{"report_id":"08088f65-8114-42c6-b183-169e071f4d66","version":6,"status":"done","tags":[],"date":"2026-01-28T06:32:23Z","url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"title":"Wagyu | Private Cross-Chain Bridge","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T06:32:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"wagayu.xyz","ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-28T05:24:18.634662Z","last_seen":"2026-01-28T05:24:18.634662Z","alert_count":48,"request_count":24,"received_data":5217146,"sent_data":12855,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2271b51f9d1f875a5aa600060f62ac28","sha1":"ba0c72b0f1a5e30f6e573973e6c891a6e38440f9","sha256":"01c1a7d3e3b75f7bc4440fcae37b7d2e08d58bc14b89a6517291421c1da55d9d","sha512":"e2ee291a6b28f16b18ff9558bbafce83f2aae85ee7b31537864739bf3c9ce481481002710242e0d11b48f31f1373b7aff8b501b6a8c148130faa3b35a65a8cf6","ssdeep":"384:tVxskHB6u+x4nY7A00ryUr9lAuUS3ULDhNtGB373i+:7HQxZAPDqN8B3h","tlshash":"9892c5ad36eab8a553221cb4143b39cf72ae3dd5340d5a01c325cae8ba6473c5477e5c","size":20415,"data":"","first_seen":"2026-01-28T06:32:24.477768Z","last_seen":"2026-01-28T07:32:49.183889Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"71d7de4bf3a44cd03c41372446735707","sha1":"7bd33ea8bd754e2b8b9cfb124f3204fedacc2d4e","sha256":"29d9ff509c392869f200cd479f15b714b226c0686e7c431d579ae277bfd510f1","sha512":"ef42fb5bebe9d1884ee8c942acc5f0d3f7327f1d84ee56ceff662d758598cbbfb9f59656da61bee079a7fde27f8232a445833446a02a92a11b4bdfc629502eed","ssdeep":"","tlshash":"3cd023d57b758430b1b9024620b6e7dc377022507715754082c8cc2f5f11dd354f155c","size":217,"data":"","first_seen":"2026-01-28T06:32:24.483231Z","last_seen":"2026-01-28T06:32:24.483231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3342286a99ae73f7ca936e53354b8937","sha1":"3d6561b56a3eb06268f92eac1f40a195a781e00d","sha256":"7dd540f983fcae061d7979cbf95013a21f23180254330002c5f473b94b0b15bf","sha512":"acead8cf9ec3c994156f3a8e50ff6eb9dc4c7e2c7d7acd52594a709b9cdb22bb00156e09049f3746cf6ad8044251db4162b62e7ae5db222e4f8b67fc69f0f1e1","ssdeep":"","tlshash":"d3f02b5c3ae532b9167b2262d2834489be505053f093dc0d751cd5c78feaa2430aaa9f","size":533,"data":"","first_seen":"2025-12-02T14:24:29.178524Z","last_seen":"2026-03-28T02:34:29.847803Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6be3b387c3e4ae08f1afeb2891ff100","sha1":"0caf71429b9504659c4bcfaab71803b0d591c590","sha256":"8811ee5d5c18e48c1d5bbc8bd378b5c452d1d4c2d66c620b185bf90372d4e6e6","sha512":"0f7b2f91811109bf80b7a9013cb8d477f6d06efbe4390d84c60ba74ed44e80beaafe1148e92ef9c4db92b393e59197b2f9141cd11811faea3592799d7ed5ce1b","ssdeep":"384:E530RB0gqh4/XN1v7ciVrIe6Jj64R1gT8xn5OHfSl6bi:E5kTbqhZUq5O/EAi","tlshash":"ad92b5ce3ddb399423662cb5202b31cb326e6cd5a00cea05c2618df4b960b7c5977e5d","size":21233,"data":"","first_seen":"2026-01-28T06:32:24.474656Z","last_seen":"2026-01-28T07:25:13.409001Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5321b607793495e125bd4d38453bc1","sha1":"37813d15c2ee2da74fe3dd6e17a3f9586510fc18","sha256":"2117aefa76808b12b7309aa76cd52c7f98e7c78b736fe3fe0148df0c137bad8d","sha512":"b7c03434ae97eb7b35058861a210fc5300117644d4a2f0dc7c7c0cba602a08a8998961a264f8a3d1c3f43111ab9f07a382049b8755383183338735847984f9a1","ssdeep":"384:jqZCfMG8whJruMqM1xQTe3pcoocP1Osa8EhmJZBgwXFqGW2HO6/:GeMkPuszCeZP1zWaX0yu6/","tlshash":"c092a6c674e5b52483b734f4587bbccea5babd85300c58448530f4e87876f05aa7adac","size":20715,"data":"","first_seen":"2026-01-28T05:45:42.411438Z","last_seen":"2026-01-28T06:32:24.466824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"74769edfb901121923b4639eb0dd644b","sha1":"3a487b4346c6669d1fa0245135c821b679a600fa","sha256":"fc3664c9dc7ca1222e75a8e4358ed38eab99d1629db41be55f558263c50ffff8","sha512":"a6b8637d76f3025614a0e7039e1598888b4301520bd48c2d9674864cff6c39f7334ae8a806ffc2889fe3e4f578dc7c1aac