{"report_id":"fe4d98cf-e01e-46db-b4a2-a712358dea30","version":6,"status":"done","tags":[],"date":"2025-12-06T10:57:39Z","url":{"schema":"http","addr":"ae888vn.top/author/admin","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"104.21.16.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ae888vn.top/author/admin/","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"title":"admin - ae888vn.top","dom":{"size":90398,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11285)","md5":"947f7670e2d6ae0654c17d0d36e5a7d8","sha1":"73b41d77f42d8a1cf7f80e7abbe2eb6b474bb47e","sha256":"a22389868fb131e3352cd5cafb86c8d072a1ea22d979939e14d6afeb89b53403","sha512":"4bb1b2ca30c191fa4cd62f29a8b81a9dde4ee5bbbc9ccffc9171f24698eaf2712aad79746cf2a5a1237e5ca5ec2fd6bcd3b2809f01005c1d7a07baabd23fad8b","ssdeep":"1536:gkCM9ypR+LhjY+3tjz+vQlz5M5QlX5efQlD5zWLQl55BFQlw5d9Qlz5zet4mPQlC:gkCMYD+LhjxixVSLH2riC+W9urhjKyom","tlshash":"0593eab381e86d37932643cdc064771ce987955acf43da95f2fe92a84f85da12d2220f","dom_hash":"domhash5345398badf4408f622da424eb5ef0c9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ae888vn.top/author/admin","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"104.21.16.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T10:57:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-06T10:57:19Z","timestamp":1765018639,"ip_dst":{"addr":"172.67.165.248","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.14","port":54338,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-12-06T10:57:19.630901+0000\",\"flow_id\":2001940293576827,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":54338,\"dest_ip\":\"172.67.165.248\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"ae888vn.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ae888vn.top/\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":548,\"bytes_toclient\":751,\"start\":\"2025-12-06T10:57:19.616571+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ae888vn.top","ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-03","domain_rank":0,"first_seen":"2025-07-23T04:35:16.492252Z","last_seen":"2025-07-23T04:35:16.492252Z","alert_count":30,"request_count":30,"received_data":1044331,"sent_data":14624,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":4,"received_data":61122,"sent_data":2108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":3680,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ae888vn.top/author/admin/ez-toc-scroll-scriptjs-js-extra","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b4866b96ef34f42a10edc81754cf7c4","sha1":"1580b65b2d2971182653fc140ca358f459fd517c","sha256":"7a120612e3e0cdfa064b019b93811f9301c8dfdb7892ace4946451263c11f3fa","sha512":"ed6f593ce30f8ec654ba56a86fd4f8408e977774ce9837a671a478488206d4ad2205d09bd771cdf4e358bca50b890f92d740fc95e184e61a59636acdc274f487","ssdeep":"","tlshash":"2c21c006c8d0148070d00430dc801363e9d9a083c406440de1cc8c4c0c21794e1e5201","size":1143,"data":"","first_seen":"2025-12-06T10:57:45.172639Z","last_seen":"2025-12-06T10:57:45.172639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f74050f4bacb44b594f0014217a4b3c0","sha1":"7f45d27c9185b2b4312140f234258bb76573a2c4","sha256":"66361c617e79f2f0643b4ce1a922a59cb6d4e048fa3ee5cbc2309ab826af40ac","sha512":"69aad8eb67d3eb01ce4c2fc225ab620d79bdf63ca9fb5009afeb113e725f028c80ccca020f7dd049299f3504043da7c7ec76c4780e50321503cad287ab07ddd4","ssdeep":"","tlshash":"5c51b7857399b43687fa725c42ad6a0751e6e0329ad34018db0edc8a13e1f87e073b89","size":2907,"data":"","first_seen":"2023-03-07T13:19:31Z","last_seen":"2026-04-03T19:58:44.484213Z","times_seen":5436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/author/admin/ez-toc-js-js-extra","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2534efbf89a303340819f854dcc0fda","sha1":"31054fb6aaedf879a8b1e5866689f0e6ba01c1c8","sha256":"5d30767cb578bdb95ee4b561f9bebb806286572f2b2248a4c22e3449dadbb636","sha512":"7d633a764b27f67e17df98432c51273ff31481c928cae3a075b6b49d2f65fe857aead5cb80f7ea5cdce99e35151de625847e91717ac24db8c2355d8860dc12bf","ssdeep":"","tlshash":"e741dc24d084d6276467c1b6cf70e77d70be31a8e9b7c2644dfe8d20e11549ab1a638c","size":2170,"data":"","first_seen":"2025-12-06T10:57:45.175059Z","last_seen":"2025-12-06T10:57:45.175059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.63-1709542859","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a98ab9e7de65c693cbe928365f2c6965","sha1":"d3a73531911add71b830eb7ae7916e946ba61ab9","sha256":"d8eee66f15de6c4c768a7ae2dac0fd8845d40264ddf42a4b2215bf80b9393f1c","sha512":"762a363fc58720594e70791738de7c4f08c351489ad665424c169b6a3d3ab2f8601399040f55b0e7d77a347c13cb8f194da93c9f446b912e71aefaea160ba9ea","ssdeep":"","tlshash":"287141a4f662b070a1f6255dcd6735097b2efc1be183919434d4f8981d28e853327e3a","size":3538,"data":"","first_seen":"2024-03-03T15:30:48Z","last_seen":"2026-03-26T08:47:34.627727Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/wp-emoji-loader.min.js","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea5dce17253d8fa46e9a136c5576ca38","sha1":"2080dee04dd87747503aa522fd8295c7e602ebed","sha256":"b4642d22004d1540af5c50ec52a2c19a120d84b844ec526c43397c7050d20a7a","sha512":"123d463ba6ed3488932f88413d77fd098b5c6288c1a003fa2260dba916d1821a02fde6c8a