0026rtt=450\u0026min_rtt=450\u0026rtt_var=225\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=404\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5320,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5320), with no line terminators","md5":"919e532e87a73c8c9f1cabddd52b9784","sha1":"bb97b9d6403296032a34f9f492aab19ad54fe6d5","sha256":"0c12c027ae9732aedd79cded3e0e5e82be424ca54d46e16bb4ad518ab3fb890d","sha512":"422e42fd7b0792adcb888026ac92cbc34fceb5edb13210709a5eaecb61c4853a5192a849422b47b921124db42955105c02b3d592fa1b385799f6fd9fbf9929a0","ssdeep":"96:PNybXZtIEb0EFW87INQxYl7GcYfIFb++ihaBSHrJO0JuYzueh8mmw:PNadBqRlufITlBSHrJdJTyTw","tlshash":"62b16db7e9625017d3bb4afb497b73105125b158e706a5b8f8e2980cbaddd0bc03914d","first_seen":"2026-01-02T02:49:16.118779Z","last_seen":"2026-01-02T02:49:16.118779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GnHYialNlpzskYXCtHccbKnjDQp7SnD%2F7PXjNkwpXMReBpLP5y3MlFsClNy01zuJNQDSZQMRt95lPA2CMyhIuTtpUL91juAA5XSTp8lRsA%2FTPfDW7NzgNrgXfAwrkiyhFBXe2i4U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99f0c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-4057\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=829\u0026min_rtt=503\u0026rtt_var=225\u0026sent=323\u0026recv=106\u0026lost=0\u0026retrans=0\u0026sent_bytes=273559\u0026recv_bytes=42761\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=31620\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12361\u0026inflight_dur=117\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-04-06T08:16:15.56899Z","times_seen":96314,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dXUVhoW0IX9ZmqcizBUxiW1EZW%2FRmOukAbeQV1nNkYTkXMModv%2BDGchl5VGOXY2JTj8uYzQwwabkYfiVoGo%2B9d%2F373AI6gzuxAIhCXZYgPdJ8w66doEut9AxjL0q0Ma8I%2FLjoG7A\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01aea0fc272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-7e6a\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2331\u0026min_rtt=503\u0026rtt_var=649\u0026sent=593\u0026recv=126\u0026lost=0\u0026retrans=0\u0026sent_bytes=574123\u0026recv_bytes=43725\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12389\u0026inflight_dur=145\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32362,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"473c356dc1375b89a89396fdabc64357","sha1":"dc6f1a64100bbd009708a9ec40244abebe85c4d8","sha256":"a60e22996b3d94aa0e93c90794942d627d01e95fb3b144ea833d60c80fa803cf","sha512":"3338f5d0a801b88532ad3b764e46b3359e408c9b4218cdb7112659f1ea73139977024bf118b4bff06af0ee938a8579f6c7f8a21ebf94eed548607b62397e4249","ssdeep":"768:Vj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:3caRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"36e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-10-05T16:15:06.575149Z","last_seen":"2026-04-06T06:39:20.179582Z","times_seen":10329,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2Cv_4IfWMuQ5Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2Cv_4IfWMuQ5Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 11:21:00 GMT\r\nexpires: Sun, 27 Dec 2026 11:21:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487651\r\nlast-modified: Thu, 28 Aug 2025 11:25:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13044, version 1.0","md5":"609226f936f2b82dbbf2b35c87d7ed3d","sha1":"a290f40d78dd9bb305f4e07527efceb54510fb94","sha256":"a7f3d9ca1d17420a311da6785fbfa670c0f7a57ea421eaca4ffe354d61a43a12","sha512":"50cdbb7d8515ca4f5332f93bc1ae4b9b52a8e70c30d7ad565880b0cf5bfddcc8666f02d6cf5d50575a80b4c8adae33691b7d9945e5a0df7a484fb74104e3d008","ssdeep":"384:jNOo50xgWl6O0ix2dyCjoVM0C8V9uwDglaYsbCq8:jNT50xbl/0eTC6bCQumU7KCF","tlshash":"c542d0215102de93c3654734c0fe48cb66168a37d7e2648b707226bfd8abd93007a7f1","first_seen":"2025-05-07T21:44:45.039993Z","last_seen":"2026-04-06T05:46:53.184743Z","times_seen":500,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/favicon.ico","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 02 Jan 2026 02:48:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png\r\nx-robots-tag: index, follow\r\nlink: \u003chttps://duangdee789.website/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmDFiGc%2B%2FFxErAljhm%2BmO8sLzPtNYD0stXFzSUfqbDZ0TkJpV3aaBlyuEVlUb6sYcUvUphis%2FSqKhaI%2FIE15iDyoliD5ZTu8Yv%2B6R%2Fjp13%2FP\"}]}\r\ncf-ray: 9b76efd2583c56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":1151,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":1110,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/?__cf_chl_rt_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7Uw7Ew37X%2BceAsSKEBM4rXTKYad5lN9ExAMxMuJEpM3CjeEVViH%2F1W0V9to%2BuLVstQ8G8ufchU7UqxdisxwlGCJuqYgOT6Fl6xo1RJPaoZrBSSJD5Iy3PDbtK8%2FUd5paMGl97ZWw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9b76efe08d1bc272\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1474\u0026min_rtt=503\u0026rtt_var=1140\u0026sent=79\u0026recv=30\u0026lost=0\u0026retrans=0\u0026sent_bytes=69953\u0026recv_bytes=3897\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=2861\u0026inflight_dur=63\u0026x=55\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9b76efe08d1bc272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6802,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6802), with no line terminators","md5":"fd6b964cc5fbab26ba40a3b961ca8c62","sha1":"2578f761dc5ee71036ed41846e8d247d95ee9de3","sha256":"ef92ee0ce1cf7119b1786e174e30f17c4b1d4b5fb873413c2621d81ebc2d89d0","sha512":"8e3874df3d11ee620907e45eab79fcdc30f4963264e24b9e4f18ae7c5261d50c2c8988c957514e75a2e3f3526dd57c14fb31315f7d41359c286c7fa424710d95","ssdeep":"96:PNybXZtIEb0EFW87INAGhZPn+Ja9PDfh/SiEsQJZK0kuWaLMt8euqC6Yzueh8uUW:PNadBqbP+4xhbQzKduE6qCnyBFw","tlshash":"f1e15cf6f013806f83eb4bd7007b7754a100aaa28b0591a4f6e298dc93ede4b45ed884","first_seen":"2026-01-02T02:49:16.121206Z","last_seen":"2026-01-02T02:49:16.121206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9b76efe1fe3d56ab/1767322102526/815dbbf5ddf3e9906788fac4ff4548eb3f61167e755f2ddf08ebfe11fd065444/5eYMySDCZ7wPDL4","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-02T02:48:23.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/pat/9b76efe1fe3d56ab/1767322102526/815dbbf5ddf3e9906788fac4ff4548eb3f61167e755f2ddf08ebfe11fd065444/5eYMySDCZ7wPDL4 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Fri, 02 Jan 2026 02:48:23 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\ncf-ray: 9b76efeba9cb56ab-OSL\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ggV279d3z6ZBniPrE_0VI6z9hFn51Xy3fCOv-Ef0GVEQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxwpJtGmIklv-COxUadsHCHr_9kPZ_YZ50IuFpOkVmRpYRdBBxdtJZ1k7clRteab1ZkYkOkDP4WCo2j_d_V-a3quwVupY72VgIlJBouIb1787MBn7GRoBHQT-MjWYyUymXbznTsiKisc75usVqYRniYh08QtWlTBc6xUZgNxYvX8zRKXu9_WgzEpNva7bnKEJTPAdm2y_vJ7IbdQ98KceAOwoFrqSTklw-uzctcCZut0TM-98BwlB10jPqRRo1A5xVRMNJPuPqPgGUJc9JyxKf6AS9uJyJP0O6-J4oeLugn3Lj_jIbTFMUFpfbzhAB86EAg75K2rsL-jMMl-uyMzFeQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIIFdu_Xd8-mQZ4j6xP9FSOs_YRZ-dV8t3wjr_hH9BlREABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA8DZavzuaj6hGLpSCGgg20ITNTzga9oZArxZtgijIkNPuVnz0ZlweGnm_xaaUa6b5VUVo5-v4GwMOPWF_EwKmoNzYUYnenljXH_EamPwM9Hw7y31TGu1_XXIab9VO5fjolHbjoO94WrTSjaqJKnNbBwLt1Zn_EapQ2lQiTz1qxz9XRu1U24w9Y2NgDI9oQMqpU8TBvqgDn3rr7RiJnevyhRyft0UiIxZRA22VrPQBiU-gAsz4z0gct0mJa9oWbEXHiCaldYXPwGvO5Vb-sNUNjT7B1URDGtEruCM5UzMLaTjWonMIodG6WRDeJna1qHVsm2oPmhdbHQDa0UqiUB3vswIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIFdu_Xd8-mQZ4j6xP9FSOs_YRZ-dV8t3wjr_hH9BlREABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1OLT1txnDyMQKUHuLOxbmXB4w3sICGxxSsSQHFLTLisstHGC4dAVpA91QrWzUh8tGFkt6j_YtuMIQq651XjnowKJXlk6ym_mXsMqM1k7n1lhy3u2kQzGmgM-1WDQ0kWUT4rPGdxHJSgKjWcjmAje5Vlk-ARbrMe9iEAs_C7b8NJdaUk2d_sKHYVDxgNb1NK-UilF_ibJKJIAUTYw-EoW-7RyStG913e7LKjqihPXfOIxSSOZLapu3pL47xNiuw07OLqFGSH4O0I_VtI8iKY30v-suwG1FWDLgLOt_1SCsHyQB0zfQWIVfMeOMxFUjM87EsCHsDgwPP5ItjLLgwp1lQIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:09:53.324732Z","times_seen":400892,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_12_game5-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_12_game5-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30460\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01aca04c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:15:03 GMT\r\netag: \"6909a7f7-76fc\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OEC1aj4nLK7D7B8T%2FX27LtRNB%2BXcb76MVf9rf4RRMx%2FE5OjOmknWNAFWxiNjYa5jOiOA5drLLf0T8esMSHbn0PZuy%2FGVXsN7784hZKrhqb6TV5zNFIVtDkqSCukFZbxFkYY%2BAqG6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2218\u0026min_rtt=503\u0026rtt_var=971\u0026sent=532\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=507799\u0026recv_bytes=43571\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12382\u0026inflight_dur=138\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6e05cc4456358add3a1512211047cee","sha1":"a485a418e9a8fee31392b1c327d6ea8cfdea156f","sha256":"9ea62a1c5394773cabc47b77da16f7c9d60d5aa0be79d6cbe85a67abb409d1fc","sha512":"9412d411b3e5d4c17a928871eb9d82a517c3ec0e9f8cd4de116bee5581ec320eec93ce2251eb1f07b93976d62ece81a248bd4b949ad7e7ada4778406cab5ea5b","ssdeep":"768:RT4zZyn4EvoyXVgIR5ovPrU06I7Vy0N4ohjvrv:emP/RoA06Ihy0uohjvrv","tlshash":"3dd2e001d3b19328c5db92f2b4500611eeec2d01b62defc7e0dbb97a9926d54084cacd","first_seen":"2026-01-02T02:49:16.1225Z","last_seen":"2026-01-02T02:49:16.1225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mkYZnkKkdGwLOSfhp6XXuslQ0fSdO9LR3nSM10Bpbci24816HLOGWGJGpJ0%2BdyqZDCAA1Bv9CaKGtjKltfSBIIzZ2Ffk0GHg6gTdZd4ohxWvawoizyC4NRTn52C0uRRWfY%2FAir7C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01aea0ec272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-e8bb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2333\u0026min_rtt=503\u0026rtt_var=412\u0026sent=629\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=614810\u0026recv_bytes=43830\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12393\u0026inflight_dur=149\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59579,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"1b0e51ea66f635185c33794622ae99e5","sha1":"4cf69c28e752122dc5f53770043265a1ec06c4ec","sha256":"d21670e3126d50e07f581fb3ef34b2c33cf9891a0011a502a6879bdb3f843089","sha512":"13bbefc216990339886ae3e0ff29145d8260aefa865c2e7ea469f6bbc6a160200b08607b5fb8a0bd767fc10508dd087ddd77259b27fc56ad55629b56e7084508","ssdeep":"1536:ZGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:26SOEAu","tlshash":"8743e9863652f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-10-05T16:15:06.664289Z","last_seen":"2026-04-06T06:39:20.215617Z","times_seen":10225,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8RHmWcCM15B7eju64cqZ%2FOknZ4NT%2FH1QbPJ1Achv%2FmoAN41h%2FsOSLPKbeeYREXKNrZZUTYLd8SRtSUQrJXInhj1UHK%2BkQ%2B9HTpqoxmjqcbf4tf4Q2tU6E3lCbDv3se8oYzZNJBWi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9f6c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-4273\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=994\u0026min_rtt=503\u0026rtt_var=294\u0026sent=232\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=179157\u0026recv_bytes=42379\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12352\u0026inflight_dur=108\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17011,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16961)","md5":"40f9e40cf573444b0de96f48ecbf4985","sha1":"a409bbc1f8850b914a2e3060fdb72072060553b0","sha256":"6f9f78c1a96eb5a29d42c6ba47c7177514981f7b4efe329fb1c82a46b875cf02","sha512":"bf42e97d33b9f726b99623eb7fad923dc8d587e56d092d9a647c0f7aa80f7e346307495c2e03b1ae29b55c70a96a974e5ed92f7cc517f03ad961375861687c3f","ssdeep":"384:vo2+K9RI1whgqkxk3kSk+B1eHE6Ye0bx+AdnxI0y5syiJU9jYT1ZMDiUjpIxUBIB:w0y5syiJU9jYT1ZMDiUjpeQ34aeQO6M","tlshash":"fb7255017d1b9464aa4f055f605322cc2e94c1ead186f8ddedf1e28b8bfece53324969","first_seen":"2025-09-09T09:02:24.879453Z","last_seen":"2026-03-29T18:23:45.244921Z","times_seen":103,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TCouFSH%2BphKeSI%2BfqShGIVSpaLGvp2zNaVfwKO194hsTi%2BGCRqpHU3zIOXc6NfKgm6xktDNgQJcG5yEhQ%2BUXeqdNszfygKGLzPePQnDcLehZjxD6tGMjdXtB0gR8AMxLuSecPmQy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01ab9fcc272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-3509\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=946\u0026min_rtt=503\u0026rtt_var=318\u0026sent=244\u0026recv=99\u0026lost=0\u0026retrans=0\u0026sent_bytes=190809\u0026recv_bytes=42424\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12354\u0026inflight_dur=110\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T08:11:37.439648Z","times_seen":642589,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2Ck_kIfWMuQ5Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2Ck_kIfWMuQ5Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 11:07:21 GMT\r\nexpires: Sun, 27 Dec 2026 11:07:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 488470\r\nlast-modified: Thu, 28 Aug 2025 11:25:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12924, version 1.0","md5":"3ef03621ce440b251b8ed3bf4e202e7f","sha1":"34e429979ff8c2b870af836feb2767bbc4185324","sha256":"3ed6cc86f385acb545a840d88356378551c9a8de5f59c7d19b62464e85dea55d","sha512":"b64baee6e804a749c77d7029fefcadf6425827bb2fc146a51f4c0a641dc901e0912b017c0e795c4f634e6590c1b4532a479ed41880e2e13da4b832c7c03a6e32","ssdeep":"384:oLajokRhR+fLzu+5sm0vPFw07nY/blJnwCTEK:9HREzuJmge5lSK","tlshash":"e742d0dd992f3c268d0c592f7504cef2d82e78bd6de16343ba4c4e79298992350452cc","first_seen":"2025-05-10T17:35:24.782689Z","last_seen":"2026-04-06T05:46:53.116879Z","times_seen":689,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":195,"dns":1,"connect":9,"send":0,"wait":152,"receive":2,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efdeccd4c272/r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efdeccd4c272/r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\ncf-chl: r2FlAV25x78.EM9zYx9tNREoKaBb2_Si8lBgNFBKprM-1767322101-1.2.1.1-UFy7vkgtbQH060IONJV6sXVrbveOT2HnJKswZhzdZ9CiwIsMk8dq28t5vR6dDrtq\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"eBNc92bwndTniVZ7pxylOGfqbddyumdL4UEV11OU60kXapFUivKpLixuClKA+KjwEiQPcFN1$Ls4$QNY$o1$xylQZz9LLs8N15XQX37Sd73+FYibPreB454Sc9Rdjd5999nuX+krCB6YZb3RBKP$Ujwr12VICGE5r0L8inn2jxdUFg3wr27svOVGTFPloxwstRSSmNAeYprfn1z+K61rxIyXqXs2a6GR1X3ETi$wI9BsDaTxlOukEBkfjRS+E9IUTDCI0U8VHk8Ryj0DQ$iWPSYXhiNBrxfpFOtqkMjc3KqB+wSzOonjqe3qem9zTZm5lHeTE3f6I-28B+GTlhtdhTGOUb0VmmrtdSMc5DzfAyUfeloKyjCvWmiD$vEXdjcFiVf36DK2fytlr0hld8hO4dMSeyw6uKra6caDrZZB0ESSwGFBhqXV$vlgATovcisWfxRtG-VbiNVpCoNUWwNkkPG9BDeCo$nAnRxI6gFmq$sWZmj5$IMS4HFVNp0lnMdi27By7UpG-qrp$cYoqXt0gS4RfKSLlCPD$tCnNAHDpIqN8MfsVHt52yIAYxqOI878C6Z9q8gI0EQW5+kS4ZEG8IbL$UNYrde62oAOT3ZfyspzzFe7UOmBg3+gdSM2bmNyCyyidC4H51nV+uMB2fBeOiz325$LKt8wj6ljKAwev0eg4tMc0R6c7m4HtZEXxOA3lHBjCvOBTMbwluK$R6gxDWOn327jsDBpyj+5Th$woYwLc5R74NkCzhhwvmYPGWG81Pt8Q68a18qKjExnLmIQ5YPqT89yakVhUucbtUyISs7KoeowGiy0$1kTOn+GazQVQ0EaPAB3KzUFBp-UsFWhgcu0nmcWCeZPh3H4zmIrWRcUs84ml0WBMI$Lvf9deTbyVLSwWTVtGlAQmIQirDImq+2HMkBSr$KuwXhUtVkMCd+C6TgVayP5LZ5tvBMUuQIX0oSQ1s2XYaAyPocHFDN$PtL1X0QGtRgCcopYypNWSLGIRlSdHBpViprydYUD4zMYN-BsLxhO8wdywz51rESVse2iYCxLHzYLitE3Z653Sn-Xt5Qw9BA5e+Cr8ymzxAjw9TfxjIms9onpDQLYdvcLnbK50tMRvqQ3cwHvkoftCVkKayEDeb9ZCO3Oq$3wLo+1moC5DcRlsTvivSSHqbPdGx$2WWDVyKU6qzw8wR8vhVxoLlnzf3hec8gty8YZgeohwroKp0gZUGSat+G$vnlR4tnE5I+vc1aw987tiUftG8gDYUVYYew95fEMCnPGM2+rur0Mo6Ls9kq3M-wpLglAvFxGw4qIHYOzCv5KVVUiujVu7XATXjvjeR8KMyLOg6O+pBbsqRBVYUz2v8sDcHjNz0n4D+s2WHKL0XX6x$YO6r9RSb3jEV7F7Q1ev2zA$76al0l8Ayl8Tgt7Mx5K20EW03zsIjau1MdcpDR024rBXX7dqKTUpo2BW4xbq6YQ0zn5Enb7fUEhqSb7sqecP$-+Y2KcsejU2xELmoZSg+9qnpx1gTNL4dRsiWaINWp4hKp7q$343eRBBN85icztUavxZ6mIi6oXsfL0hhtTuLi8kN-f9WmUXy2vsC3AM8-CejEluggCwHEhrshgShhUO32Yik3XDp0+Xym45zYSgweagBSG2VqPZvi3fvIxq$tCj6eCExnZ7Vma-qyeKGfGFNNkbncyv-+FrOzu8VDdwaOKDbwiuUK+PFaac6CsIBNb2eH+76j1xckt8SMz-21feI0y+cKO-pkMY4z2wEu5xsU4N8PXrwO3HYKeV0y5E0awpIADWQkPxv-CPomOUCH1X-XVcdp2vPwooa3HMLHl5lMmHWOuu46BU+X-3p8gK3WDS59$gsQNvHRnyf9FVS7QIzcXTpwA6eZszYg9pLD6eLIHnZEONUHreAvmr-dGs7Na$DIhv26tSD0Ij0MpKj8tpiFnDi6T2+SbwcLcEyyxq4qN4+avuhxt4YrGDKH"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yFvMR3NjBRbtvwPdRT%2FAw2ADdkHqcets8W6hMYfrZdH1hLhVs8rXPCfRM3uLlYf9oyR6QQJEVuXO01uOfoo7BNbVEVfbbJlyJ%2FOlzWQJ5nyHAtcNv%2FBr6xDVvBdSGxtV6heWKhsG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-chl-gen: T+usj9z81fU2ANnM+5vk9jD0mxF3gnaFaitvo5JOeBU=$gTd22BoZul4KdNpfASyDCQ==\r\ncf-ray: 9b76efe11d2cc272-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1372\u0026min_rtt=503\u0026rtt_var=804\u0026sent=88\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=75952\u0026recv_bytes=6619\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=2961\u0026inflight_dur=65\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16656,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (16656), with no line terminators","md5":"196531df35fd5aaf3873270488fbdf84","sha1":"8d160f6aa366931d38796f33ca5beaa272ac4bbe","sha256":"8177747d1c254595eb0ed23572387153513532bb245b979a100d7b87ef507f32","sha512":"0b056f2b5a238d1f6f56e5ba02d1f1d8d2dc2726b2acec1d8d2455669ea384332d88504fe2e9ed6065078bcd9033081959f1df2b2d2eee6d666447c03d043710","ssdeep":"384:GoAJeelnaX/aTvYjRBQSOSHkBZC8x77GNZHJD3M:GHPaPyvCBFfH4CTNZ93M","tlshash":"cb72d02f57ae2528094eb7a34565deb7ef8c8fc00650658d29b73bd44c590b8d72cc61","first_seen":"2026-01-02T02:49:16.125992Z","last_seen":"2026-01-02T02:49:16.125992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 727870\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01ab9fdc272-OSL\r\nlast-modified: Tue, 04 Nov 2025 06:57:44 GMT\r\netag: \"6909a3e8-b1b3e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hhIKUZarHSSAuT0mSaTUv%2BjWeiA8RnD4Z5oXDpX4L8k%2BaVJat8j3gAvRsGmx21kteCdcS7RECRNrO5c%2Bw6bWPXvboy2HzBksO4HqqLwaJz%2Fk4NT4Zz3ztlaJMlqxBMVFVL6CuA1S\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=994\u0026min_rtt=503\u0026rtt_var=294\u0026sent=217\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=161493\u0026recv_bytes=42379\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12350\u0026inflight_dur=107\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":727870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 667, 8-bit/color