6d11ce57693d96cc47695ac6f06fd9","ssdeep":"","tlshash":"e1d023993e768930b5d9034710f5e3dd377021907715a10481c8cc6f6f11fe344b155c","size":217,"data":"","first_seen":"2026-01-28T06:32:24.48452Z","last_seen":"2026-01-28T06:32:24.48452Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a04714f185398dcd41094672f6a0d66a","sha1":"225a90d6fe48446bd51ad646e027f1872dbbd846","sha256":"bb01d577f0f0431d5d8bfc423495a7c6c5e8f4a244e2ec1a9a64a171d671ac2b","sha512":"c3934b5bf9c151315662d44635a47c3af87eb4ad95645a5ccd007693f7dd82ed80944f83e1bc7c91384d02ec0732202e2d1a2df4146923a9675d6ce2fbcfeaa8","ssdeep":"","tlshash":"1ed023f57b76843075a902471076e7ec377022507715720082d9cc2f5f11dd355b155c","size":217,"data":"","first_seen":"2026-01-28T06:32:24.485278Z","last_seen":"2026-01-28T06:32:24.485278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/f5b8de02-f6da1d855c13.min.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfbca216146eb341c5f6e82cf2e66542","sha1":"709b6b4c2377ccfc197156003a26dc3e50ce5feb","sha256":"3ee30d9f53119a5f9c0395db1b1892b3e91d3caef4f4b895ff70e850b6adb8eb","sha512":"2934fcd3cd6ee879144ad68018e12688828526dd36272543c4dacb612773e6b41342b1f8f9fee44c9b8b4e23b523b26a2693a79ae1069246904fabf6461d9f37","ssdeep":"768:VECYScstNRo0Rok40x6oxxGpeAu5OcR/EDMaPQb00TtcVrW9G3i5c66cORcODxXc:fP60UoxxGpVcMIrbre7ecQ","tlshash":"b453a4d5590bd0e88e5224ded473e919e4280a63cdadf1a3ba3cedc1741ef61848763b","size":63021,"data":"","first_seen":"2026-01-15T11:47:17.969422Z","last_seen":"2026-02-13T23:27:18.094836Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3f518eeea5323ad35f14419170a16e5","sha1":"a8cf411b20adf67a289b7551be5d33732a6461af","sha256":"024d7546b95a0c860bdd09bc93cca93dbbadc868e09e370b5db27227e4acbb63","sha512":"df8108a5743b36cdb20152773cfbc385926bafbf9124b25046b6ccb37ed6fbf3bf387cb063f070831e1cfe18c915005e82c14844f05ae2cbede5d5467056fa60","ssdeep":"","tlshash":"8e1100793f2a1534c9c5418b31bee7a93e3220617a06a044c26ccc295d18e9714efcbe","size":902,"data":"","first_seen":"2026-01-28T06:32:24.485956Z","last_seen":"2026-01-28T06:32:24.485956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5YGXZFviQA42yu4kFh1s%2F%2Bs5JjI%2F5WTvtLhZljZ6xnPelR6DsH430nYg6qiqrXIOFuzviBL5uiquuHo8AdlXIzaS4aAEaY3QIKUbAlbBbuOpgW6Gum8aty4Wn14m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c4e7339de430b06-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=888\u0026min_rtt=461\u0026rtt_var=139\u0026sent=202\u0026recv=53\u0026lost=0\u0026retrans=0\u0026sent_bytes=203859\u0026recv_bytes=6536\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=458\u0026inflight_dur=52\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20715,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20715), with no line terminators","md5":"7a5321b607793495e125bd4d38453bc1","sha1":"37813d15c2ee2da74fe3dd6e17a3f9586510fc18","sha256":"2117aefa76808b12b7309aa76cd52c7f98e7c78b736fe3fe0148df0c137bad8d","sha512":"b7c03434ae97eb7b35058861a210fc5300117644d4a2f0dc7c7c0cba602a08a8998961a264f8a3d1c3f43111ab9f07a382049b8755383183338735847984f9a1","ssdeep":"384:jqZCfMG8whJruMqM1xQTe3pcoocP1Osa8EhmJZBgwXFqGW2HO6/:GeMkPuszCeZP1zWaX0yu6/","tlshash":"c092a6c674e5b52483b734f4587bbccea5babd85300c58448530f4e87876f05aa7adac","first_seen":"2026-01-28T05:45:42.411438Z","last_seen":"2026-01-28T06:32:24.466824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/index_2.html","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://wagayu.xyz/index_1.html","date":"2026-01-28T06:32:00.