24b6bde3d2928037512955194e55d640a791ae44fd9cebf49b6069b","ssdeep":"","tlshash":"ae81859ae77a3cdbb2f900f2697e0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":4000,"data":"","first_seen":"2025-12-06T10:57:45.176701Z","last_seen":"2025-12-06T10:57:45.176701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/flatsome.js?ver=be4456ec53c49e21f6f3","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a279d096c9e7510c9b95bc4784f90048","sha1":"0acc589b74a6e9c99c4678f7d8e38a6359379934","sha256":"7046618f6555847e4c8d7fb47584672aab889faf9ceebd6d871074da350615c9","sha512":"57089f9f6bfac7c18cbeb975e5b785f574f23687bb51b4dd0651170e9602a87d951f5e031f34cb372e64db2674edd8bf4f8043c805d70416856be8ce9abeb8b4","ssdeep":"1536:c9wJq+5+Q8kNSBopeLMEXmoEtRwcIb1aD3o6xj:qAXwLlgs5aDT","tlshash":"5633d818b25070fe01ff61a7f13fa32472376565b0074054b52d98fa2d69e5e22a3f7a","size":53668,"data":"","first_seen":"2023-11-28T22:41:16Z","last_seen":"2026-04-03T18:01:14.400037Z","times_seen":1448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-03T20:32:49.433436Z","times_seen":130639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/author/admin/","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-03T20:11:30.325233Z","times_seen":34140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T20:30:31.118854Z","times_seen":291441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T20:30:32.047242Z","times_seen":637419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.63","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da8aea57cd2801c64a4d10b05a04b05","sha1":"bc78bb82a39f54d94ea96ff8089c6eb7aa889cb2","sha256":"1554e57ad67200bf6066313379d3af16d3c79870526575e0b12f92fba9cfb69b","sha512":"d82d9de164022a3c0f9bd795b1f158ada471123ff606b5b31ab3119f01059df7505ca365cbd4ade8f9fff380bb0db4643871fd62000dd37ea76299fe9b92fb10","ssdeep":"","tlshash":"ac21fe85e70214fdf1be00ddfc382322f36bb0967925740926586c971d44f3928afa60","size":1181,"data":"","first_seen":"2024-01-13T11:32:23Z","last_seen":"2026-04-03T17:56:28.945015Z","times_seen":939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-03T20:13:27.231009Z","times_seen":63478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/author/admin/flatsome-js-js-extra","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"34b044ce1d2b907ca26a912288c35410","sha1":"de4ee136d8ed3fbfe4b1420dfb5bf4b7eedc9a80","sha256":"6cf5f643b380a3510f8a595b8437282e1db9d2866722018d333cec15d90d511f","sha512":"e137cb6c9de1a47d29997800fa0999edfac340864bf3e5974d3d3f4cc29c9ae99959dcb896413bdbfd2e60a0a193c54eff342451f98de46e0d764e8af39a6c50","ssdeep":"","tlshash":"e141eb79e31db52990c7c0badf38bfad87263131d0447110eeef8839919286832aa21d","size":2303,"data":"","first_seen":"2025-12-06T10:57:45.179304Z","last_seen":"2025-12-06T10:57:45.179304Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","size":16237,"data":"","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-04-03T20:44:26.319955Z","times_seen":9612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T20:30:53.197582Z","times_seen":683805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"634ee9f21b34eb24ea532f2ee6042baf","sha1":"6c32dedd95da07aa54c3b852d789bb529956427d","sha256":"ef09f4bec10862578ab2a20b0b0f5cff4faef4b3ce0fe01872a1460ad0d72c50","sha512":"26bbc3e0ae94d2dff02f696b53e5a15b3455cd25eb10941672fe81715b80a1bd94b5c535ac3a8730b401737b1e0c236524ccb29f212ab4ea1295da2992d0e508","ssdeep":"","tlshash":"6551557070192abb0d4b1960e27f568af238947d084541b4a18de5f22d3d84755b7f9f","size":2542,"data":"","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-04-03T19:58:44.535464Z","times_seen":5380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/05/mo-thay-ga-3.jpg","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/mo-thay-ga-3.jpg HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 31 May 2024 02:25:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"66593535-2b1b7\"\r\nexpires: Mon, 05 Jan 2026 10:57:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyIHs%2F5BYzUrOYGpgqBKFUz945jgOvEBh1rBbVHD4jRIcCdhKAWdrANT%2BOawZ50tejVmlLdOKpw0Mm2SQ89IS4uUduhJ3guDGA%3D%3D\"}]}\r\ncf-ray: 9a9b43227c1ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 800x400, components 3","md5":"2266466c1914ddd389c84fbf94699698","sha1":"15b7a7d04ced359bb431e55eb0ede50caaa6e13c","sha256":"2d5ccf4acc5f21fc4b148c65809408ae1e6421130e87f8b181a7710a76cb0f7f","sha512":"4accd1b392f6c978b9e6f8186e15823b6e928d65ec021acd4bc0dadb21b5e2551aa48d9c75f4692647d3769625523f91b59b958a596dfda5314fa1105d2e80f4","ssdeep":"3072:JJr6BRxwsWioFOp24T2tMzKVrmA3gq43f1TrdfUcjYTEGk99ry4PyjTao:JpIXEECtMQ7gq4dTrRUcGEGq2FP","tlshash":"2c0422755f5add106fd8827fa0d9ae82c68e3050c651ee105af112cebdf07e5b3ca829","first_seen":"2025-12-06T10:57:45.130797Z","last_seen":"2025-12-06T10:57:45.130797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1600,"receive":795,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/flatsome.js?ver=be4456ec53c49e21f6f3","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=be4456ec53c49e21f6f3 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-d1a4\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKsAi8j78cHU8JYwnTtiMn37IUJuXwptL%2FGJlQEbJWxHIMlzeCTybmBaWVWqbbbLoMQ8ZWrupA9kzIUYRkDYQpcmP8OcxL0f2g%3D%3D\"}]}\r\ncf-ray: 