RGBA, non-interlaced","md5":"74421b7ddf9aada3418ff02a907e3e95","sha1":"100f7fcf40e1716c7e1d511d8a8bce187b1b6128","sha256":"f2e348afc022a878fc0fef3390238717dc3e04a1b10dd09bcd2788968bd12db4","sha512":"1f074f8e75f1e9e42308214d65309b11a8b6da12584d5db1507184bdf3e41a8274fb1242c59d93c1b0f20e57959e199cf7c1f2b74bb908030b55b0b57ef80955","ssdeep":"12288:t9xM7QkJIhh6wbwosrinNwxjsszzjC5gUiIYZVdjtjWEf9/EH15h3vXib:327QklouinNZsXme3IYZVdM/Hvhg","tlshash":"55f4237af2cc8cbcc19e7828217675aa7d71a6d28e456e1638e2317ed2cf400d5c3b56","first_seen":"2026-01-02T02:49:16.1269Z","last_seen":"2026-01-02T02:49:16.1269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_8_game1-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_8_game1-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32862\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01fea81c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:58 GMT\r\netag: \"6909a7f2-805e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=USI2VTuNYCQKDQyy0FawUBvSS4U9SFKGc4glag6vXmNxTNOoaUM9oKiCaVAoxqzxQz6wGRPt5gmPyrIe6gMFNOPfQ2MT2eMqA1l8LIieFQ%2B8z4NjAS53QFyz5rQlTzkvt27FcBH9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=11126\u0026min_rtt=486\u0026rtt_var=13597\u0026sent=9208\u0026recv=984\u0026lost=0\u0026retrans=3\u0026sent_bytes=10565342\u0026recv_bytes=94733\u0026delivery_rate=76687116\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=102057\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13194\u0026inflight_dur=947\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4c5f92b60ff5e231254469789c7224e","sha1":"4e95605776f82b6bc0035a56755a9d3b92d75022","sha256":"74d49b871371ecb9595ad9383feef3d4373e5634d444e7fcd84485c4468ce1e8","sha512":"6451442b68b9f1f0e9d30e64326c8ca37c0407b87665d33984aab9f52b3dc0333571701cb010842562afbdd4d7a0db809f53f2575854e89ca16fd0eec5643964","ssdeep":"768:5TjaQTgM7T+IGLYUD2ZwHHA2001SPIYH74OcZ1E99AKWk:xaQTHTphUdgW1SAYH74j69AKP","tlshash":"39e2e1f50bed6f69dcb76cb11b42d6038eb602a6b3357dd6c1ba091e5ec855990c0092","first_seen":"2026-01-02T02:49:16.1277Z","last_seen":"2026-01-02T02:49:16.1277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":207,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pgz6Win5DCvQPrmZVyfint0mgx%2B7Rs8V62h4NyqUkAkuG%2BJhVPExyczkPSRQNqaYimDtiGHxNKDx78cT%2FaEMoZ80W%2Bfr0yzgHCK1hdUds2sW6Wg055%2BtgCN%2B%2FktBRurNYbNXkCQH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0234adcc272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-1c0\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3027\u0026min_rtt=486\u0026rtt_var=256\u0026sent=13276\u0026recv=1089\u0026lost=0\u0026retrans=4\u0026sent_bytes=15340829\u0026recv_bytes=106713\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=130846\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13742\u0026inflight_dur=1174\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (408)","md5":"3d1965074516e4cae135b5a1b7faf9dd","sha1":"c76e1ae1611033b2f401fafee19438f43198427f","sha256":"83cc7bd65f572be77ed1411ae2876f3a70c74e495e6461cd503c59fe149f45d7","sha512":"ead406a1e0d8a5bb821d5493d3aeb4cef9b2fd62f9872eff4fd2bb3e7eb8c9ec916c50f0b3c49ba45ab269ca5f5c0aad5227600690ec98626b26c00640008d9d","ssdeep":"","tlshash":"e9f05cf43062987a9d5b45c66c47096df9581cbad601715176f7086023a5fa433586ac","first_seen":"2025-10-05T18:41:07.825327Z","last_seen":"2026-04-05T03:24:40.109567Z","times_seen":1214,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/favicon.ico","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/?__cf_chl_rt_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png\r\nx-robots-tag: index, follow\r\nlink: \u003chttps://duangdee789.website/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=14400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgpIO%2BG7OtHtsbCY83HMkEahBq29u8O7xqVb1a6Vo3VUfxr%2BmheNdw7uf%2Bu6azTNcvDGFh%2FQuwvXuJj%2BoHblPzbAlZ71l7L3SOuAJIhwBjUkCOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b76efdf6cf8c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6802,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ABTd4Wk01QJQyQqjqveg%2Fonk5lk1vq%2F5Q9fbQ3t3nxt%2FDF4JNOdTKoY2gbA0LTSTdHuVeV9Qva8cb5fuFaVCnsbGRpyqKosx3frYGEWmehcmYwRnlHwI6taQKuaA8MTZVeVG69U%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\netag: W/\"68c143a6-a2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\ncf-ray: 9b76f01a99edc272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=946\u0026min_rtt=503\u0026rtt_var=318\u0026sent=244\u0026recv=99\u0026lost=0\u0026retrans=0\u0026sent_bytes=190809\u0026recv_bytes=42424\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12355\u0026inflight_dur=110\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-04-06T08:15:15.67484Z","times_seen":32511,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2Ck_kIaWMu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2Ck_kIaWMu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18096\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:52:49 GMT\r\nexpires: Fri, 01 Jan 2027 09:52:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60942\r\nlast-modified: Thu, 28 Aug 2025 11:25:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18096,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18096, version 1.0","md5":"862948dfe28d895d3b8af1985456eb42","sha1":"b9631978101161c9a925bd14e6dcee40d4e5c699","sha256":"b09858415497a3cada37fee53381c45f476d80f0db035155614991ba55384368","sha512":"4594f45903d8de85a2922963d03f681ac6d39c2e28f6585016169106107e42dffa0e6bf7fc2ffe69651ccd74c5969e3c1df8bc8fa5edbc94996c44e50aadd230","ssdeep":"384:c4z/0+NEEHrztlqK+el9Ozg7iTTiMfVLeasDug6+AUw/WU:cE/LRHrpn+a92vm4VCasDv6+Abt","tlshash":"0c82e1703a5b2df86123d1e5e7e226916801cd06ec28d6df6b5166a51103ce3bb72cfd","first_seen":"2025-04-24T12:40:40.89584Z","last_seen":"2026-04-06T05:46:53.126941Z","times_seen":2063,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":117,"dns":0,"connect":8,"send":0,"wait":62,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=17mEESXk7ao8CsLf29X2W6abTqy9B3qH12j5S4yrGkazx25PuNd9mU58ZDqiIihZny6VWucVffUwxzOzeR1Z%2B%2BjKUNuAorW4K4T3imiVsuEr1kWpvxd8sKNgqbEyFYXjT%2BJXvxBH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99ebc272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b8-258\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=994\u0026min_rtt=503\u0026rtt_var=294\u0026sent=238\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=185127\u0026recv_bytes=42379\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12353\u0026inflight_dur=108\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"bebf33eb86f69f08345550f2ee7d0b83","sha1":"0481d46617ad6adaf1f1efb40a56ec6961329195","sha256":"79e658a25383947f817a034282e7b6841b3452a9395d6371dbd391736d214a1d","sha512":"21aaafbbf60c76a5e0e86782fcd69ef4ab9e4e76f1cd7c78b55007b9300ff33e763985ab53aaa482df85355fae3fc20d89261978f21196694dee75dd942b7d20","ssdeep":"","tlshash":"b3f012237e4b94aa783f195b1087337c74944ec893a0a8d8e9fa91436df4ca27334622","first_seen":"2025-10-05T16:15:06.700878Z","last_seen":"2026-04-06T03:26:17.340608Z","times_seen":7358,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I2bv%2Brc34rmjeRzOYpvyNT7raWGmB5DKM%2Bo5cSqbJgqHWEHdwrR37fMjCAXvbi26J5%2FTSAtkMheSAmPXyaiQC36trwNAC6ZJbzpTvZFcb4kw8G7f6vhvPFWBD6qeysghMI1z%2Fu9U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01ab9fbc272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-15601\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=994\u0026min_rtt=503\u0026rtt_var=294\u0026sent=235\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=182594\u0026recv_bytes=42379\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12352\u0026inflight_dur=108\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T08:11:37.479434Z","times_seen":689712,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_10_game3-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_10_game3-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45506\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01fea83c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:15:01 GMT\r\netag: \"6909a7f5-b1c2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o5ARQIRcwvZ5PBX2U1SjgeoapCJVnE5NyDq8banEDOkCG4RD4qx5cuq6YCEbPdSJlbZD9yBOYufe7m4vUh3MXr7o6R%2BNuCH%2F5vmgB4OtTbsPHVSpUlnpEAbsQxyrDVxHq5FFiqWx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=5707\u0026min_rtt=486\u0026rtt_var=7804\u0026sent=9505\u0026recv=990\u0026lost=0\u0026retrans=3\u0026sent_bytes=10918146\u0026recv_bytes=95082\u0026delivery_rate=76687116\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=150350\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13208\u0026inflight_dur=961\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d70da38c7df3f1a242b105feabd0836c","sha1":"c1b120ad82c08f924e8edca8d7266d675768b579","sha256":"e4bf18248487fecb02e464bd331519c778e2e390b39358810504ddcbadb4e04b","sha512":"197e8262990a6ad92bd0304a4fac7111cf0a97feef323c0f6fd7d6cc74990b406e6d5d5f74524545218f011e347366934e3946a8e829b8f6eaf9ad783eac62cf","ssdeep":"768:eT3jyjGsAHFrAMrltnTyRncyYq/n7nt91qLknlLMOwrENB:ZCbjrlodcyl/HATOwrU","tlshash":"8b13f2c519f5bc1bf8cb513d05804d10e390e9b2eb983b61e2c3ed7da9ea8a484563c6","first_seen":"2026-01-02T02:49:16.131072Z","last_seen":"2026-01-02T02:49:16.131072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":221,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LU3FsboSuqpQ9WPEt%2BvK2C467dYruFmNoTKYBMKMy55BVPiM0rkLr2leygOPIwShyohC8tvduGjgGVvWB4Kbjxwf6pVc1xSv7uGkXCXWitE6DqonT6sIsLMyUZkX7b06Mw6ebWXt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0229ac3c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-214d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1693\u0026min_rtt=486\u0026rtt_var=846\u0026sent=12123\u0026recv=1043\u0026lost=0\u0026retrans=4\u0026sent_bytes=14025763\u0026recv_bytes=104411\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=210341\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13633\u0026inflight_dur=1084\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8525,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"c716c7ca8e115f42b8cf9b56e47059a1","sha1":"108629ca2b57c2aefe267369a14ff33bf5f3f40b","sha256":"1041bfe58302b006d1db0b545fcf851ba8e8220975ebf4686d2cdaacd0656e87","sha512":"290cac96b6c22f3e59e41dc6cee3661f7da90b507344b8c19bcf2481e2de8f78fdca02a959e136c7135cfcf3ce5b41e6660692be3157782f87e7f3459122fbbd","ssdeep":"192:DwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:kHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"5d02310a34c1982db58b58ba3532432866a8014de1018f6db1bf78fb85a6d82377b7f1","first_seen":"2025-10-05T16:15:06.578247Z","last_seen":"2026-04-06T06:39:20.214002Z","times_seen":10990,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T02:48:21.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hZHmQl%2FZZX9qMp0uHcoYDiSC3mpx2iesxVsJHy0SvkaNrR1uzcqNm5KGbQNTtr7NydgTRhJr%2B4K4dOKv6USWg97J2P8zWtEYKi7XGo0XItoGQ7H6qbYUU69HUm5ci4rP7j7CtZrD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9b76efdeccd4c272\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=5712\u0026min_rtt=1514\u0026rtt_var=5910\u0026sent=14\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4173\u0026recv_bytes=1333\u0026delivery_rate=722607\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=15814\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=2588\u0026inflight_dur=28\u0026x=55\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9b76efdeccd4c272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6642), with no line terminators","md5":"6a335d9ca8368c92298e5061453e1c9e","sha1":"8f7b42c4f7239d5e40e95907d6c8545c4060cc8b","sha256":"53aa8f0bcb7902b2d31c4e34dfbab120fc66e7f40cbe482eb0c9b20db04dabd7","sha512":"17b2695273dfb15404cef97374f41c64d9c43926f6374976d877756b4cc5d1b59d8bc7ec0618025ab41daacee55a863c77e964bc2fd43281d6d87c09348ac600","ssdeep":"192:PNadBq3XKkJxeYYK3F2wCcbxU+FU2yyfw:0MxeYYKVCgFUcfw","tlshash":"0cd15bb3aa116033b33e5bf74ab773645370a658830485b4e4e2e80ca1dff1b42981a9","first_seen":"2026-01-02T02:49:16.13236Z","last_seen":"2026-01-02T02:49:16.13236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/elementor/css/post-96.css?ver=1765567510","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-96.css?ver=1765567510 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VqGNEJ9OpGjjk1WoTzaJwScrmVPlh1fDk9FEWoUAKxZQWCPqTPfKl2wKRPkPS3rzQu5vnGspM8LQuUNxVxb0VRGErrsVlGxC7LzQJ3phIw4LMM1%2BUvOkshEUUws3DxRnohsOx4zd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9f9c272-OSL\r\nlast-modified: Fri, 12 Dec 2025 19:25:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693c6c16-56c5\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=944\u0026min_rtt=503\u0026rtt_var=242\u0026sent=267\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=214443\u0026recv_bytes=42472\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=23634\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12357\u0026inflight_dur=113\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22213,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12091)","md5":"08320d75b76b2a49ba5ec4adb15bd353","sha1":"56cf2059bdbd0d5de237dff1eba7d3985dbf9e5d","sha256":"732d09bf35d7fe87d1a9f96e3970d1722811074d838c8003c25cd328389eedf9","sha512":"d18c901e039a5a19eb47de6e97b3f5b075180e5d8ab0f0a96c2024a4691ceadf79aff70c93db4ed27a96c0b96077a66d24180a0fd526b6626b2a26eb2b4b3728","ssdeep":"384:kJlJSJQ3fFJNDVQL7tAQJOTWHJ0C1pJ4W1XhRDJuH28DuDE:u7gQ3jNDVQL7tASOTWp0C134mRduH28h","tlshash":"36a28c5e3d03d126793f145f264bf5ac24289cca9daeb6d3f8688113e8f6e673390614","first_seen":"2026-01-02T02:49:16.133312Z","last_seen":"2026-01-02T02:49:16.133312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:22 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489970\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-06T05:46:53.19078Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":324,"dns":2,"connect":64,"send":0,"wait":20,"receive":2,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9MMmfY9jjVkx6INvQWi7tb28W3myP13d%2FULoWxhB3wdbj79F9b28LxNBzOr1vsetMb3UUqwH%2F9wpnrw4%2FZqMbZQ4dj%2BhLw6nsvaDJ2VSjKo6iA0mF2MA%2FmEGSPp2gEaelqmaYTaJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f0223abdc272-OSL\r\nlast-modified: Wed, 03 Dec 2025 02:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fa2d7-58ea\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1603\u0026min_rtt=486\u0026rtt_var=871\u0026sent=12112\u0026recv=1039\u0026lost=0\u0026retrans=4\u0026sent_bytes=14017639\u0026recv_bytes=103214\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=210341\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13560\u0026inflight_dur=1080\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-06T08:11:27.968427Z","times_seen":134300,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-carousel.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fn5zwmBLMKEeb5nDKcAf7Xks7KYq5wtxjWogEeRuXFL%2B%2F2su9wQHqoagWIsp9yD%2FNbYSDEyePFCSv9XXBmkIDdtX4lwnFn6JtL1YurXWjMHc6D8pD0AE4QuyxWUEkt5hGJPt4TiT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99f2c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b8-17e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1062\u0026min_rtt=503\u0026rtt_var=263\u0026sent=210\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=154977\u0026recv_bytes=42201\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12345\u0026inflight_dur=103\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (342)","md5":"b04fcc9c53832698d727a04b7f98ec1f","sha1":"d48047a0bb8b34c5585d6db0ed96a3aa1c25a547","sha256":"1893b6803bbc40aebd2a091a66f3571d0fdcd004a97838aa4317877759cd113a","sha512":"2cc8630213eeb8db3943e3881a0118342a6acf675352f874460463e45c913c5f845dd3762ecac35b1b5da96842747372d85f5fc399821756892949205291385f","ssdeep":"","tlshash":"76e0df443a8398735c2e2f2a78af152830d88ca4da138b40cae31915e3f34f0233fa1c","first_seen":"2025-10-05T18:41:07.716837Z","last_seen":"2026-04-05T03:24:40.143181Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_2_bg-second.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_2_bg-second.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3024339\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01e9a56c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 08:19:23 GMT\r\netag: \"6909b70b-2e25d3\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ARLQAw%2BYzKqLKzsGnUYXiArIoiY850JaMO%2FzI1%2BHNVYkl5Qlh8CXmfs9opYx8rpCbn56AchiSoqMrsMlKalHcVljl3FVAddw88EvpCEDTdADkVbUlt67bLbCnxTmQiOzAm8WXeSZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=7862\u0026min_rtt=486\u0026rtt_var=8687\u0026sent=8432\u0026recv=973\u0026lost=0\u0026retrans=2\u0026sent_bytes=9646775\u0026recv_bytes=92095\u0026delivery_rate=76687116\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=102057\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12985\u0026inflight_dur=738\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3024339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 1152, 8-bit/color RGBA, non-interlaced","md5":"020b1e64a2a82f8b2aa6117d4441af1d","sha1":"81f8e83ddfce254f1aa8b211711e1c2496756fc2","sha256":"dfc0f959f5ef69eaa4fb73bcd60db85141a36d5ffc318e6734adecc2755a1d13","sha512":"865bca0bde37e6395359c57704e6b31416b7cb571c221fb1901e6ee99f6dac6d191e5577d2b7748e9250a4cbc90da5f65f2aa1570e87f23acb54fe33f38c1498","ssdeep":"24576:NC2Wt70r6ZRpkCK4hl4u7abeM/xQw/DTmFvgLUGmgVPwi7:NPD6ZzkCZJM5QgDyFvgLUdewg","tlshash":"2b253359a0e477f0e6f749d194018ab252b066f5832f28ef902ee13f97f27e95085f41","first_seen":"2026-01-02T02:49:16.135532Z","last_seen":"2026-01-02T02:49:16.135532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/10/imgi_50_bigtime.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:32.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_50_bigtime.