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nage: 4083\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvTmRkAlbXD7BWZSfP33u7bD3rtdeXwPkabIaoIril11G%2FQEBIkveSgmZpSNewCebWRfvvxmwAACwrALk1cfPHUtt%2BsFSXQW\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4e733a5e470b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1063,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1063), with no line terminators","md5":"91f0cefb8e0f4ae7d68c50843221694f","sha1":"aca428df7afb85455e1869897c40497536990283","sha256":"86e376a4e62d6247d2b8a982c9970c7e3b0bd76ba33ff10bab2b8dbee51d3333","sha512":"34ab5050a6a1fc3b255a7b2715574a37fc3c924c653523608d84e294bfe166f1b2bae620ff13172133cb7b686156f88bf083c8c193cd7620e9554974a1890964","ssdeep":"","tlshash":"b811f0b57f15453899914186217ef7e83d326024ba02a040d26ccc289d18e9354afcad","first_seen":"2026-01-28T06:32:24.467928Z","last_seen":"2026-01-28T06:32:24.467928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T06:31:59.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 06:31:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgoi5rTGF4kGIzRCXuv%2F1arfuzOrL5Jdek0ZE36wVUx1TXdBvdImDX%2BMQI463unLC7ITOxsmzIjoEIM0fr25T1yu4MSkXoU6suA%3D\"}]}\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c4e73348c424c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44713,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (43237)","md5":"642b8c4a15897c0e21cc702752c10c4f","sha1":"09261aa7b9364338bf6f07fdf5011aa164c95766","sha256":"e9ba157cc73eccba94087329bb05408d73f1b3c7b471048f6a0de3399e7d60e1","sha512":"5b711ffc9279ee5fb9a71a1686fd58bdb42aa6e41fbfdb1eed570023ceee2609c0eee9c4d253f6056e5633e5b8d4f4af4a8cc996202c7dd79b384fb74aec07f5","ssdeep":"768:peBcBRCAN3n2c6LkwyIMxc0GLkwyIMFRZZB9vzoC6LuSx/0:ocBwAdn2c6cc0GMd/vzoC6LuSx/0","tlshash":"b813c7b06210253f91574ae8f670fb3e609a934cde0bd43cb1ac81626fcac95ddba654","first_seen":"2026-01-28T06:32:24.469053Z","last_seen":"2026-01-28T06:32:24.469053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":73,"dns":59,"connect":1,"send":0,"wait":396,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/index_1.html","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nage: 4084\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slOARwycYd4GJtUfnjn9Yd8GRW%2BBxJCinlXoqUhEknDOQJ8Uol%2FZFycDS87iP5K76WKhbGV2bC%2FdJjJvtQYEzPcIMDtSgz02\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4e7338fe390b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2261,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2260), with no line terminators","md5":"e0b9c260a2591be47c9babc413bc6867","sha1":"c87b2ca99a34e45a35103e38fbd5253d8eb48a13","sha256":"87a7810f5169d1b3c1af829de3f2872c9736c518038e4bb6704d316819bb92bb","sha512":"70c131954c979d13c0b2cf9bac73611bf17ff6a79bd3a169d21f405fb5c9ea9e247c0e92decd25e5fb9ea363ce5e3b34df58cc950afb1a94e43a05d7bbcf567d","ssdeep":"","tlshash":"9541b5b13d12ac349117639664eee24d3933b129eb0590c8d6ecdc1e8d6ce7a109acad","first_seen":"2026-01-28T06:32:24.470292Z","last_seen":"2026-01-28T06:32:24.470292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e73398e3c0b06-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rpi08GvbDqsP2IVCl%2BMsHjPkL64X21HQd6fWgSgetXkEsccJsal7vyTND2%2B%2B6u2AP5Hdmb1Z8Tyw6KDEa%2BPzu6npJnQc2Nza1WImcA2Hq2Zo4MX0D%2F2RI4kFL06D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=890\u0026min_rtt=461\u0026rtt_var=291\u0026sent=185\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=194482\u0026recv_bytes=4393\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=46446\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=407\u0026inflight_dur=46\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20715,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/XMR.svg","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /XMR.svg HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"3ca-19bc2122027\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBbrcvSyTALZ3HsH38483PualNdzQMPT5LzPiXHFqkScIcSxoykWfJFVePIa7Yk8Tr95LA9jvo9GMQOYlsSdxt53ppCNXKsA\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c4e7339ae3d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53e38595209ad2d1a03ec80a2ca80ac3","sha1":"323456c8df0414ff461f52dea939c7dc8380ad41","sha256":"8fed0b24e91222f2d43820e71f4f5bf1be8b828d25951811692cba72888c31d1","sha512":"352e93c1ef9398b0c5e95c64d6d1e8299e806737ef523af403881912888925a68e49803ab4b80b97b9ee2badc234dc42dd6275cb03cfe8aae313103a6b8a6e83","ssdeep":"","tlshash":"7911508390706d1ee07289d88be9ae25087c91f563d96dfcf2d32d3e1561cb810cca90","first_seen":"2026-01-15T11:47:17.964115Z","last_seen":"2026-03-10T01:35:50.707485Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/7c442735e43c82ea.css","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wagayu.xyz/index_1.html","date":"2026-01-28T06:32:00.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /7c442735e43c82ea.css HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"19498-19bc2122014\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4084\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUZdBTnSe%2F0zCOKa2urzRrR0pHLYFpGPmlvJhfExeeAHh3oSzwBSliCKvnnIAjuI2HfxdNpbflDiivF4WYLTF55r6KnVM%2BnH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4e7339ee440b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103576,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65472)","md5":"7b23657af02a58c1bbd1afa31e7b778a","sha1":"9c6e2062878c1cdc375513587807e469e99bcbd9","sha256":"40a71c02956511d64ceefc3ca310832a33582d065cb3e52af08320659c6f5b14","sha512":"64e7a2c62b890e44f7ce0ea54bad5e7714779014fbf7e8483f4dd5e6ef32f8bf56515dc13180e517160df69e0825fa073af07b87a8666aed9086883af0383b43","ssdeep":"3072:MGShfVREBCmneOmH9Q2wytybjrSWxDhbEgbx:MGShfVREEme/tybjrSWxDhbEgbx","tlshash":"77a3711df612113f3c2780f9c25cedada116b1c0ee3a6be6be4221118ac67e35de7254","first_seen":"2026-01-15T11:47:17.973399Z","last_seen":"2026-02-13T02:37:51.321818Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/secureproxy?e=jscdn/getFile","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://wagayu.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"tuq8cwbzq8khi4chccqt\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQiSE6tVbc0vo%2BP%2FtQ3uAsGviAgMhaHOFNKwYkLnBY0nTwWJ%2BvCyFxP3gbhNYfyGRIGqULKt%2FDxmPN0eNPP9QCXjhrEAWU7s4gMm9fAa6IZEqg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9c4e7339ee450b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4634410,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bab178b450e55e34b204b3795af78c8b","sha1":"d82e4a171b5658930e6ab77a57eb2251295a479f","sha256":"5d205c3c5f25a11878c5f8b17fb4cbf82519566c456e1230d4e2f37b7110e28d","sha512":"602daa3bf4e378ff7c8990c8c0174263ccd4bf1b51d11e107f691843f94d1e75ea0e44dc8a45d7141af6d750679220755ae21bdd85479796a10607a0f7749fea","ssdeep":"24576:TAAGeTP1ZCw+Hf1x7JfpdKyTnaZvFaEzl3kplM9NluhLRth3Mc:TAA7Piw+/1x73dKyTnaZFa6lkpl2budp","tlshash":"cf2512dae083f4e2663ad952b3d8acdcb94e408ff6c653731550ee8421960b94edcd93","first_seen":"2026-01-28T05:24:22.373083Z","last_seen":"2026-01-28T06:32:24.47368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":561,"receive":419,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.2035366881975006:1769578175:6-xjUaYrsSy6ntb5qT2IQLOR1HsxtXi2iYlfCZZcWNI/9c4e73348c424c11","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.2035366881975006:1769578175:6-xjUaYrsSy6ntb5qT2IQLOR1HsxtXi2iYlfCZZcWNI/9c4e73348c424c11 HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12134\r\nOrigin: https://wagayu.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wagayu.