9a9b43228c22b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53668), with no line terminators","md5":"a279d096c9e7510c9b95bc4784f90048","sha1":"0acc589b74a6e9c99c4678f7d8e38a6359379934","sha256":"7046618f6555847e4c8d7fb47584672aab889faf9ceebd6d871074da350615c9","sha512":"57089f9f6bfac7c18cbeb975e5b785f574f23687bb51b4dd0651170e9602a87d951f5e031f34cb372e64db2674edd8bf4f8043c805d70416856be8ce9abeb8b4","ssdeep":"1536:c9wJq+5+Q8kNSBopeLMEXmoEtRwcIb1aD3o6xj:qAXwLlgs5aDT","tlshash":"5633d818b25070fe01ff61a7f13fa32472376565b0074054b52d98fa2d69e5e22a3f7a","first_seen":"2023-11-28T22:41:16Z","last_seen":"2026-04-03T18:01:14.400037Z","times_seen":1448,"resource_available":true,"data":null}},"time_used":1603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1602,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/img/effects/sparkle2.png","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/img/effects/sparkle2.png HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/wp-content/themes/flatsome/assets/css/effects.css?ver=3.18.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-1468\"\r\nexpires: Mon, 05 Jan 2026 10:57:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmnZKP0dcTJ82Zv6MFZwPjOVsIofX2%2F9%2Bs8n5%2FILvUpp8iP5yQYnh%2BGCdi0h54kXhXr%2FxZao7I0TxeeuhYi0uhtCqkhF55%2FuTA%3D%3D\"}]}\r\ncf-ray: 9a9b432f4cdcb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"aa2805d4da8f52ce2fe049104f75af5f","sha1":"ea160ee2d39c7a1a0d31c78c6a923c161ba5615d","sha256":"6f8e86b0b2a0ab4f7b6838c02c2f4a406fabe2a55caa7a12aaba9eea89825074","sha512":"c1842c6557e982c787f6c2d6ab6ceb97da581627969ea76f4c6dbaeca07c8e0cfa044862d90f6a615104ffcb5d872cf3c83c04e3054f00dc915a6ece1e9877ca","ssdeep":"96:hzhyuYKOUwRu7GQIAqbi8ViC8Kdm8Ag8PVimQF2FRygdIWMkb7cQDYI43UOAsW:DyeScFIAEicL8UmVDPVi0Trl+Y8G","tlshash":"7db17daa92e1e986fec18073004e439f459f0d136af35a7a637474565775c2b41a44d2","first_seen":"2023-05-06T17:59:36Z","last_seen":"2026-04-03T05:20:26.754648Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/flatsome.js?ver=be4456ec53c49e21f6f3","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:28.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=be4456ec53c49e21f6f3 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-d1a4\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5DMRp%2FWaA0Zh%2BOqSbPoDuX%2BqlYFb3k%2BuB4fqsaIa4NPPvV9AmTjpCQueB3ySzzaFks23cA4WIxsmBIKowiOSOY72csusRCTtA%3D%3D\"}]}\r\ncf-ray: 9a9b4336bd7db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53668), with no line terminators","md5":"a279d096c9e7510c9b95bc4784f90048","sha1":"0acc589b74a6e9c99c4678f7d8e38a6359379934","sha256":"7046618f6555847e4c8d7fb47584672aab889faf9ceebd6d871074da350615c9","sha512":"57089f9f6bfac7c18cbeb975e5b785f574f23687bb51b4dd0651170e9602a87d951f5e031f34cb372e64db2674edd8bf4f8043c805d70416856be8ce9abeb8b4","ssdeep":"1536:c9wJq+5+Q8kNSBopeLMEXmoEtRwcIb1aD3o6xj:qAXwLlgs5aDT","tlshash":"5633d818b25070fe01ff61a7f13fa32472376565b0074054b52d98fa2d69e5e22a3f7a","first_seen":"2023-11-28T22:41:16Z","last_seen":"2026-04-03T18:01:14.400037Z","times_seen":1448,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:28.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-9bb4\"\r\nexpires: Sat, 06 Dec 2025 22:57:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqC38aa%2FvXdMIPnAnSFYg1MsgItvJC2Otz1qIzb051yVynb9Z9tJKddP%2FMizPFfPNOqONW9NGgLirOo2tvzDIE2dhffIeIDWJg%3D%3D\"}]}\r\ncf-ray: 9a9b4336cd80b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39860), with no line terminators","md5":"fd8b8521010d831c4d95db4467c6b89c","sha1":"b366ddaf5aeeb83ad4209f27e4f96f8952823483","sha256":"0a0a9c4251675f3abb5b43a00d186c997029ba504bdf710074746b46102ec8ba","sha512":"03b74533af169cd412f3e91661336c120692184ad85598fcca5b4909612bd2fec8038a505c647bc224c76787afcf1891df3ec15cec3779e1ffff00bca7c05c97","ssdeep":"768:Upk+gInpvUKN7K3TCPHq3U5Hs9Nn1eU6YwlKUqAacA5Ag3KEuP3UtEduE7Hhg566:twk3TCPe5wsdAry","tlshash":"7d03769af351291246eb62fd6336370f1132812d91c380b4b17c9be91dae507b7b7a6c","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-03T20:42:05.366815Z","times_seen":13825,"resource_available":true,"data":null}},"time_used":1732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ae888vn.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 22:43:36 GMT\r\nexpires: Thu, 03 Dec 2026 22:43:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216831\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-04-03T20:35:08.491901Z","times_seen":3132,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":164,"dns":3,"connect":7,"send":0,"wait":8,"receive":1,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:28.