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 299426\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f022daccc272-OSL\r\nlast-modified: Sat, 18 Oct 2025 08:00:59 GMT\r\netag: \"68f3493b-491a2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YhBx74MBBiGP%2F1Vkh4k%2FJnNfnD6E2OB74QbwA8bSmcnfVWMGysW8Ubq%2BJ10t%2FutlxZkisMUX3dWBw3letohzSUN3ELUeMaU2DPNUGHGx15lNojAhyNE%2F70T%2F6bfFfpO9%2FQ3lL3p0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2806\u0026min_rtt=486\u0026rtt_var=615\u0026sent=12582\u0026recv=1055\u0026lost=0\u0026retrans=4\u0026sent_bytes=14554094\u0026recv_bytes=104977\u0026delivery_rate=90024797\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=206314\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13690\u0026inflight_dur=1120\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 580, 8-bit/color RGBA, non-interlaced","md5":"4e1afa0c7b5b383ecb4bd8628d2399f2","sha1":"d762370c1c9bc339675c7ecc2727536a009171c5","sha256":"638f60fe677e60d31cb3f9e2ffa4ed0f4dd4dd475b734e34e98c9bade9a191b1","sha512":"66c4b99a30664d9085ef1aac4eb3659d56289a715da14cb3264b04fdd755eba0fd9a5061e1d0f339eeab563e673b03ec77cadfaf6952989cd0515fe7a7c25004","ssdeep":"6144:8xPfQXS6uuSXayXnmquvdS560lDjJoYeyE+JOydnjjlPdpkLGYTvRQ:q6uJ33mqC0lmY6+UAjj3pkLGKQ","tlshash":"b754227ab9a94bf1ab44f42200055309f898e57a663f6708ec2f0fef57e47c15ed6a01","first_seen":"2026-01-02T02:49:16.136351Z","last_seen":"2026-01-02T02:49:16.136351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 727870\r\npriority: u=6,i=?0\r\ncf-ray: 9b76f0265b31c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 06:57:44 GMT\r\netag: \"6909a3e8-b1b3e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 10860\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5rqowkE7CEwdImAUNvxH6uvFzC%2BmtyN3M%2B8A4drqEdw0uivDy%2FuzbyjUGCFd%2FSI%2BNAHXgAq%2F4WW2EAVtlWhBmMseWAEKJDrU2ZMmvF3by%2B9h1B7mJPo5TxpQUxZZh93A7BmZdFCE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3150\u0026min_rtt=486\u0026rtt_var=180\u0026sent=13923\u0026recv=1108\u0026lost=0\u0026retrans=4\u0026sent_bytes=16096549\u0026recv_bytes=108817\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14029\u0026inflight_dur=1231\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 667, 8-bit/color RGBA, non-interlaced","md5":"74421b7ddf9aada3418ff02a907e3e95","sha1":"100f7fcf40e1716c7e1d511d8a8bce187b1b6128","sha256":"f2e348afc022a878fc0fef3390238717dc3e04a1b10dd09bcd2788968bd12db4","sha512":"1f074f8e75f1e9e42308214d65309b11a8b6da12584d5db1507184bdf3e41a8274fb1242c59d93c1b0f20e57959e199cf7c1f2b74bb908030b55b0b57ef80955","ssdeep":"12288:t9xM7QkJIhh6wbwosrinNwxjsszzjC5gUiIYZVdjtjWEf9/EH15h3vXib:327QklouinNZsXme3IYZVdM/Hvhg","tlshash":"55f4237af2cc8cbcc19e7828217675aa7d71a6d28e456e1638e2317ed2cf400d5c3b56","first_seen":"2026-01-02T02:49:16.1269Z","last_seen":"2026-01-02T02:49:16.1269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=1zBp3I_zXANi6I07ZjS1SC9.Nf94Z206i.Nn3lysHhU-1767322099319-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b76efd0bfc6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g1MPc6Bc%2FgFsoMDr6Lr6lrgEXylJvLqRBA3rhPT%2B9AXCQiB5AQ4KgT3xC%2FtbNpDwx3f%2FQBEu8aGRIVUwnOlLvQyUpRn6%2B10ez92F8DI0gSkeiq%2FDH3xtTtXHnRQRB5UbYU2JU3Jj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa17c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-1868\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2178\u0026min_rtt=503\u0026rtt_var=174\u0026sent=742\u0026recv=149\u0026lost=0\u0026retrans=0\u0026sent_bytes=736947\u0026recv_bytes=44968\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12402\u0026inflight_dur=158\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"8c0b48fb0d9a6bda22d29b5a0ec641e0","sha1":"76896d21367677a771a37ac590a30eaae46c94cb","sha256":"fd0b173778bd07aaddeacf3dbc52ecae71e7018093a002d7f9ac813c5d9ed422","sha512":"ec8809f9ab5e0a56d98dca06412c7280c4c726a3f0bf682a5218b6dbe5e16b5c7da4513a3aa8906138e9279009000803568f11344e4ca313db92b9bc2795f351","ssdeep":"96:B8fdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:WTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"25d1569805489d2f26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","first_seen":"2025-09-09T09:02:24.79777Z","last_seen":"2026-04-05T18:44:52.908833Z","times_seen":1128,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DvcsK4tGmQVWg4%2FoYOGMdpouFo%2F21r%2FkPUErOXSy5PCaf%2B0D%2FjVmhoDgiVcBzLcRL9LYBmPQTmJY%2BpFL6jUrT9yN6JXUkaKoyh2DfNiXvdPZsj5TA%2BOWOxdiErDsEEKIB4MQk8N%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01afa1ac272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-ae7e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2175\u0026min_rtt=503\u0026rtt_var=121\u0026sent=914\u0026recv=186\u0026lost=0\u0026retrans=0\u0026sent_bytes=918549\u0026recv_bytes=47100\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=41288\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12415\u0026inflight_dur=171\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"2913df4a471b856bbc83d07b1f520872","sha1":"d2ddecf34166b20067861db8d22bd939af3b3310","sha256":"45f72b4b68f592e6aff80b8245fe8aa2156e0b960eedd246354ad66b28372561","sha512":"bef27d2e08e67a9c0e1216ce0e661c9033215cccf0d6860fc07d4ae9233204f489b26de6a3310b24bcabfcee07857b76e91f0fe53036b377a45ad082f9336a52","ssdeep":"768:e/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:gt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"b713a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-09T09:02:24.857486Z","last_seen":"2026-04-05T18:44:52.951028Z","times_seen":1123,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:22 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489970\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-06T05:46:53.19078Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":305,"dns":5,"connect":7,"send":0,"wait":18,"receive":1,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2Cv_4IaWMu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2Cv_4IaWMu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18104\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:43:53 GMT\r\nexpires: Sun, 27 Dec 2026 10:43:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489879\r\nlast-modified: Thu, 28 Aug 2025 11:25:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18104,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18104, version 1.0","md5":"637eb2ab4128cedf50f851c80c810811","sha1":"1cbb1107734c95f0532f33f34f036d0d1a87967c","sha256":"8808aa334090ad37a8a0f8660a014b74cdcc31d1e9afd5d817a49328f32c9b59","sha512":"4abbcd54f2030dac3f82cf3c95ef47fc479a6065768b688f5a647f860eef1bb2ec06650fc03599405f319aba8c3e43ab7a15794304a1444956bf6936c18bf166","ssdeep":"384:Sxl3jZRD0dZWa/LBjPHVwO0A7o3vYC0mZhJMnKgvSyTzb+:SrtRYdXVDyVA7k06rMgyT/+","tlshash":"e582e14486b1ca20ada44c2d635f0a727101efa71c76b7577738c6dc5e9bf14bb81863","first_seen":"2025-04-24T12:40:40.887815Z","last_seen":"2026-04-06T05:46:53.155779Z","times_seen":1750,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":312,"dns":1,"connect":64,"send":0,"wait":18,"receive":1,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2C2_8IaWMu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2C2_8IaWMu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18160\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 09:50:10 GMT\r\nexpires: Fri, 01 Jan 2027 09:50:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61101\r\nlast-modified: Thu, 28 Aug 2025 11:25:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18160, version 1.0","md5":"3d353ab63f7fcf80a9d9a99d63bd3d06","sha1":"05c1fe730299524b9fbd5d7a2e4e5ddb4397fa12","sha256":"54eb2e1925b4a3edd3460b8140546fb3e7767666d7ac1c1fcc246d3f1ab8157a","sha512":"658aca9d7bb79be65a299ef05300749d3c03628ffc77b0218d800698c4d10f3a850b480aeb1d223ed2a0852730b3ea7b36668ac8d57a8f39ca3d22c097eaa045","ssdeep":"384:OGiZC9yyvsZHOcOOYYJn2XMbHWadn/Bu8cQPCAcnIh19LfW28:diZQyy0ZucDYYJ2XUleQK1IL9LfW28","tlshash":"0a82e1286c4841bbd075b170265051158f79dfb6d3821afcecb670befa15a38f598d07","first_seen":"2025-04-24T12:40:40.865612Z","last_seen":"2026-04-06T05:46:53.210279Z","times_seen":2153,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W_8XJnvUD7dzB2C2_8IfWMuQ5Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W_8XJnvUD7dzB2C2_8IfWMuQ5Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 12:38:06 GMT\r\nexpires: Fri, 01 Jan 2027 12:38:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51025\r\nlast-modified: Thu, 28 Aug 2025 11:25:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13208, version 1.0","md5":"41d33a973a74ee2d2c336cd7dcda4e8c","sha1":"f4c67bcb7ef8b5294d0faa60426eedae7ffa9f88","sha256":"6709b0361745936ff7ec5b75bb63c4d67deb04669fbf40285e39e3421a0ab510","sha512":"7ebfe3366ef95a1abc6c4d47a558b5adbbb9dcda461bfd9537948c522bf5b588e702bc6ece670195e7e27ef90a5b028daf0d49045963b87a00cdd6fe95f0e73c","ssdeep":"192:NTeJy/GFI5Lw3DYetK+ZNqZQ82SvWC68x5UVn9Gu3pY6w5n4fvngty21jWoe1RBb:Na8TlwsetKq18Fd6MuZvUng4tvpWF1R1","tlshash":"5f52bfcbe714e8abd66c253dee6c7172465f4040cd81a9c93c125ae15b1422af74fa1b","first_seen":"2025-04-30T04:23:08.458527Z","last_seen":"2026-04-06T05:46:53.173068Z","times_seen":586,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/css/main/post-meta-info/plus-post-meta-info.min.css?ver=1765588997","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/css/main/post-meta-info/plus-post-meta-info.min.css?ver=1765588997 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KqUBjdtU4%2BAMzrajsg1oNi7PDfCz9Fgn8M1MwDiVY6n3T3j02QAlFUgdgyMTqxBZ2lAfx2%2F%2Fx8wwuUJEpc2M1DE00C8DQwnXihWmfFu%2BC1GjAq%2F%2BXFOufW5kbTxxJ2CT6UzfelzF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a89e7c272-OSL\r\nlast-modified: Thu, 16 Oct 2025 01:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f04e40-f33\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1068\u0026min_rtt=503\u0026rtt_var=334\u0026sent=207\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=153331\u0026recv_bytes=42156\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12343\u0026inflight_dur=101\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3891,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3891), with