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12134,"data":"ACtcem6sfTWS6S6oqpqWBnKqMIq$qacIzPcf1q0c2VfiVyziFq9cAVcjyqoqYYq1MYsq7DfBoqT$N6nJkbt625kOtqZwwqqTLqAFC0Zqo74UgIAE7T04qopsOlQ-siIqImoChUIhI21awiecq1X7E6mk6q2kUvweRteg-cPfMnMZ4E91ltr1ktrnqTmkUi5gzZqqXYkEBRvn42B5jXZcquFPq5cf3aYVqEybTW3Wu8$GIqCZYePY-q$cqSXPqhSokUQreTQDq9wQpO9Zm-qqwYo7cPmqqiKKPomqXtc6i8otmkNHetpcq3X0c$mLLDXh$h$mCaPqLODtYM-Kqq1IMIlCXfnPLnPSnPqzfnqv0lyPqtYfPZum7aIP6O$aCdIJ3kNenOeX0hhCCY92XtNyCX1tmFPCy8hqqkcRntqc4LwpUicq4MYfDyySyCL1LBYQcBTzBSNyT8CfCO9hIqsOatqqHkw9ywcc3mM3pPqxoGtCyEX5CrnfcQsz8XlCLXBQ81jFySuysc6myPw6LmbKAYuit1P9nKeo3-oASM4lFlmw4XF9jvcx$lo$e72ZSWukb-Ow4vx7arl7pjsiFcFKuMuXqNyPxonh1uWGnKWwKqvlrelLXgOSP9XVYfRa5yJ6IzwbCvFPMuQfQyaQBpWVCXE0oFM2jRcNH2tv8VNKrEYzphNgiIivnwkfn75ghUP1c3udQJqNt8bvSaEqSb45l6OLJZMQd82wflHbMAW3j6VZylhOcTA2F$Q0eFVEj0I83h7N9JDL4f6Lq68km010k4l1nPcFmC-0KDQTO8xv1cDfSAD2fUVUlOPLN9WIXl$hSIlQll6zlfLL0MKqMFZWC34iwihq16CQlXJQLl6fSRklInkc-1CP4xYfvlxyCRkoItfzPyntPDqxIP4fI9k9DyecD6CyPnxR6aKkqw7VOtLPVpmQlDKq2nv4Is0q5SNwsB09HM6IaP-Kq0PDF1qaKyfY0iatLlGYmXnBSnxwaPIJqFmI$co4IOpiXfrX0IjGnzyfsMyYDP$7BBSMsqECYmYtM4sf034mrISXwu4w$zyjcFHffd$qyjyzPrm8p-XXZKlA0LlXICaPqPCH$NmVa0CSsHjPxn9HM4E5z4njfcNX1c6hMccpqenOa40a6aDs43hIA4DXCJCCV0F1L$0QDFm4B1F3V$4NKEF4VQtL4COTs0BhR5q3$kcIcLFjJMM1H4wItTqnOCJJZht5Z1nC5ZEI6SqwKkyPleFFef1Y-Iz7UhtRJID4JyIRx0fVNxpfb86Zfkj1aKRvDD13N1PWwOjiJGstaxCT6N4XhDDIttztXBa0I3L3lNkEVCpkLMaVu0tgd2QwDf$49pnrWS6tdiBoAxCtPzWqVzLnRJqaLnqk9MVLlmORQDs5-U4LzqsprTTLlcVTwaYK9y6-vUVcshbDcBII9r67DwLWqTwVWaRdrog$DGkC$z4D4JJ6c$CwlNhR6RMdyOIOJ5ps985jYz55XORtL6OX6mMrb9PVdXMjy6XPiM-ZgrN5Dkr40ZqvbI8-vQlbvPN-9Urzcqq$dhqSVYqqYq$vLDIWY6chcwjP6JNhz-lFKiaPEfUCRhOncp6tqJV11q5cS66fs1zlqfsvDEDggxabmDkVpsSplaeF$qqMuDIPeaZ6NhywQwc0Ss6QAtfD74FcX1$5ZYOxTz466NO7r70ijs2MQ2nLr0DPcs3yhLKc9oTK3$mZ3tPLPsfq01AIopLDPOjVgyRFV5D5qXF2WSyUq-5PpasP8ftAlttsFResLO$BYcw1p8UvwPkNyI3B6s6L6V6P5qibDWfoIL3sqlems37oEZCPLeXcb9Rj3f4NWyID$kX3PfaeEMPTFaf-4S2AhQamHuSjD4EvIPFaP0WeWqTv5xAZC47aDT9wLb6jXLIf$ffBo9C46WmPySqJ6c7I8UuIGk60m0o0EpFPcU4-BBqXAZkcPcWeoOpppaEoqZ4xaMoJ5XNYCpYLXJQvq-PygwAx0ygcHDNYFex$1hBpPvycI01G7Ib6LZNaGmt5CMQXFOtqAtmhy2aPFfFyp0OMRLntabKWAEUyaozl9eYx6o0N9Cy0EfmIbu5PFe4K3Vnn5PUcznf483j5H0oF4B$yH7uTQDmtvVtcMStojF6KXZHXPQJtPwiKIcO63cqOYSUX2TXXHwwOVVOtbkCcp$afzzpE1z63f9F5zs3ensE6PvWOZaKcxFFra3y6IBkLrzvsEGXt-cQItoUhI5mRhbozMNhM9sWq6nM0gsD64yCv2xswEcZs15lIYsW5wPwY$PpJm9PRnEc0-XRo1mkD3FMhooOVxTCesXUXZOESqhulamu0ISj1wEsWB4FmtoPwcHzbrEKcaObADK4po6s1A7pbyzWasttaZwxO3mp$ahn6yixzSnAVhBe6kJzXXpXdzXteXZ2IBDDPeMV5clqeUfnJnDWfqosDWo2Ay8bkJ3t7Y6PGIG3jVqlOxHD8BYYrfa0PeeGtmiOVZmYcXbNFpuPVxfT9yRx6ksjnzOljsrgV1QBzT0qeInaTBuo698GZqe15x8S0WhuDwRGaF4pfyamSUll46u8UrVBqTCrLw$4uCvDctPwNQy90YO3OJZiysR9BHwAPwXyqIOnVgeh3q10SkRa0Q6Mmh7vgX$bP0IfcVeEOfDSJmoma4q-LVvAqxVFR1KXRWzc0yVJPPA7xfBH7Mm0iqRZ7rSXGvP2fNQIZ5RF67qXIhfAinajpm315-iLNuUtiQsMXr-ct4yaaThIblJqfwyxnsmyt04z9jTRq6q2Va$Vep4W2OOaDEmR78Dxewpn7lRMlXF4Gz4yxs5C16ytAME$6cUoGMasHtqJOO6VtL9zG53nA3NZl9Cuh5QSp24vfON3wKaoVhFJw2aJ$EWoITUPUcoI6h3jADFRJTTSGGrJPiHq3CKB$ZWsA3D4qSWQz$PIC4dm16XGSuDXcFToRwvyVCrWLPrAjmmu72jQQo9YPX0I2I4qUbSTV3KQAhSeaZxqV1X4t4TaDhvwzHY$YSHENP6zD5O5-$4d7YkuZjBC-l8kbPvNCVm1xXnt7qseTacm7lKaK2CmL$S2ureog1wNaDTLn79MpqSst-NsFyXfDwY4kN1OWu4T$v7Lfy7VEG59keFr1B$D4f6kjXKzKdXsbK2u0sE4kwqLTlIaYMYmSE70rIxzw0DTYOP9wR4mFMHoJiLVokwg5CBwZ$TDzEF-4XqrpvMkUKFcLuwhF4ZZerw6MZEXvQD8PkzS-FIIpyqo5zfXvIXQR9glcpmwnDVsD-fXBFFzyUTH-v0r$SLUFN8EeMdx1UF$6ctc6NJkFi1nAGQgbhAkv8mIDJVT8tzRLrGJBX6TZLWckbusnGw9kj3u8aQe4wlNHcA29jQ$tzItFl1Zqu7f16FNZO44K9cWafws9yPr28o0IffGxUH8lmHMO8Byx5lpH4fxHvZyESWrcjZ6B4Ln6VBKGY4rxaHMOT6VYv0V19Bu5zZ$1XQL8JQCbz0WQXP81ybBbtI0Kyhtq4qyEfm53P8wHj1Xle4RWR6DHDDn2wLMEzqcGq2SY1bjl1cF3FOmcB61JemU3jqbYwQJ4qEjhRIv8X4RyT5q3cwhH46s1VIz8WZZH7O06YZYOVPnh05I09GsK9ExIt1uymaUq4IKlzcpbbL05yWCqzmfyC2hZyHDEDtIkYcce$bn2ctLGLO1QJbQAMqG3BaEJX8QT-J2LHH3DFB0Igby5I44HmLfyuBKDeqp3CJA1Kl4f1LC63csGrGFYrEl8h0gOQYwP0HYPdxTZ7y01Y8J4WEX3JE9QUtiHWGPw6PSeto5ytqLe4ILQwPZfmtZHWbXt-8B2A3VJ31FyChD61TGL3TQQtH$IUoUtgZUkqWVOYfLxcQYxFfXkaGSoUc8WRWnbm4CxN5Rax81ed4bE949mCavEgEKLd8G57xx4sL43B1JDSbJbwm4fVamGFmEbWHmPOhF0i2hZjfLq7GDoEbnh3DgGV45P9bxAMIwD4wDGWPpJC3SqvEQcZYOGfE4hu41DsEx1TWm363P2hEEmWH7e-LCL4IjDsbJPwWaa-2vDTq6kB8XYtIUTfBf41lWbJH74oIVhyWlc-lWbbLCJXcFBoAbLRO41oTwOeH5caoxEwL8yyaqoCJqkYYzEXyakaTthth2JR2zE41w2IfYf6PCZjQIqC3CxzYMDYtMJEALq6aamfQSGahZyCIVhRWMLV36Pax8aQmtogaePyGcQ8QC18GVY1QYL4ozem