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-4e49\"\r\nexpires: Sat, 06 Dec 2025 22:57:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qP5U27S9xRU0DpqhQ%2F1kaNX%2Bf9kUTkYVUgjJ0fYAQsaiYuFo%2BrbLKJfr2PZBqm2sFTm0%2Ft3O3ph7ZilpEXNqEhWY5%2Bs%2FzSM%2F%2BA%3D%3D\"}]}\r\ncf-ray: 9a9b4336cd7fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20041), with no line terminators","md5":"bf993b0a8b61c90cdf9d6db0b74fdc1d","sha1":"4d1c454f45a6549c50d7ce3eddcc3194d777ec10","sha256":"f793c6524fb66bf6952e24951937d2519f9caa869f06548a0fd7fc677c719219","sha512":"131c7af22c2645b021765d48058a8cec418e490397e212bfd18288301d86970449216640475683a98690bdf5c52f610ce90ff6ce4de9159c3006fc866a930077","ssdeep":"384:YP9kCoixNXe/bDhRSkvRuAoCIKJe5anL/L3LnlqV+g+JdSPR5c3GJxQc:YlNkhH0KA5anLPlqH+aPw3QGc","tlshash":"c092e858f1a2b21783eb75b82d9f240c3b72e512c94bc001665994a86dfde88a127f3c","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-03T20:42:05.346632Z","times_seen":13866,"resource_available":true,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/author/admin","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T10:57:16.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /author/admin HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 06 Dec 2025 10:57:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ae888vn.top/author/admin/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzKJizAfBMG3u0Kk4LnMxdgQE846HD9uos4ducub9SHphHO%2Be5ipPQ4pLvxXYoYe3trc%2FB58s5Ce5Zj7u%2FI%2FVhJKfsPscACCSSA%2F\"}]}\r\ncf-ray: 9a9b42ef5c7c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90627,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":4355,"timings":{"blocked":63,"dns":42,"connect":1,"send":0,"wait":4228,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.63","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.63 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Mar 2024 09:00:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e58dcb-165f\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHhHOWihqf%2FLDu5yntRyYg94hQuF5kxwGs9wMmLAmsskxH%2FnVsSLozHB%2FlIa222eJHgt6gOI1O4jbrEiIcbfc8fKKeuEf8Vtjg%3D%3D\"}]}\r\ncf-ray: 9a9b43226c10b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5727), with no line terminators","md5":"14e1ba7bc29bfae4538d5d720bee50dc","sha1":"1f2d9cb056552f6be6b63a202b82a8549b5b1d7f","sha256":"e37ba86536f9a12d450390901292af30f4393d4fe3e06b907d351ef876264301","sha512":"9fcbfaf3ca23c4deffdfd662c0a4f380068b991df9b92b9a1e6fd96f5c87b388a4f3fff2fd14ea4e571d4f3d9dbdbaf91ddfb5f2a0998546f02df5bc9e229b0a","ssdeep":"96:rz8JLTnCNWPAKwUDwAcZoZ6dOxdOdZoT3OdFDsYZoZnOQMvDBjkGcc:/uLYWB/DguAdOxdOFhsYuCrBjkXc","tlshash":"f0c1fd31d6021125f8a6c51efc5075c92f3dd04bc957aeecace1eaa0cbe6499363f261","first_seen":"2024-01-13T11:32:25Z","last_seen":"2026-04-01T02:01:42.593196Z","times_seen":313,"resource_available":false,"data":null}},"time_used":1387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-25068\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjdAmP51u7TRARLrSeY8yX193UqLMdFenGwbOwYK47AXpi6ygkW6pbKr%2B2%2FAB9ze8%2FtzwoafPsd4ewAxDfDW7rpONW5648Cu0g%3D%3D\"}]}\r\ncf-ray: 9a9b43226c11b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151656,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2ba2f77ba47023b694d8418383b7866c","sha1":"9ce97e1c64d274e72bfd2e38b1d3474f680abeab","sha256":"47f1d0dc5c8ad11e9fcc9fb81023552a39854dfe3a8f67609b8ea44c1685c3db","sha512":"01b0c997f64d2639f2d1c17db3303778c30629caab381ff318f01f6c62b0caa2b1893414f40e74616dbae59429ab966fc25070ddbb1db10be6d8fbf2f140d7c4","ssdeep":"3072:Xq5/324TXYK8Jm1LqCYDHSx9JNp30dOeLWo0EADT+1zeckhNV5Q:TSx9JNp30dOeLWo0EADT+1zeckhNV5Q","tlshash":"fae32b52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2023-11-18T17:08:32Z","last_seen":"2026-04-01T07:50:25.333764Z","times_seen":922,"resource_available":false,"data":null}},"time_used":1614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1612,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYUeWaLMtrjjYBf4te68l69oD%2BFOpgYLLe73MwcAl7NlYhKmU0Zhm7JhFT9UREazd6HNbltiXMK1kY2A8bQ0IH%2BaCvpQsMkjkQ%3D%3D\"}]}\r\ncf-ray: 9a9b43226c13b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-03T20:30:53.197582Z","times_seen":683805,"resource_available":true,"data":null}},"time_used":1977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1623,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 Apr 2022 20:07:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"625095f6-5db\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1V6NZNxve2SZ5DOOvpekF1tdlrhpboGK338yY01G4OVCksHr8yHnyL5jvyaoxUdRQsZUxz6oc5tu3ARmM05Z5UuV3PCiFmgBSQ%3D%3D\"}]}\r\ncf-ray: 9a9b43228c21b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-03T20:13:27.231009Z","times_seen":63478,"resource_available":true,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/03/ae.png","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:27.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/ae.png HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Mar 2024 02:56:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e7db40-1ad9\"\r\nexpires: Mon, 05 Jan 2026 10:57:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sD0Z3%2BmVZFobDGbyoxeTpFNq%2B09DwUtVYXhUTX8nasH2ly4TTqetMeLcDXfNEbIdBoiIwlKtNRQNFY%2FM7EswlKHaL972HXYYg%3D%3D\"}]}\r\ncf-ray: 9a9b43336d3fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"0fe471a8c8db362f4b2649513ca07621","sha1":"aa96af0356ef84b073eca5376ae1674c9b2fff26","sha256":"92b81da737dc9c200a6058ca70b0044619dcd7ca09b7c93aeb68dbe2f1202331","sha512":"4f313ddfcc608056b08d3f3ff7b054ec0db07ecec47b58aa3465a11f5b27f4f7bf5d9dca6f2e5a051ed2fce6d7e60f02ccb070ba0e2d4438746f7edb8a801428","ssdeep":"192:0SNkn0Vo9zUnicj3KPwRpNP80KSKvOuZJ+XVBcSb5:zun0VMzUnimN+SKvOubSPZ5","tlshash":"dfe16c1be5a1f9854cd4ad006afdc43b536356d5ca4132ea8cc0995be811eb3cf8e6d3","first_seen":"2025-12-06T10:57:45.147066Z","last_seen":"2025-12-06T10:57:45.147066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:27.