no line terminators","md5":"7e5f26d51bdebf658670e7642243c693","sha1":"8838e8f04fc2c9ed1c8da6d9fd77a8e8937b9804","sha256":"44d4903ec109e2038374d200205eb10afeaab6ee74c0461aee9945077eb1c83f","sha512":"8c06effc73ca5f63b2f5b6037b1f78254295857392e50fd0bef24d78a5d7ca2b095b6cc0c8fd07e0d8ca68434812d6f4e1300057f9113276e8fb264a8ac90647","ssdeep":"","tlshash":"3481e3a240e8ecaabcb733275dbed10d781b99336a3a9bc9547115d68ed33c3434425c","first_seen":"2025-10-05T04:18:32.506891Z","last_seen":"2026-04-05T05:09:27.3852Z","times_seen":20,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2zboj2DYIyYybPWuMaXfFS00jrC0STbtgE2%2BJ1e%2BhCPxWbleyx%2FE%2FDtP9PO9ccAlNq%2BDIQ6YCaKgPKSIzYaRdO9WOMqhyIW%2B3LkLFvWGtm4AdB7XxuHr9%2Fp%2F799TudjHo7ji8Cta\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01ada0bc272-OSL\r\nlast-modified: Mon, 01 Sep 2025 13:32:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b5a05f-d64\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1669\u0026min_rtt=503\u0026rtt_var=767\u0026sent=453\u0026recv=117\u0026lost=0\u0026retrans=0\u0026sent_bytes=419863\u0026recv_bytes=43283\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12374\u0026inflight_dur=130\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3428,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (3248)","md5":"dd6a0d8d7b3e0afbbc0bbb417dcc387b","sha1":"0b38c782da1c8ecc6bc7e854f8841fb9d2c86e35","sha256":"f36adc07db49e73c3fd3aeb4234d270725f07719706dd28dfc09657f2cffe9d6","sha512":"e0963a8c2de54ca9a29d2f3fb0adf54946172e11589f0da3dafbf603b9f38c7a4a8a977465b0a9c32da9d4127d916e60c390dea1e17d55b3edee0b760401135c","ssdeep":"","tlshash":"d161ba8e33145e8342931336d23bab4b7d3180d9640ad51dbb39acd83a2c93961b69fc","first_seen":"2024-07-16T20:36:22Z","last_seen":"2026-04-06T08:20:49.24871Z","times_seen":40193,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LEVsR%2BxixKCRNtxt7HDG68kH8tRfJlNEko994uUctADfEvJiSIZEu4n6rvxehGtdKtSjbDxRh9D3%2BFNw0CNhQL3AW9SOI5H6jI97E%2BsCEqbfE4avFde7RUTCrebrTq8CCd%2F2rIu8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01aea13c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b9-2315d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2173\u0026min_rtt=503\u0026rtt_var=372\u0026sent=672\u0026recv=136\u0026lost=0\u0026retrans=0\u0026sent_bytes=661178\u0026recv_bytes=44255\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12397\u0026inflight_dur=151\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143709,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-04-06T08:15:15.655214Z","times_seen":68340,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F0SCrGtuE3dHO8BwfgVK6TEha0fkS%2FI8DI0FCdhhj8D40WHpu2EwcG3oV0IGBRmn8YTDbHjHHN76pQmtr8uYA9yNcZks%2FyBjvFxivwBlgLISLkeqj0KGdwQBczBNeP7bsxfW76eH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Oct 2025 02:28:09 GMT\r\netag: W/\"68ef06b9-fe\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\ncf-ray: 9b76f01a99e9c272-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1062\u0026min_rtt=503\u0026rtt_var=263\u0026sent=211\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=156061\u0026recv_bytes=42201\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12345\u0026inflight_dur=103\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea91284b60b06465029ae3388af97b6e","sha1":"6f4f5957b6770ee4e67119c25e5245daff828ac3","sha256":"22e526f3adc681d8d33a6f77d9545742775bd8fa8f4d9e105d3f4139f701bc37","sha512":"f88d9358e59e53825d68b67de54349dc835cf971f0651ba0b0ddb1ee8cf6c107506da39126d9cc56f2178a7a152a83543dcf246e562619b2a7e04f100dea9707","ssdeep":"","tlshash":"33d05e40342743c2301f596926af2aae38d00ddce246cb90ece1666257bbcc83776120","first_seen":"2025-10-05T16:15:06.601574Z","last_seen":"2026-04-06T03:26:17.358873Z","times_seen":6818,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KdNodVkI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KdNodVkI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:22 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489969\r\nlast-modified: Thu, 28 Aug 2025 11:24:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13192, version 1.0","md5":"411c0b4692c9ef0bebdafff2a7d12ada","sha1":"481ad8102233682a320b606ad91acc016fbe6be9","sha256":"d10643e148806b6ec9976370cf78b43b0542b6c457ca14b5fc89a5d2fdd156f1","sha512":"d64327c83cc1635dd6503525dbeee80c16ab938e77c1b2f59ba0f72aed4510618dfab01dd97ce2c03e23fa01f7db80763f203ff931f94ddf37ef839bbcf8c984","ssdeep":"384:yB4Hky5vaUfUEk3hXAVcyWd2mDM/JLIU8:hHky5vjfUHtAWYmDUI5","tlshash":"7442cf536094626e71f41fbe84d886543af7a2b34bd37a74d130981391fade192f4c2d","first_seen":"2025-04-28T22:18:44.543524Z","last_seen":"2026-04-06T05:46:53.211235Z","times_seen":1096,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-logo-150x150.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 13179\r\npriority: u=6,i=?0\r\ncf-ray: 9b76f0265b32c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 08:20:33 GMT\r\netag: \"6909b751-337b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P%2F0Trnf%2BjAB8GrOoefiUGgI5Ane5GCgi%2Bng%2FXRGfNvcWpgngmh8qgFkjHC2GPg91JpgxGBpD4Qkb9vGfhyRwFDZA7qFBiFFDy79krSnDAeHGD0r2pXoqWFXQ1JA%2FOhWGVQpYVOkD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2683\u0026min_rtt=486\u0026rtt_var=1697\u0026sent=14550\u0026recv=1115\u0026lost=0\u0026retrans=4\u0026sent_bytes=16844278\u0026recv_bytes=109167\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14217\u0026inflight_dur=1275\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"e764832b756aafd66127e892048284fa","sha1":"f5d5b751eb46f4a1f97c83ed1209d52dfe471366","sha256":"c07220475ad7581926a37ac2b9407f2a23f533df6243e1c61dd366cc7eca5565","sha512":"f04d3505babf4496b06704816c498ab06c6ad09d154540d576327d23171a32922e9e28ff31382be3f01c574ec0ca36c04c120df700d911bb371c585aaae4a437","ssdeep":"384:DxWVZiX512At0PK7GqrqKuIXElU3kWmjEy9ux:DIVZirtt0i7jqKPXJ0vjix","tlshash":"1742d007d8c67231abe14351e8f556f2e692104a79d3188334b69ff94ac17650fa3fca","first_seen":"2026-01-02T02:49:16.14201Z","last_seen":"2026-01-02T02:49:16.14201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/blog-img-%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-1024x538.png","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:33.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/blog-img-%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%E0%B8%94%E0%B8%A7%E0%B8%87%E0%B8%94%E0%B8%B5789-1024x538.png HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 192219\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f02a2b75c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 08:14:21 GMT\r\netag: \"6909b5dd-2eedb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E0U8stNdLBW8lhkxtmULHwKh7nV3mVYQUCvPVgEw5%2FjJVg4QmxKSxwewK8UB7agmJPol7dY%2FQvckK4KQlg32t1eokTu58Hgw5pZwlbyOHhIeCjhKg%2BhFm8Top393nKavJvAcOu5b\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2035\u0026min_rtt=486\u0026rtt_var=1386\u0026sent=14573\u0026recv=1124\u0026lost=0\u0026retrans=4\u0026sent_bytes=16863605\u0026recv_bytes=112240\u0026delivery_rate=90029259\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=179208\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=14826\u0026inflight_dur=1301\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 538, 8-bit colormap, non-interlaced","md5":"9e261b8d02c8b52b23daf8a59db68342","sha1":"3f9d409e77e37a0593d14c135fd3e986b7d63a63","sha256":"a82a920ac1765d00244b38c78a91f09fb86ee22db32dec5792196cf632e77f9f","sha512":"f3cb96fbc1676a31e51263983a78136dd2c050b4c373b2c3238885051ad1210a4c244bb98fa8f9dc5df7bb178245567c2b829bd2409f2d7c2f9c4b8bd93ce71e","ssdeep":"3072:d+/iC1iJg6K+ZJogmDWISAlNdPswz5jOdY6gf14G6EYIRZECLx5QbPtBYzfXbmHn:d+aCMJg6jCWZKNzVOeN496RZEcx5CtBf","tlshash":"76141259526ac5b22ffa95120a227cd02d1b6c27659f81719a73b0e4bce208b31b1ff5","first_seen":"2026-01-02T02:49:16.14309Z","last_seen":"2026-01-02T02:49:16.14309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-02T02:48:22.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/fwo3p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\ncf-ray: 9b76efe27e6e56ab-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efcf2fde783d","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"172.67.135.86","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.174Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efcf2fde783d HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://duangdee789.website/?