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 10:28:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"693010e6-58ea\"\r\nexpires: Sat, 06 Dec 2025 22:57:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3zJ1Pr62orSbfJBMBQbQ9S%2F0Uhgk8IdAHJNIgQpWTmW1AksheYOJzWkq%2Fz%2BF8iYtOuVjFZYPPXvYcsqLV8kyKrEypfUj9wecw%3D%3D\"}]}\r\ncf-ray: 9a9b4330dd09b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-03T20:32:49.433436Z","times_seen":130639,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":895,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3Aregular%2Cregular%2Cregular%2C700%7CDancing+Script%3Aregular%2Cregular\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Lato%3Aregular%2Cregular%2Cregular%2C700%7CDancing+Script%3Aregular%2Cregular\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 06 Dec 2025 10:57:24 GMT\r\ndate: Sat, 06 Dec 2025 10:57:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ca6c0c5c5201f461f43bdc0534fdaa9e","sha1":"082bdf85568b2ad9014e83f24871908eca10c4fa","sha256":"42e869882dd1f836bf9ef53f70aeadfbdf178c0845f31e71ab35192628de810c","sha512":"86dd785ada210a6a0d145339322bebf818e014c24d135066abd6fd3db740dfc5dcc06788dcb7f1eefc2adb8cc0e3ae8a1d959cfbfd9dec5fd3ce2bb86d71e391","ssdeep":"","tlshash":"9951cc91086be504db830cc213cebe36ee0e61516455d939affe18c8fcabc656361b4d","first_seen":"2025-09-20T17:04:02.546002Z","last_seen":"2026-04-02T09:29:49.955323Z","times_seen":851,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":63,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.63-1709542859","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.63-1709542859 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 09:00:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e58dcb-dd2\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4hhVcx4hzz%2BDcTXksD5k8ZouDHvHFTuV8H2L5oGZS4hhGW7HAz%2FmxWSVHCxR5JpSJ7Lih2MsR0TMGwd2mHl0WkAFnE%2BEouNVQ%3D%3D\"}]}\r\ncf-ray: 9a9b43228c1fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3538,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3538), with no line terminators","md5":"a98ab9e7de65c693cbe928365f2c6965","sha1":"d3a73531911add71b830eb7ae7916e946ba61ab9","sha256":"d8eee66f15de6c4c768a7ae2dac0fd8845d40264ddf42a4b2215bf80b9393f1c","sha512":"762a363fc58720594e70791738de7c4f08c351489ad665424c169b6a3d3ab2f8601399040f55b0e7d77a347c13cb8f194da93c9f446b912e71aefaea160ba9ea","ssdeep":"","tlshash":"287141a4f662b070a1f6255dcd6735097b2efc1be183919434d4f8981d28e853327e3a","first_seen":"2024-03-03T15:30:48Z","last_seen":"2026-03-26T08:47:34.627727Z","times_seen":125,"resource_available":true,"data":null}},"time_used":1369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ae888vn.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 07:26:37 GMT\r\nexpires: Fri, 04 Dec 2026 07:26:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 185450\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-04-03T20:35:08.486923Z","times_seen":2057,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":102,"dns":3,"connect":20,"send":0,"wait":12,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/style.css?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/style.css?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"65e585fe-26a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I8RYzn2aJk5mozZFgpIriyOfknNVTlGTiyZXZNEHdH%2FK5IxqEmp1oKDhDXuyob%2FNdWagryjsz8TRnzN%2BIz5UBV9oTWYUU4ssA%3D%3D\"}]}\r\ncf-ray: 9a9b43226c12b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":618,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a72ff80de8cedb1525da350c4c356fdf","sha1":"80bcf68050e8de1843581072070d1bda55e4955c","sha256":"1f56e010a88dccf8a672d4d972b80e29030fd9f9925950fe0770dd89ba73bead","sha512":"0b1b3e15e06bf80cfd33ff5f6e8d082069f9b1007ab822aaaec966cf616e02ec5b20d6fca86e65c5c9370f882c0ee47656eaf8cffac64fd190d82b997b5b6764","ssdeep":"","tlshash":"7cf0245a69650cbd70e982ab3831f1cdaba5772869d68878f41f7848436e30988f073c","first_seen":"2023-12-05T16:50:28Z","last_seen":"2026-03-27T00:30:23.793849Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vv5AsNu46L2QIHlA11A7da0anA0qx3ReDjtxcwGZ5nWmuk395FN2CddfVgz6oUs2cO9vX9%2FFBMv1yq8pvqGVhzaWxlbl45DNNA%3D%3D\"}]}\r\ncf-ray: 9a9b43226c14b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-03T20:30:32.047242Z","times_seen":637419,"resource_available":true,"data":null}},"time_used":1385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/06/bai-tu-lo-kho-meo-choi-1.jpg","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/bai-tu-lo-kho-meo-choi-1.jpg HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Jun 2024 09:09:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"667694ae-aad5\"\r\nexpires: Mon, 05 Jan 2026 10:57:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBkrhptprBV37nkY7zdNS9tIK3H93PydS9%2Bve6BLAoiNLJjofO78zchqiO4Zg24ClXLbjEYmKOuROrElwrz2jKOn2zZuE3sekA%3D%3D\"}]}\r\ncf-ray: 9a9b43227c19b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 800x400, components 3","md5":"39a01a742b63adf21b7802d8c6dfc279","sha1":"5507fd309fcd3886d1a974e00aab532051d9cbd1","sha256":"23b63b3e393f56f2705f48442d51d6e3c7178b6a176d41b71630432a99e36fa5","sha512":"87e2a2c751883b1b571f661c29f7d95b16ae748c2a247f69d04c686ebc82353e12cb98687cf6049be85b4f18da55d02a7106035d6ff7a4fd3efc3589f4647428","ssdeep":"768:x3pH0RkxznIAY44JYyjeT7zEhCdhKlflPvG3R1GT8feBL21Tz:FpH0RkxznIz447eTighKZJvG3dfY21H","tlshash":"ac13f1f632406393bb08337255dfb8a15fb3bd36e099258f749d8e237f240965a8a950","first_seen":"2025-12-06T10:57:45.15471Z","last_seen":"2025-12-06T10:57:45.15471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1607,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 06 Dec 2025 11:45:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNgIpHrBrQ23jbNul83mrl3Nb8iN9k7UXbtdNbEeUR2FSKjqSfR6RqomRHd0%2BW6vdq8Yw0BvEdeHusEmVfbTmIn1bCaF6q5rxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:24 GMT\r\ncf-ray: 9a9b43227c1bb4fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T20:30:31.118854Z","times_seen":291441,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 09:00:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e58dcb-9ee\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmpkcFCIxSRfFT5JAWDIf0hmv3aoh3ZZ614clxa4Stdoc3uaoHQ4upJ7WzYNRdcN%2BROLonVGcMJb%2B0MFSyBBBU5uUwQNLbe0tw%3D%3D\"}]}\r\ncf-ray: 9a9b43227c1db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2369), with CRLF line terminators","md5":"634ee9f21b34eb24ea532f2ee6042baf","sha1":"6c32dedd95da07aa54c3b852d789bb529956427d","sha256":"ef09f4bec10862578ab2a20b0b0f5cff4faef4b3ce0fe01872a1460ad0d72c50","sha512":"26bbc3e0ae94d2dff02f696b53e5a15b3455cd25eb10941672fe81715b80a1bd94b5c535ac3a8730b401737b1e0c236524ccb29f212ab4ea1295da2992d0e508","ssdeep":"","tlshash":"6551557070192abb0d4b1960e27f568af238947d084541b4a18de5f22d3d84755b7f9f","first_seen":"2023-03-07T01:11:48Z","last_seen":"2026-04-03T19:58:44.535464Z","times_seen":5380,"resource_available":true,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 09:00:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e58dcb-b5b\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eledrdVXykQnm6W4fgYbH0e9em04UlDTPv9GWy1EeEhi0KyW3U1vGq%2FQQmCX86k0v3by9u80zEnIyCPO90OWJn0zGo2FvMTKnQ%3D%3D\"}]}\r\ncf-ray: 9a9b43228c1eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2907,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f74050f4bacb44b594f0014217a4b3c0","sha1":"7f45d27c9185b2b4312140f234258bb76573a2c4","sha256":"66361c617e79f2f0643b4ce1a922a59cb6d4e048fa3ee5cbc2309ab826af40ac","sha512":"69aad8eb67d3eb01ce4c2fc225ab620d79bdf63ca9fb5009afeb113e725f028c80ccca020f7dd049299f3504043da7c7ec76c4780e50321503cad287ab07ddd4","ssdeep":"","tlshash":"5c51b7857399b43687fa725c42ad6a0751e6e0329ad34018db0edc8a13e1f87e073b89","first_seen":"2023-03-07T13:19:31Z","last_seen":"2026-04-03T19:58:44.484213Z","times_seen":5436,"resource_available":true,"data":null}},"time_used":1372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ae888vn.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 09:54:26 GMT\r\nexpires: Fri, 04 Dec 2026 09:54:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176581\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-03T20:21:28.593429Z","times_seen":134847,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":82,"dns":0,"connect":7,"send":0,"wait":9,"receive":2,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/author/admin/","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T10:57:20.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /author/admin/ HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Dec 2025 10:57:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlink: \u003chttps://ae888vn.top/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://ae888vn.top/wp-json/wp/v2/users/1\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ff7U%2B0g2T4WdsOtCV8%2BeyXQ1Sh7eEShdqYDVDzl3qi72tD0KrGmJciNVblgaOvYAjHQrVSkL37O041YbEoFSLEYof6vYr2tw0nFE\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a9b4309da8449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":90627,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11285)","md5":"2a0d2638ace33faa0c8aa4d7f2307df6","sha1":"88659e934f180e18c9822086ad134eed5f13978f","sha256":"5ef33097f9b007695af5e37dc78874bf264b1194b0d208ba43282b8d6d57b25d","sha512":"37887e3444b062c1b73724994034d67ca49cb4b79d125a5aa7f49e8215c6e64f398870def326ded1eabd5befbcbe59c9e62dea9c34da35d99d65e6d5bb9e4d16","ssdeep":"1536:13u+vypXmQhjourt/z+vQlz5p5Qlq5EfQl45GwLQl85cFQlw5C9QlA5Met4KPQl4:13u+6xmQhjpC3CaNil+W9urhjKyofG","tlshash":"ce93e8b381e86d37532643cdc064775ce987945acf43da95f2fe92a84f85da22d2220f","first_seen":"2025-12-06T10:57:45.160197Z","last_seen":"2025-12-06T10:57:45.160197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3723,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.63","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.63 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 09:00:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e58dcb-49d\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01G0yh9PkWtTPKMpgPu71O19YWCvmszB%2FPUO8%2BbWdcY%2FdygxVNgHTslNkDBswVjQ4eA48D5Dnbp1u%2BAQkGdgFtMswP6Y7qDzYg%3D%3D\"}]}\r\ncf-ray: 9a9b43227c1cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1181), with