__cf_chl_rt_tk=MtGKc9Q1HI4HVl_As.ooLDJ0Gb9ztliLCkqShKHZkN0-1767322099-1.0.1.1-UCb_NXisiAFd.Kk5jbE5KqjUhZKKpHiq2nJZmRt_lww\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 02:48:19 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=imPeKutimri1vhuKsrJNsTI%2BYvtvk6By4KFpXPjdfAU1HAgYFlQo2ebxysAXULWg2IckpZFsEuamEq32Urp2Q%2BWQlxw2WxP7Xnvjl99VTmXPFuG6P71hZ0%2B0W99k9YFK5PoZ0kfO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b76efcfd8698deb-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=459\u0026min_rtt=459\u0026rtt_var=229\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=527\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118707,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"956e4632d44e2d49d11c3cb1f54164b8","sha1":"168afcf97dd11e96a1f846a26ed3d2f5ad5bdbf7","sha256":"c16aff0cc4a8589bcc7e96081993dd398167a5c0365ef102ce542bd29ff8b916","sha512":"678cf54fef73b4490a0bff3dfa37b375afbd73a7b608a0760ac405b36f433b087f590dcb497d1e7b75d2dfa0b8533ee3f1544b59fb158022207100b2a959b010","ssdeep":"1536:iCmley7+PHbHASjM5K4JkWWmsKq6MiCXDmUMF52/tRmNMnNB5hwZZAJEZ2:iT7k759K2iyictRmNMnNB5hwZZAJEZ2","tlshash":"68c3d8cd3899745903762068112b79ceb2bab8c474084d9ee570bee47cd2b54b277ef8","first_seen":"2026-01-02T02:49:16.144582Z","last_seen":"2026-01-02T02:49:16.144582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":63,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/d39f91d70ce1/api.js?onload=REiSI4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 12 Dec 2025 11:56:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=_xdkl_Zmtk5u6Z7kAj9STF_2lamPQnPH7tRnjWPq8N8-1767322101747-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9b76efdfcd96b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50001,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50000)","md5":"dd141df1db41d439d7706c298a369a4c","sha1":"a80c5f6a6fec4acbc3d6d81b9865287b0dd705ea","sha256":"46a2126ccb16841040f55934627c444b0eb965e51f2a7ea90e24e504a56eb56c","sha512":"d2587c387339467aad182f239d9609aa3ec097709e4bef2547cfa5bd2a662bb469bd3cedba19a062021f35b7fd8b6a22d28e9325912e70c491b77ae8ca70a539","ssdeep":"768:2ZCnhL0z2vMpjLUU6mLU10SLgC2GdJj2sg0D5THPN5HKpXEAsG91C+8APDfhv6Yg:2wQ2UpjLUU6mLB22uJd1HAsse","tlshash":"50232a583166397227d980e4617b63437329753ae94ccc50e823d936277cecad237bba","first_seen":"2025-12-16T18:08:49.681876Z","last_seen":"2026-03-22T10:55:38.115758Z","times_seen":22970,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eidOt9VxloPEjQfh87df%2FOTGtjyUaHdNbS9upDRjqtTbA6Nt5q%2Bl9KTUG7u3LpF%2B%2BdRTdyFJE4mFo%2Bu6vMiyaPJQ%2FfbB2%2BPYyC6tLeAay0yMnJfJ5IwtrTrlmAjGzQDZpWzPPOYd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99ecc272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b8-16d6\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1731\u0026min_rtt=503\u0026rtt_var=700\u0026sent=473\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=442123\u0026recv_bytes=43330\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12375\u0026inflight_dur=131\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5806)","md5":"bb192f92581bb2a3ac3d510b57172002","sha1":"c63183daacedc9c7898fbcf7ecb7e6f8c27f7d63","sha256":"fe23d2111a92e9891e77852ed2e897d729d1722df40dff122361636bd02c605c","sha512":"cb7c24f3c3691b5d68441f161b2b9ce07d5c74f51448a9fc054e5f184b87cedd60354a5557d132d05d469990ecf09031321da08a2b3750ff28a5490722c5d169","ssdeep":"48:B8yAtZryDP/ey5d5iFe+5b5s6e/5w5r7eE5x5icsbeRh50J5jp0weJo58m5Yse9x:B84CyjJTbaREr23J1/f","tlshash":"8ac1a60539a7a1025a3f501b0a87141cb56548d8ecebade7f861ef019bfbdc62b52c7c","first_seen":"2025-10-05T16:15:06.603911Z","last_seen":"2026-04-05T11:04:56.493989Z","times_seen":1520,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RiCuiM2gq4kiaxZyZEYWYg6Dq%2BdnLpgB5Ubc6K9esBxRpKwZK6%2F%2Bw3uXL62Qw%2BckcMb2W%2FiNmqhKQIVXZeGs1KBZ9SO0CQjym53nvk13%2F%2FUucT6d4RVQ6bxxybuebTvlIS%2B7ABl5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01aea10c272-OSL\r\nlast-modified: Wed, 10 Sep 2025 09:23:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c143a6-5e2d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2333\u0026min_rtt=503\u0026rtt_var=412\u0026sent=629\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=614810\u0026recv_bytes=43830\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12393\u0026inflight_dur=149\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24109,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-06T08:15:15.650838Z","times_seen":67381,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/2025/11/imgi_9_game2-1024x410.webp","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/imgi_9_game2-1024x410.webp HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42440\r\npriority: u=4,i=?0\r\ncf-ray: 9b76f01fea82c272-OSL\r\nlast-modified: Tue, 04 Nov 2025 07:14:59 GMT\r\netag: \"6909a7f3-a5c8\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JWqUHVkm%2BzrpQhGPdzHdLJszlheW5Adb%2FUYMksKtrOutko30WFTPyTfSw5CUaXnMHkOmX4wuglzAEO%2FSgNABYSa5fzg8qKdfZdEsy%2FBbomY2DRUM0QyYfZwo6InU04M6OxvSyRqs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=7979\u0026min_rtt=486\u0026rtt_var=10518\u0026sent=9389\u0026recv=987\u0026lost=0\u0026retrans=3\u0026sent_bytes=10780620\u0026recv_bytes=94906\u0026delivery_rate=76687116\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=113221\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=13201\u0026inflight_dur=954\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c75adf0bcfe619ad5f96cabd4601af5","sha1":"723f8f1a07dc474911a5b23aee81dd7b32dd54b6","sha256":"1a0e87072b541904e23f02349f8ff28d9620ee2d031427418c72f132aaa74213","sha512":"93c15fc13fef210b3148583228e2892e1dd1ec513f3179097adb599271dce1326bf084febe6e1c9bfed79de234f03fe2d251ef099df5af1a99b7e37a04ed1698","ssdeep":"768:kTjaz4mj5qV7tmCPsHX29NSORgj2XytcL/wNVbqAvwmn8KjEkPU+5Cst7cb:Kaz4m1qV78BnORc2+04HQrdR+gO7E","tlshash":"9a13f15776f0b749e50c0ef16290134d9e727db2e280473c92a39daf35afeb02130566","first_seen":"2026-01-02T02:49:16.146548Z","last_seen":"2026-01-02T02:49:16.146548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":214,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.4 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O51N60c6Te3az8ErIiwUQkU8mdSD9F9v7JFdEVOWVvE%2B%2BK5xt9AMHA049YqZwVY2djqEl8WqkL4iBvABKMzLKmN22KagA0Wc2O%2FbLO1V81oF%2B1cYoy1W7FnT1DPwFX4LgtfLd%2FmD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99e8c272-OSL\r\nlast-modified: Wed, 15 Oct 2025 02:28:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ef06b8-d16e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1068\u0026min_rtt=503\u0026rtt_var=334\u0026sent=197\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=143542\u0026recv_bytes=42156\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12343\u0026inflight_dur=101\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53574)","md5":"28b0f194b6f875f29629396eac1671d5","sha1":"0ac6040104a49fb72bcfdeabc83cb2521f13a68b","sha256":"4ad0e11654ca79a411fcd3ec4cd398fc778915d1bb9e07b5e3370d2248257af4","sha512":"5f88a02ca687680da8db3cc32b459baf713adbf9a356f76921a1ddb9aabdfce49d0b420b7d225626ffb9f472a908f2543c0e0224c068aab93a8f66ac72c63551","ssdeep":"384:QsrJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ksYrOk:kLRdL2t7RllNX7svk","tlshash":"4e33fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-10-05T16:15:06.672451Z","last_seen":"2026-04-06T03:26:17.368933Z","times_seen":6988,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/uploads/elementor/css/post-6.css?ver=1764760706","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1764760706 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LLsi1qFFaZlYg1FaMl2VniqastP%2B5On8k2%2F5ivtENRMLyjzLw7CStbMH522%2BzJgnoBHrkg5VmQAx3EQIJjwysOSl7ovbPLHHzhm9xt1iXbI444wo57nbp3u8ekOZ%2FIENJWDw%2F%2Bs9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01a99efc272-OSL\r\nlast-modified: Wed, 03 Dec 2025 11:18:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69301c82-11cf\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1068\u0026min_rtt=503\u0026rtt_var=334\u0026sent=204\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=151774\u0026recv_bytes=42156\u0026delivery_rate=20876368\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=35502\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12343\u0026inflight_dur=101\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4559), with no line terminators","md5":"0d7039e6fa79bb17b9fdea3c30a32016","sha1":"875957fd15901445ce08577369d5e7fbe3e2b711","sha256":"fe8c767cda0838ef386c7ed1dd98c7acae992a1ff3b2c3fa351324f3ec614eca","sha512":"6ed2f60a8ad7b4f0086f788399f8a988c0c0ca6dece581eeca07510308611f349dbc63213d553cc72a92f77e6e43841f9eb9708d804a7c6920c083716c7e99d3","ssdeep":"96:PY8oqohlu67XhVU0Pq1Uge4ridSgEZuqQYQfqQ7:PY8oqo37XhVU0P0e4ridSgauZdfZ7","tlshash":"ae9181893b22d031b57f081fb58bf57d191c989a188e89ebf41ec34595ebb6b920c742","first_seen":"2026-01-02T02:49:16.1479Z","last_seen":"2026-01-02T02:49:16.1479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efcf2fde783d/oUn_fSAF0JlB09_SS3vFbZom3J5dyT7P63UxHUTLRws-1767322099-1.2.1.1-kEnPMOa9wwzXK6zV0_YRXUeUAppgIq7ZoDjbrRh12vAfWF4JGh490mAqy66tPTc5","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"172.67.135.86","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://duangdee789.website/","date":"2026-01-02T02:48:19.544Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1443766026:1767320842:8UvwUB1nK6vJX3HvqWPewYcek_m-ClYxQfV74QxL1Tk/9b76efcf2fde783d/oUn_fSAF0JlB09_SS3vFbZom3J5dyT7P63UxHUTLRws-1767322099-1.2.1.1-kEnPMOa9wwzXK6zV0_YRXUeUAppgIq7ZoDjbrRh12vAfWF4JGh490mAqy66tPTc5 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://duangdee789.website/\r\ncf-chl: oUn_fSAF0JlB09_SS3vFbZom3J5dyT7P63UxHUTLRws-1767322099-1.2.1.1-kEnPMOa9wwzXK6zV0_YRXUeUAppgIq7ZoDjbrRh12vAfWF4JGh490mAqy66tPTc5\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: http://duangdee789.website\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"4of2QgkO06KbreCxrM$alABdyN+owQ2HvMenlGQAwankEhoQaCxLYo4wG3ZIij7sUdYEFnT8xz8LjhyCL$pwkz2nzBilx+n+gtbycLvVhBQ4XFsRmdhvHC005o$LauM1p2yvHEXFicCgAUr97eRObSjcsnf-Wv9K6jAvcu09ahAlFnwuSe4-EY5NZRmn1ajNbVU8ypYypZfbVnsOlohRRiwkiK+p1TWW1O-OkU7$faIsfoYZKbBpox9PgRMDUbO9nsUxuk7UKXWf2g75$QSrAKFXoTXuo-N9QyIEAiwKsPqKFZZg8iEQb1kUNmUrbzIeTmBPdZSb439$3vlER$j0kFjTEFjO4yB-4yllRLzFGn2c4KyY5yVPgeZhRK3wcRh9+8$H1zsGeWM$ygPdcBfYf7a6AObYVwPPV4iDV8LKF1HXX$XAdzrimadb2v2rIg2Nvd6H17M-LjFB-eXNzX1wghrxF3E15Bpe5ouhiNtzLnPC9OQWOiTZ9ZpiXeRHGLwyniQmam9mb7cqu3Iir0TbnVTSsmsyPSm0Y8otzcKyaSSuNVwlPZwkycGrgb+TOxcFyq$ITXX8K0iWhBZC6cFKma3f7SXTZVBMMGaOIwOg-IU9zjz9NHAobg6Xt7X$zkafrPns0Y2FCeM0y-ZGoowNKdExuSna$ScC3ONgOACUcbuSLT-CweH8r22r7utOXg2$d0FTtYWj9I8xH1p$3oqo9nVgY9mVlEmNb5hpIZolpS0pnr1FmA+x8CWMXCErLzO9tvMP3+r6UsdmOh-C9cgva0LhVz1jOtjANPdE6h+21V6V1sh7$qTWC25A3AC3EIFVeFA4plOPA-oTUPTw2D-lhu6pI9rPFdg7bQ7OzzMCvpYaxa1YIqZmHCVLYxo1GFSZjaIamhWzObS6o6p5LauuU3lRzP2p93rEDE-XbEwZPInWUrO0cC4la+a$f7FsdQw136nbccisa-jWBWzhhSNmZuQxC-foW9ldsbYTmoxRt54CQNogm8+Ee1BNUBs-U5aWvQk9MKq29pRFppE26ujRYrDQ5Ty5+kMsN0GxDExCG18he-ws1RNKsV3+EnzE6$rBRdG8lB1SPYeSqLfWsi$MKonkkLXE7wBjc$0Y4g8-O$cFLIUGM2Mu6kvlOkFU80RtMAugsncECOBhVqPp$YcYEjUWrf0wBz+MmFDlRcubXbF-$dTvAkTEh0v6Q7b6CvPtZlKHDKSOjT0hwKWhyydci0-qGZYjCboVvvU-oDSElY13DcT9vGQoqcj9dyiKAbL-VVEixmdUT+lBG8DG3KVb-SSg4kQMxWFn8xclwNr$VuB8g-ceoo4zksNX7cBQBKV+RapZMZQK6o92BtPV-0MAB1jY$saYrb$c8odMxebEpc6+WKk74mHr2ZU1XySfFhpE6oNRYmUeOso1Qe5jfLeVeCVu7j5UrN5nzjf1j9NF94g+mGbr0M2VhAvkEBolqibwamfImAX+MbPkOwAX3L6ZMXnZPs3zt0KISaK28Ugqo3VaGRnwj86skFq7xwZBaG4Em5yANc+tfDf8kmU7yVU7WIvX5jN32U+GT5BKrqbyXP7Phd2Xk5U9A$zZlabd-Dwhg7sjnwj9tO7iYZ4REKsR4zg2-30weHhxc1X98zkM+C4O6BZ+rfrdmSAoDAGh8H0$Ux4CTCe2g+RhduAS3Ymb4MTD-gtB6TyM+Ck8tCKYZTOlLcNbZzcb5eaisbFRz5HKVMn5LQdMfRNIEt3pX2uhqSoAmDKFK0dWn3g0YB0K$W3aQ0rWdfD1V9i3LGen5RzV1CUIgY-Vj4F4TCLgsZVREu6n1MQZ-P+KjKRXv1CjhRsm9uymf6vfCQlcWBNyM5kifcodleHrSFruRPo$l9w0NLQPgaHSaIHRSYhojwMe7v+-pRUUcsbTFRI6gTHb-hMu-hcuWEM+7TMinThdYWE2luWgrk9$ZSQt4NA7i4T0PwiLt53ymS0lmqCUV-qVnlosXN"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Fri, 02 Jan 2026 02:48:19 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9b76efd20a438deb-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: sVuJZ8ZQXs2qUe1bS50Sn+5u105jgBYzVl8KhogTTsi8aV6JzoiaiACdUD8cWtb9YdYt0NYv8lmvdorUQXG8RQ==$ow+ySJqIq+BnJtIoX2se/Q==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JHoTrndZ8Yobb%2B8XgnNuShLcv1y6Q4rdGtZ2yEQu9eXLE2T6K7iV2i6ChfxKoQYo5fEKi8RuhPgbi8QeY1NZpbsnwp1hWoKlXbiAmRp0Ob%2FLcaOyg2dBMKHZCq0zvjpMwAPpOMHJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=875\u0026min_rtt=459\u0026rtt_var=240\u0026sent=42\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=49209\u0026recv_bytes=3828\u0026delivery_rate=41069692\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efdeccd4c272","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:21.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9b76efdeccd4c272 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/?__cf_chl_rt_tk=tkWcYeS85fFwWw9xfSsVdDtZOQwzkY1sb47pGFw2w7k-1767322101-1.0.1.1-qBgSN4yqBSJsbDTy35MU0nh0mQQTAwWUJwAezvmVR4A\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uTlyg79bCcSK0my6dK51xnXVnMiIRAZNHmLbZJLOacnup1rpOi5Zv67Xxp%2FkaJx40JEZtVKzQpzTxhyp1GiXidoHgq2TsFrpyMpeWLRbd0ULa8FC5vQ4b913BBuBfiUYfpNGow6m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-ray: 9b76efdf4cf5c272-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=4639\u0026min_rtt=1008\u0026rtt_var=5175\u0026sent=21\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=10207\u0026recv_bytes=1827\u0026delivery_rate=2670751\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=21822\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=2663\u0026inflight_dur=51\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"35ec07ed06e57bb16c96166bf5fab1f4","sha1":"104041e4b0d1a619c31ff6e1e2cb3b4407786ced","sha256":"3cefa07157445888d9cf42312f8ea0b8a9995ed36b7cbb2a86106f04e87462f6","sha512":"bb15715e0c4f32c3133b9aaccc1986514b6c90924138471eb61b40f7aeba950489c80dfd9c27a34675e6f6aef08888419875e610f0423db28fd774ef543e795b","ssdeep":"1536:iwq3zVGN2ONgZRNLdQD+jfFWmsFTGGaiM96JkSrUCDt1wPZhnDo7ylWKlBesoM/:iyN+ZFf49FyGaf9AUCti7070Ks3","tlshash":"50c3d7cd79dab55913722038102b76deb2babcc470084d5ee520b9e47cd5708b6abdf8","first_seen":"2026-01-02T02:49:16.149202Z","last_seen":"2026-01-02T02:49:16.149202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/themes/astra-child/style.css?ver=1.0.0","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/themes/astra-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Bo%2BCGDHxlHwap2OkEJcLX5ThnnoDdGbvOjxQvk0ZRBln9QozUzbTFPjyPtWs%2FWKUysh1vSdNDNrJLa1xExzSAs12%2B25x2Br7uZpbcVj7TwokRpOTwQTg4Qv9FAyMk8aKAq0ZY9MT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b76f01aa9fac272-OSL\r\nlast-modified: Mon, 29 Sep 2025 13:07:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68da8476-490\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2185\u0026min_rtt=503\u0026rtt_var=142\u0026sent=1096\u0026recv=229\u0026lost=0\u0026retrans=0\u0026sent_bytes=1105625\u0026recv_bytes=49317\u0026delivery_rate=18722345\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=42195\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12427\u0026inflight_dur=183\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (916)","md5":"ad1025d9972c72bd8f7041d75da62044","sha1":"fefdf0582844a190ad2882cb7278ad26cfad7761","sha256":"bd610140c3b0c79fdc730b65ebfbb7f8f9b24f44e9e4c6f6bd9d9e8dc395cc88","sha512":"588072ccad5157e55eb6802b962ee48d442d43da8c6c99b4d075f6f5695f1244ac11aa9325c1d4bcba221afd5b4f9c1be8448d82eb46b03ec0e74d40868a68af","ssdeep":"","tlshash":"8f21a717aa1037782ce3827165a991c1bb80f34193608031d94fa3882791e5e437f37e","first_seen":"2023-05-22T02:45:12Z","last_seen":"2026-04-06T06:06:39.535073Z","times_seen":743,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duangdee789.website/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.10","fqdn":"duangdee789.website","domain":"duangdee789.website","tld":"website"},"ip":{"addr":"104.21.26.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duangdee789.website/","date":"2026-01-02T02:48:31.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duangdee789.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:30:12 GMT","end":"Wed, 01 Apr 2026 21:28:40 GMT"},"fingerprint":{"sha1":"D2:E4:14:F9:FB:E5:8F:58:B4:1A:97:69:49:AE:76:40:06:B0:46:46","sha256":"BA:0A:07:1E:15:B6:72:E8:DE:B1:6A:2D:B9:CC:77:B6:CA:26:05:A0:EF:DF:FC:C7:DE:93:3D:FF:6B:67:94:85"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.10 HTTP/1.1\r\nHost: duangdee789.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duangdee789.website/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2om95.6A_uYsJg2yQF15XhYAmK_C5DjAOR1h0leidI8-1767322109-1.2.1.1-DYq.qFjcHEvx4qiYf8Mj0nvaXuSvCMfjCmhDmvte0l5Z8KyAYitl9ncVWyYABD9vCzWSBajNge5tTYQr6ro5VBpDwU1Uh5TAnv_bJUQBRvBZiVd9rxObFy4tBgSlTyK77ynUHzQlM2hBOiFU.O01oz1EJ9cOWPsrb6NsBEcEc1tsE6YASjdk0lfQqddo6OAqYc6ce6HpFGRvD9bL8bEYRIysjxz9HdsAGNhn3D5mNrc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 02 Jan 2026 02:48:31 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S11tRZeXoC7T0Sqnk%2FjlWcxFpsuIQcnY2tJXBMGCS%2BP9QN8a7C3FWoMmUmKoIxBmUATftaG36A6aiP7VJDQjT6rY%2FPtXdD72jiNn%2FA3LvWWBr1R0VOaZ9mh12QUhLxbGlBgxzFCt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b76f01ada09c272-OSL\r\nlast-modified: Tue, 02 Sep 2025 08:06:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b6a590-63c8\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npre-cognitive-push: Enabled\r\nquantum-flux-capacity: Omega\r\nstrict-transport-security: max-age=31536000\r\ncache-control: public, max-age=31535990, stale-while-revalidate=10, stale-if-error=10\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2333\u0026min_rtt=503\u0026rtt_var=412\u0026sent=629\u0026recv=128\u0026lost=0\u0026retrans=0\u0026sent_bytes=614810\u0026recv_bytes=43830\u0026delivery_rate=21419727\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35502\u0026ss_exit_bw=20876368\u0026ss_exit_reason=2\u0026cwnd=43968\u0026unsent_bytes=0\u0026cid=92691f625d5495b5\u0026ts=12392\u0026inflight_dur=149\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25544,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (25544), with no line terminators","md5":"bc45775120bdf2338ee63122ac4387d1","sha1":"d7d95f7e1778736060ede956f40b275223f75ea6","sha256":"67972f042a4b627bcb3a54237fc5c350eacfe8f5bf4845adeff21614f17e4a06","sha512":"d0912e5569f7a982d0142cd252ed8e73f8da8158bc58f05a35bf1c854c0402bd3fcbfcb31920eed70f07319f2ce40d8ca0ce904609b4244ef9691c661604a00a","ssdeep":"768:uYEPx6KoYcFDTHjkkoWoCo9or62RcjC5LltbmxPE22Ve3rTX6VzSD0tIzQ6IFNd1:uYEPx6V4g62Rcj6lBmxPEyydSLWNdi1e","tlshash":"59b261a663102a3604fe17e7f5daabc57671109ffa0944111838cc6e19a8fd352f1afa","first_seen":"2025-08-20T18:00:41.42209Z","last_seen":"2026-04-04T22:57:46.840226Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"duangdee789.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}