no line terminators","md5":"1da8aea57cd2801c64a4d10b05a04b05","sha1":"bc78bb82a39f54d94ea96ff8089c6eb7aa889cb2","sha256":"1554e57ad67200bf6066313379d3af16d3c79870526575e0b12f92fba9cfb69b","sha512":"d82d9de164022a3c0f9bd795b1f158ada471123ff606b5b31ab3119f01059df7505ca365cbd4ade8f9fff380bb0db4643871fd62000dd37ea76299fe9b92fb10","ssdeep":"","tlshash":"ac21fe85e70214fdf1be00ddfc382322f36bb0967925740926586c971d44f3928afa60","first_seen":"2024-01-13T11:32:23Z","last_seen":"2026-04-03T17:56:28.945015Z","times_seen":939,"resource_available":true,"data":null}},"time_used":1376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1375,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-3f6d\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zDN5xWjaKofIZnEj8%2BszU%2FoM%2FFZ3DEUlCxvmMMtIuTWRQ%2FV2fYy6NfNGkloR1YtLxq9EhXqX07%2B54pLn%2B49NPPrDZz3ogMTTw%3D%3D\"}]}\r\ncf-ray: 9a9b43228c20b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13072)","md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-04-03T20:44:26.319955Z","times_seen":9612,"resource_available":true,"data":null}},"time_used":1375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1374,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/img/effects/sparkle1.png","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/img/effects/sparkle1.png HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/wp-content/themes/flatsome/assets/css/effects.css?ver=3.18.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-8ef\"\r\nexpires: Mon, 05 Jan 2026 10:57:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIXnz0n9sBIYcF%2BigZjwLvOkpX%2BncKl6B35fBGDvmUxG2JsM7v%2F8ttC1FREFnh2H49r7jQlU17zs939dugxXweByqyYLnRif5Q%3D%3D\"}]}\r\ncf-ray: 9a9b432f4cdbb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"b5895e938cfbdf4ed510eb449dda886a","sha1":"7a3096231ab87310fc842280b5530eaef410b465","sha256":"e62e2d6021d52dc6ede2ecf36efae7fca59d52710bffd587803739fa30c34733","sha512":"5aea88c7b13aa6bae986db6813fe5013a05e111ef228b4ef73f67b57ee7147288667efe6c247d8e9d740c28e5bbbec138491515199ad322c5f0af2857f42bece","ssdeep":"","tlshash":"af41fa854af60bbcf8451a776b654458f1b60dc9aad562125b01f8f68fb746003161f4","first_seen":"2023-05-06T17:59:36Z","last_seen":"2026-04-03T05:20:26.753985Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ae888vn.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 12:31:08 GMT\r\nexpires: Thu, 03 Dec 2026 12:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253579\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-03T20:21:28.643516Z","times_seen":183637,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":98,"dns":0,"connect":8,"send":0,"wait":8,"receive":6,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:26.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7244\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\npriority: u=4,i=?0\r\netag: \"65e585fe-1c4c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ao9V3Kp5tS8smJTfDkWF02ieUAehC%2F%2B8Mwvao1Y%2BdaO7s69t1dYy2w5oNpX4tVB6Z5hm7jLML%2BeuoLoX2bREh5HJHoY62SoCNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9b432f7ce2b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7244, version 1.0","md5":"239a062dc84e13d3bf0264055163f5b8","sha1":"df819f2954a4738a6bf7adfc692e16cc09d15ef2","sha256":"bc425300c8a8a921a3d481e8b2395ef3c6cac4333b7326ceb1f5963fa6102b77","sha512":"538e9bd520386b1e83597c74cc22343cbf8c024bd645fb38586df42abc8dfb94763a2b332c091a9b88d4bd93e9c6be893b3bdb39a95ded59b07a0868872b3fb7","ssdeep":"192:I+1ZEes2m7X8Yb1ASJaPOCD9P2P3v5oOy:IsOzxb1AoamW9P2vv8","tlshash":"58e18ead66249e8ede70e33cd234f73a4cf87d204a9ea68be54bd2b506558ca091409c","first_seen":"2023-11-11T17:21:40Z","last_seen":"2026-04-03T18:01:14.398601Z","times_seen":3315,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/03/ae.png","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:27.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/ae.png HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Mar 2024 02:56:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e7db40-1ad9\"\r\nexpires: Mon, 05 Jan 2026 10:57:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjViEseFe%2BQKy7f%2B2omuxb%2BV75GUmBvEqZ0pzRQl2%2BVvq1ZxRmB9Iy%2BsV%2FygABn9t55dA4VxIX5w00NKPTuMyUdzoWTZjiQdMQ%3D%3D\"}]}\r\ncf-ray: 9a9b43336d40b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"0fe471a8c8db362f4b2649513ca07621","sha1":"aa96af0356ef84b073eca5376ae1674c9b2fff26","sha256":"92b81da737dc9c200a6058ca70b0044619dcd7ca09b7c93aeb68dbe2f1202331","sha512":"4f313ddfcc608056b08d3f3ff7b054ec0db07ecec47b58aa3465a11f5b27f4f7bf5d9dca6f2e5a051ed2fce6d7e60f02ccb070ba0e2d4438746f7edb8a801428","ssdeep":"192:0SNkn0Vo9zUnicj3KPwRpNP80KSKvOuZJ+XVBcSb5:zun0VMzUnimN+SKvOubSPZ5","tlshash":"dfe16c1be5a1f9854cd4ad006afdc43b536356d5ca4132ea8cc0995be811eb3cf8e6d3","first_seen":"2025-12-06T10:57:45.147066Z","last_seen":"2025-12-06T10:57:45.147066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/08/zingplay-tien-len-mien-bac-4.webp","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/zingplay-tien-len-mien-bac-4.webp HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20342\r\nlast-modified: Fri, 16 Aug 2024 02:15:53 GMT\r\npriority: u=4,i=?0\r\netag: \"66beb659-4f76\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vht9vbKDQ3e0WejpipLhgkcMWVuDTUXeEo%2Bs53Zg4YcKZvIGW7xqUzkc3SorKZAEkoOE3ivxElGhkwJ3CPVpvYNRocYCPLUZAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9b43227c18b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b63358a40ce43f6d0a6602281ab27d6","sha1":"4352daab63af12812e67fba9eb644db32743e58b","sha256":"8749e2cb5d9202b91c12abe95d36ed25cf30d3dc5189669843931cffb238f772","sha512":"91d810a8ca99483a01716556f1ea1f4a445c2b210877417f3ca6a92d5b840c60b569db9fad499fa0930fbabb9313074064222660bc010ce6c6a450eb3f9e9a27","ssdeep":"384:twyqjT3p4t6DirB3IzaaY5fbfgebDgm/TTK6hnTPn3pewFJJI4Q7j/6lj:SBjT3p5i2F0fbfLMm7TzL3Mw/QLYj","tlshash":"d892d1912ae10f67de5f2cb4c232ad78e3fa9f4b6fe515b2502c0754a340d6134adb25","first_seen":"2025-12-06T10:57:45.166919Z","last_seen":"2025-12-06T10:57:45.166919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:28.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-c2f9\"\r\nexpires: Sat, 06 Dec 2025 22:57:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s91qH3nzS6bPJ4rzgCCWWz0NkdKoPPyzz8drGD1gp%2Fn0PnF3rkcRbWhW5U6NWvuUQrXF2ObXvkMIRZV6YaV4WbOhKYkbC7IuLQ%3D%3D\"}]}\r\ncf-ray: 9a9b4336bd7eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49913), with no line terminators","md5":"dc5736a54ea2f7d768700c849aeb2b3f","sha1":"4c80335a09ea5134f7a0922b58c56a00a8d0db0d","sha256":"bec887feaec684bbc55998c457617df16605234f032386cd8068ad2dc8964a5c","sha512":"ece72dc5ec85a9e219c882d10411d848a2934b4f4d2fe6143cec5e349b5d4dc0b459e04563b44be0cad18092126729a4e47eaa2ca919d0a3f5433f4705d66e94","ssdeep":"1536:X/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Mmlz3JZt6w","tlshash":"cf23635eb241363941cff1a7622f464ea273206d140180acf8a9ecd65db9c8d743bf79","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-03T20:42:05.372283Z","times_seen":14733,"resource_available":true,"data":null}},"time_used":1736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1735,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/themes/flatsome/assets/css/effects.css?ver=3.18.2","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/effects.css?ver=3.18.2 HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Mar 2024 08:27:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e585fe-48a\"\r\nexpires: Sat, 06 Dec 2025 22:57:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLQ%2BtLPpGvcHcZJWWpRvjM2Uz92qaqVCebskYzgOylrq%2FzkYPZbra8fb16V1QwlSbcbYPXGtBB9WOH1XxsT1Xu%2FTedxgxKpEWA%3D%3D\"}]}\r\ncf-ray: 9a9b43227c15b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1161)","md5":"6009d7d29871a976eef6223f857f4826","sha1":"8ce942cb7e39ce84fcbdd0402ec26c57d8de5fbc","sha256":"9f9e48f93b94c527067e09ffafdbd2b995eecc95316da1fff60a0cfcaa711565","sha512":"41789649c7c24d85720c8900dbfc6bf10e24d3203186c4e63c334be97105768752fc45e540dab6d85b701de291adb89e50024fa84dbc01dc25073bc23ecab657","ssdeep":"","tlshash":"2121974308422913b693932638f20a8c667e1854f5378b7f603fb297f5ce8d85273ab5","first_seen":"2023-07-20T06:26:00Z","last_seen":"2026-04-03T14:06:58.18145Z","times_seen":380,"resource_available":false,"data":null}},"time_used":1396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ae888vn.top/wp-content/uploads/2024/03/ae888vn.top_.png","fqdn":"ae888vn.top","domain":"ae888vn.top","tld":"top"},"ip":{"addr":"172.67.165.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ae888vn.top/author/admin/","date":"2025-12-06T10:57:24.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ae888vn.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 09:13:30 GMT","end":"Wed, 14 Jan 2026 10:11:49 GMT"},"fingerprint":{"sha1":"3E:F5:95:50:E4:A8:6C:75:C0:06:90:D5:A4:D5:C4:79:57:77:36:44","sha256":"86:87:56:5D:28:E1:5E:3F:69:1C:CC:42:2F:58:E4:59:84:4A:D1:03:79:06:5A:3A:8D:04:54:CF:F3:DC:53:10"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/ae888vn.top_.png HTTP/1.1\r\nHost: ae888vn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ae888vn.top/author/admin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Dec 2025 10:57:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Mar 2024 02:55:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"65e7db2f-a46c\"\r\nexpires: Mon, 05 Jan 2026 10:57:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOKcA37%2BxIxHTqfGWerDLHJ2KDR1Z2Qt5g6mzMTsMoXprMQoeyaqpcjjrdIBF29an%2BLCr3VAF4NTQrpuZH7%2Fdqx%2F0M6gVEyrDg%3D%3D\"}]}\r\ncf-ray: 9a9b43227c16b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e1b218116c38872b44ce73293672e3ae","sha1":"c9cae5e10c577fca48e1a5f0867fd6ee6821dda4","sha256":"4040140b66e66e6c3a0a788ae09875f67da1093e050affc6cd26c2a9f3df5756","sha512":"7925f79c83aa4d214669e52575306476b510fa28c518fe92cbd11edac8f8878c64d5aa56b36075cc712fab1727fe26620c46519ffe2f15b3175ab19c4cefe691","ssdeep":"768:JX22bsCWhmtC0wxzladwAvL9uS779dsx/qSkcNQ9bH+YYBpTv+Ns3s:Jma9MpYH9uo7/sxySkcgD+YYBpTvLc","tlshash":"5113e10915b1bbd81cb3b84899ba1da086951bcb07ebc448fd7d276c3bd72349318a51","first_seen":"2025-12-06T10:57:45.170747Z","last_seen":"2025-12-06T10:57:45.170747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1610,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"ae888vn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}