3YIfIqA4fWlC086EJDq4GT11mIWV5oIxEWAtWjoeQnhsQ6agcFcpQwPC3RInWQlRA1B9TFoBDKe1t6OZtOocljICanWHoilzOItat8xpYtD6fmyoHR6oE6IKH7B6cWeqhH4LWrK$25PsTB0Jbk2IcJosBKlOLC6Zl7ZjhPO4hxQKtG0mfF8rEyygTZ00t0twI-aEmmJrw45ClQeL8mwG5X8lEgbZ2$lnEI0R0-a1H0OIW$2aTqnDA461eqt0hMDTIlTnP6hD1dbKPX1P2n2DDqp3oHlqTqiFaVh56VBMtqSvGvGnXmYjtNJoPpe6GpT8Ypo4D52A6kcTh2LY3oySfVJA1QQCOToXwuKiBBK5TcupGcFGAGPQHrm907HGejWyFn6CITqAexP72J46DBm7K6eIAb4RJhQjJIKjkLrB1pJI2jyytABpBJwk0qfYfnazYsXqkbxV1vHyX68w0BAnWJtl2wx2b9QlBBPr8py5JSiPejAZwQ54qHmIGoTXD1JZwBLnexPZtslqQ06SBCIsBHEXy0ljfR1xaTfplsQkZ93vDf1ykgA4DUmTXRm65mQg57Q5mrOMpsGSxUJdHUno5EWnbDWKbc5Lp4qhG4kLOTqokUw4qrYEYKPSwEPsbUnHOu2WPe1khUICIVlLaP2Z0YY1Q1Xg3Y1xhZYDbmy1emPwqnaPF6Q5oW5bJfIJm95u4Kka83Q6kAlD1EuwB8xk2rY-qw1mx3JDIjwHO1EEWXfVqCi3BMnkOf4M8m6Cp6AM6rHOwmpxxyXxtqSwZ$oq83nzACFF4Pymf02Sip4hG9cErFpmkxJjH7nbJGOeOkZjoxcIhjGfpvkon4qb41khq2QT64SYLBIUHmuE3MlYkfBj2wPO1waO3VScZWJwxkuIi7oUmMStb04RPhOfK6nf4E1UJIhmBRb$x9Qt62QlmUSNbxSmw9SUkH2bnn5-W1ZgHhTaTiipyY0lPbKVitSYPmnGtuGKQo8yqT15TFX12hQqoylnaIIBhBWRnwInyGi-rA6TEv5AhkwpyJyA2qnsDwh3tVFXA04V1Bexx2AGPsb16qHqQt1I2ee8HWe1wSIBw9E9x$JRfBFCLV4NJ2txnSG9Ol37AnejA18jxgcfbEtwqHxqErPSo0FYGlSYAl2ciEEMQm6munaVGoabQKoYYDFAevPy0hJ6o9u9rR63pW3gKYZd8QWYL9rMOwXVmkmftnxxBOtpEp85yaDHoW8miXfRcbQTyBHNrmIN1NIz24e6O0hconfKOpYRcTWr4meLDhG3TTA9TqkzBAX-Iwe9Tpx0otSa2M84f9exbKPviuGyEM8pDkOGpWw6Opp0mxagJ-FoFnMCcOqZutiKQ4kLfn3fBUXYqHmG5-WEc$mrO-qx3EKvQJYowr5Xe$4gljoltFJ9iyAT1lLysABnfLoMXMbJAn64naOwmaxbY0oEJ4DqpZG4k6TJmjfja-1LDbcpD$rlBD34YLqfsOHuQqX4qFo4qsbbP-ryI4ORKMxokqGkamOKIQM2Fq6WSVmgbyvIhZK7J-OS2m6oacEoQUTsMRa01axui6wULJK$eR2jfheq7lnbnnLw5HFFuWeFSkS7i7ixOeXwIT1TILDSXzHWkI$cxn2wu1X-lvQgLvPHDg3gZHTp26EIX48ZcJY1Q0G0GTZwbb36Svxo2HorAwK1MT6TqTpbwzlEyVW4tVSwxFhGnqrw45ynqiJ1hsTJu0cbcSAcP6PSeHuysetwqIDAb5PgoEe7cpDgXrOLtCcTeSWeB$2ntnfVT61HPt3LqYyhyfSEJUlsVKTNweXSl81CBR9SEU16DqSIe7W2nfmCfTtan6x$pmZdlnitn3uSTlyfB3mmYLsaIxAIFflzcGA38DMyMi7L6iVB$hTlXIqKXSWUpcnzSkiauxJxKcrsXr3gFgnF4091bjtkPVS0bKI6vXbThcvt15SZmAeuAAwViXSz$piclzVVX9Ln9ArUu5xZBKBM95PyP$bjyTa1E90eunbhEbvo0b9aitbLSpn68SXu3ja18O5BLx0I61R3XVcE45OpeXRHlzYjlALc2bk7nebnoxYRhRaVkIVX6Cm9TbGAAZpmOw9M1fSuHsugnKAwweiyveu7uAArAMatbwYOoCGv0Mo17$xZ3GsIS4HpoFqOQo3$tKoyXqvlppRCt$bikvreGwHhcFKvXAxi4I6TMSINSPekFIhffbDsEOon6$HUpOE4h$3FbjBVqblCBnsCBRIjFDD66AX8S0hL9HvRf-ZWpFkepFROrwRV1s6gkpVRL1Im1Uc0a6rgZUfOpWVkZswmMsrr8QaiMD7DVNKD$r4I87xjQZoYQSIxfSh-npHVVkZHSV98MA5j7LQzSZvxKapcgeSpYhw9SYxaXIIZwFbQy63Z3L5UYGe18gnaFUun6ROeMLwYqO8U4loA5i3rSO$isquekIeUp2E$ZHs5sL8$5TqpH0LtqyO$cxfTvCT7OAt92-ot870IVGZQCKYdTZe$aDDj1mEut01ow7$S7VP2RrRDj8Bwrw3BM-A9BuXUMMsEnTua5aZ3$LVxZtkcNTVSQZuuoYFlEGLLbzrKMvSnrREn36ah8ya8Xjvmf73NZ04EfrkibwJQXLb67B71SNIEMXIS6MzFtnObwRy2kvEPp1lhWN$cSkGkba78XVNPrYorAzxGFBZBZpOH71RF6KoLa8bTgfi3BKEBM65z$kxm4QuK0kBo6zy4snrZF-f33enWiaPmFQQLnqnfXLU69-Eh5g5E9PA-qeJmh-3TYIiyvIr2Z$AThCRuB08UyGKA7fo8WXpYZtT6VVSurfII9f4U9TbIfWlr9Z$EkEar$rr4x9YbZNM1ER0Prw7SAijQORW2vldX0WTQoX3ers8I1n$0iYLFMlaVzCjgYkdTCFgr76901uvR1VOpuLaIS0fsyQyYUpEHnBdmhiuLhQwUDNkqiS$8lh6eXxjkb2tfG0LmVexQA4ILQeECcPGGcYVaIGmfP0qhrK8Vp$Wa1sjXpl$or3a1HgAYmOtLaOe78YHrcOhUaLhFJUY8iV-esQ--GQ-fmXSLPTjo08O9UnIUoh0jJysL9EBLM6f2s3rRajEhtrMIP8Lro$A$A5x9VpH$2QbwY4ZwJMMmR8Pm7W$1OMsJy1x1O53Di6jX4nTYejokngNgduzqW0S16OMUCdlU-j5trh0mgTtOIUTJdWZNePoxtwaj5zU7s5SzikuZtIQO-4ZBjXOSdx9LIMAIkwpmLOnU4nAY2f6Zz-IePXtTshTudtZ1tcTXkTpqUWA1Ts3f6NqAj4hVw1Oyit1ttfUL6q01DTqNqYo5SvhBC84eiYC3Nowlt$aTqaSDS55t0oVfipsttMLZsepaBj7pkj6laM76cQiWALGxlwaGu5EJC4z9cpDschf3XmgqaLN1MFe8hhEJ99c1Lv5YNaTfg6fVmgkYYDQ$DC69cnDvN1qfikxqXyUcJVwtI-4MbLVQ16P97l4cuOVmwc-wAtkEqKk9tT76PaixoljW0CEmwD6tYQ4G0sqkWsxBnkGfxDecQk7qX9b6q70-yPcZXk0PTfPbEPVPFA6I2y60WtMot2neIAaCmCI4MfVwWItJ6lf0sJLo1o3au40ChTntVn$il3aafD3Cy7cP0LhZILE4bPcMoEcpEAfET$QOnqQe66AWQ6LMeq0g6DhP7PP7TPUXQkGfX6XcVqTVRLA1luW5n6dfsoLo83ZIC37xoVZR3BqmqzXTNIToLkP7qPQ1Wa9V3t6Qj0nJ3x45VLQAohR0H4zROt$y23autI4oPyT67WUFYWX3ztamw2msPg6r4HShCoUkGfTP4qQ2wJo3fjPzPmnhQItZSfkcgkn064tt7t2kWDKBigQqDcbxFgo0L0UB9I7QtTw3zs0f60I7NWjWZ9hQFLVyPmtl1v0TsrDlwepaI6sLFcztLVTDmijYfDPfStn0aaqXklCnnt0yRmBB3fm9c537G6xyfWnQG0JP0dtHfY1Ez6SICfLRlJofB7yRItmPvlG7jrkP02TTq$SeVEzzgtOTZMW1DJ6nmSn77$7A3oplCfRVl7PewIkEWxKHoztIIPZlohm6DGzt0PZWfNaxft03MTQMQquI44SnZDQTR1k9INtuiNEAtLRLnWeqGssclVv71ykc6LlnVjV0BkSmCCslLZTn5BAzcYbflmdLI2m48fdPkD5qMS$fwBqofbf-qfIfnWC4OWG4RwM8IsojhufL4uv5qTODK1xTTxtVWw6WHDlKfP0J0OS9iKahBqXL0z$xXEAp1s6jlTCEIhjTg3lyoteVHs0ofBWA09lpVUyoiaSkWk-n0PdGo5meIg6QCezRI1TeG74AsqiVNEolaXhgndtLWtns0y$0mmYqYqacINayMo0dxntPfs6TCfPbsXgDhl6ohZmfsF4hMxf$UAL6tTcGHcesLRoB3VZXCntRXeY3Hm$aoLjVVIT-aIfCq-qFcaSxKGLz1PzoCPQDaJJ3DnlkCo3xWIlaf6x6LsqxAmM910cin9t1ztP2lkDfjPqcVyyqts0EF1kEyTyp5p8IzjBU$VPE6IwDZwVTOGLjpTYKwAy6SU8sFcOCWjOD6hNWE9TqrpL15VbY9BULam$eB1DcUHq$-$CfnWY0QlHMRe5Dq7mTEql5TNyeQZc3n1nIPP-af4fl24eGWQn6ePP6LanBBqqqLJQh7qsfhqLr1NIMKCqGKMQymRGpqPLMm6-Iw8qEJZhi3alz6oP6leVKUIgcEsdynzhnkiZD4L6RcBTB-D51AZMfxe0creyCZxfNc-g6uJmbG6Y6MBctMPhnTQ4$zYqRk2Dvf6JCxSZ6oDe2fDhjYQ3pMICfwZGk1akFsotVwj4aH-z9fXqkzWQv75kqSlDcVniIa5WZI4cGFggqfRVaxJy43LVnKH6zWaa2q0MjQtdi3q7KCqRVVniS7TJRJjnxRHf9j97P779WqPUtVjpxt50MNPPdy5L7OARJIVl0Ct3IoGtJfo0KI3hWs$fTVW-0-y0Tnn5ikL6HK5FZy72FZ2kqyEyPNTNTe1qQKLYZisDVwa4DUWBqicXo32a3eU1CaEq$VGWF2a66UqbnDc7L31a1fwKkczPWQ5VaX7x4XqWDaCoLJ6ZvZKnMc9TIbOIKOKXCNykCIA2MWDYK7s5hBqF3-DTLe7PQXGZ4DFcL6-7kLsE6tAxVC6gtFy3R27qT41P87XQ7VaAkfVcqr7ECNDIDamFiHjVyszLuhoVqoWzqlcvD1-lTgG0KcxMMoL9BuKFH24JSHl6fBjPsZnzbPo-oJo4c7EdSQsU-rJkLqT6czosHjtoK9YuKPnAVQoL8e$YUbMzcjkwIU0gJF6CC2SHiPVWQj6yoz$Vr3e5kCKF7wzZyEkozalMJ9ty$-7RPzq60UU87zcwovJ2Tf1Dgq$SE$2t1na-Ogt0UdawntgYhEJn$SrxpvkojY0Az-srxXOIqE4YeVNUbP122mWG0Gc8zI-xgedBmqIP0SFcIqiEKQVXnrUJ5yRTqLjUOVhsU6L2ec5vy$z-sYmf4LfHGPzqLsAG5t1dkCwCz-slo7vcgYRPIQbiAGLteJYPwBqkvh-5PF6mQebcyQvo3DSblpEERRGfXAHfoHE65c7GsG5JlIftT87DfdqXYPgBLZvQ$fNIKPpIxxDcfJfbvTgWIOLzjl$Si13tfRmMaMaDhwK2fhy5nwlLvzT05codYBw$0$Ttl08AQKWlHQGfNL0p6KBTDUaZmXDqqit5ie2Vps0l0s1iZlD8admYoPDizK6eya5mCk3qihY4eZTvsG4sJPxZRw$IjR7-5zf356wLYtpvoMTIYJ3K6cAmj60QWE53HA4HcWiqh2KasP8sxf8iaLrQ6pHBqAG3Ztn3IOAwYE0E3Go2oZ$8nn1emddrJonzhtn1W3H0LOZ7mRlZz1B5F0ZqS5nwUfgARFR82SKfHUfhX7Fv7q6IrAnTwE47RSnjOHwozXEzGITrttpEbzOcfFvJAtqYqpq5yhE2JwpcJkoQ9s64LUuOZcngz-syIvcIwOICzCOKsthUFEpXbMatwQwkspwHG0wqTP61082S4DpSanLaSVrE0O5Zq7AqS49LWQC5WgtLDP26Z1YEszoaKyG4RfmkxDcGltcqY$$k4kICZi$SSRqYyZgG0tTGQ0YsdbWKFDgtrP5wte2GB1PRarDrav73hErP$antTosUn-Jm0rc8IfC7wugm8eKI-hWEkf2YxdWitrI6IkdH0WKWxapD4Eae20n3X9crSCbVTI45mEHOysgl3uAAO-wCYfWwbR3qHhaTRF-GLbVHtRV1F50aqyT2CWDlqFwl8mzhS1FGqYeQMCMixOetOJj6DbNyfc6gTA5RH5OjUdG0oIZ5LqczGsuARUXBW$EMz4XBoVJeZLYpY3EsBckCWeO9a4O5I5A7BrpO-Pjb2wGO3gfZlYp3z7Mmi$xigOjpK7Ns4uVMu$Jrb4bcjL7VGFh50wQbtj-kZoShP0wlbjPPzVXSJBulObTUmBqjSSfeHoIStUzvESOxynJz4XDuvGuk42CzI-jbcImyUx1pHzYflu9v25LGXrY4XY-MhI1grXhzwcA-3RSOOjQObAXU65RSO5ceFbKMU65oScQDeqYT1gUccpq8Dw4l31b63-FxxVwQbof4OZMrDxBFWOFMlu3PSyxwpEatU$4nGinxNpwAsKsNZbaywApGaMMN40oSAOswBirfgsctp8kWf$OCmDN5lrEq3e0bmXj0ZuLVbEeXA$1l073iVQXeHbvx00i8TOOMw9anClOvnumH$XGtIBIKVkFuaq$WoOmNoOkFLQknkw9MGksCFXOV$ran18W9CpPLI$raSfnK9CSPQo$DYw1HHM7cc8o$cYQ1DbVyXSbxqSYwCgNvz6fQ-n-0CxFWsLnuOYeubi34eRL69xApGYSUBHRYXx55XTuaTe75uTOOzMGV4Bj7sTX8O7$WOFEy7sFFu5OMwVyEuAvOFwb9eHblEd7RYYVGwpGulxH7MQFg1geEqME8p7QXV4uMNYHxUzxBp3GrWxwOcZU5Xpy6UPF4uCF$$FmzhCn6aOo2HqDatxc4eq83h$$H4IQg6bDZDRyR3W$LBItqjVfnqU6wOlXdwNC8$aTfDXg6JnvqtdpRGbhUX0F6svqJ9GfajWgtogOj3YrKLd$V0TMDttNi01EMIkv$5YRErZ6RqayPc3qqqhnT9$ITR2t1nqgqMIhP6Ca$2v7xc0PHC761F1QP2quIjy9TIiJTWgVhcWoclqkhZW3OSbqqqBxfn6Cq-t06qUaG6-0lqszwQwalswA0jtCDussmfRqlfbtYLBleifYbbKz9oq7qWSqQfsjqqaIIIvqq6wP59eSC6uIGXjVxDIDhP41jh6VqLY1eSjq3jT91ip59pnu8Lf4qJorIkHF2fMjqq8kHnuGtkd9EDt27HSbcD6pPpnZ5vpSz8dnQVYqWhxwqQqJ4yNERHJZtmBq10Yc1ojqkhSbb1grE4qtRaIJZ6ljxqzI8PoNrUf1V9XjVvPqqaFXPXPX5VDITfqp9D9RFct8pj6V6eteRca79fu6kpMqNqOrxDIcmIIkD6Q4cOn2Y6xcQLu-Z8BVyc4G08lqLvboB1Ofl4jN9IZf6JAXtMlW07PERJIqiB0HzEJmRX25hZ6uXT95cOnI$65Q-9LPI6wQWKnLWCgf99nwjrShT6xcpcZ-nf7DmuWkgINXq02LkhcfsjAqUq3qo4IcqM6zttV0B$4JXmoPX0jVsatHr1y5mX0yITImR3kay3Vc8-CMqVfVfn1oNoqVE9DhhlGcMWhXmXIP7D6Gck4MXJM1K2VhFcqqlA2iDwPPHukgxBfKrGgnjS9g-rhPZryq9qT99na1wt6UZ5qqqrynMqq"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e733afe4a0b06-OSL\r\ncf-chl-out-s: rblM46ZtogeQgyBNbuFCQw==$Rv8Rbf6F7zxM844ca6B6Ew==\r\nset-cookie: cf_clearance=j48xvpENpoRw7qZsNGnyhP5XCHm0QkTU5wLN.5jy.KQ-1769581920-1.2.1.1-hoAEUee6j.txdxGQeVPZt49Embmt.C76fkaALB.Qn7YngG6ocwyf0tvTbxQ3uYv6czeIJeFVpGQWRSUrFJcmj1fhc0RoC8zruKLRvmtx5Y8CzeuDwSwKK8hxS3d3Qtw9LF0O5WzCAzuY6ZMKI1joEyJdUrd_CZZFqy.y7Zpg_kMSAPMbRKZSPTgNcFIiw2ypewtdftAgWhBJOBSsr9x1ErweSFfMXiRRkkE_N10iTAU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=wagayu.xyz; Expires=Thu, 28 Jan 2027 06:32:00 GMT\r\ntiming-allow-origin: https://wagayu.xyz\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kI6TWIAs%2FUwbOglwKTZpm25b9eWEqEbg9Wm40vuphB5V8twawfGapgJVJXje8Yf3wj1qUXIsm%2BBWj1jTBUyHYVIcbJI%2BpARZstfG1Ch5WQi4cVslYT5prgBAbkib\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=977\u0026min_rtt=461\u0026rtt_var=378\u0026sent=240\u0026recv=68\u0026lost=0\u0026retrans=0\u0026sent_bytes=238862\u0026recv_bytes=20160\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=635\u0026inflight_dur=76\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/index_1.html","date":"2026-01-28T06:32:00.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=j48xvpENpoRw7qZsNGnyhP5XCHm0QkTU5wLN.5jy.KQ-1769581920-1.2.1.1-hoAEUee6j.txdxGQeVPZt49Embmt.C76fkaALB.Qn7YngG6ocwyf0tvTbxQ3uYv6czeIJeFVpGQWRSUrFJcmj1fhc0RoC8zruKLRvmtx5Y8CzeuDwSwKK8hxS3d3Qtw9LF0O5WzCAzuY6ZMKI1joEyJdUrd_CZZFqy.y7Zpg_kMSAPMbRKZSPTgNcFIiw2ypewtdftAgWhBJOBSsr9x1ErweSFfMXiRRkkE_N10iTAU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4%2BOkqSrTjuUANk4%2Fjetqt6l9%2BWxEQqZyzJhG%2F9qfW8jTi0TG7VA%2FWn%2FMrvtYyvpFcGszCXFGTs3DxVlYDlIBOvN00CPMAseev9MxlkHSO1%2FnelZ%2BwMed8upxk%2Bhh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c4e733b2e520b06-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1267\u0026min_rtt=461\u0026rtt_var=863\u0026sent=245\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=241507\u0026recv_bytes=21220\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=670\u0026inflight_dur=86\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21233,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21233), with no line terminators","md5":"e6be3b387c3e4ae08f1afeb2891ff100","sha1":"0caf71429b9504659c4bcfaab71803b0d591c590","sha256":"8811ee5d5c18e48c1d5bbc8bd378b5c452d1d4c2d66c620b185bf90372d4e6e6","sha512":"0f7b2f91811109bf80b7a9013cb8d477f6d06efbe4390d84c60ba74ed44e80beaafe1148e92ef9c4db92b393e59197b2f9141cd11811faea3592799d7ed5ce1b","ssdeep":"384:E530RB0gqh4/XN1v7ciVrIe6Jj64R1gT8xn5OHfSl6bi:E5kTbqhZUq5O/EAi","tlshash":"ad92b5ce3ddb399423662cb5202b31cb326e6cd5a00cea05c2618df4b960b7c5977e5d","first_seen":"2026-01-28T06:32:24.474656Z","last_seen":"2026-01-28T07:25:13.409001Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/306e8d314a09c540.css","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /306e8d314a09c540.css HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"e9f7-19bc212200b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4084\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBm0xFbHUdzkQHn6F860hexl5YAZA6%2FECGdIb6oYrT9RyBqpplayfz7yZTdLmWDmlJgnnVEJqfIEfcEI7ybJmXxEeFYxWL6g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4e73380e340b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59895,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (59895), with no line terminators","md5":"56dea29923aa69bab317ca693d9bbbea","sha1":"f2aaf26392f5ec73296a9a354be929243924af21","sha256":"2158c3b477c6a0216ee7099c36738a6de330939316ce7ecebafae26758f170ed","sha512":"d51c53e1c59586faf349dafb510e20c26342b8b2d4e3d7e33a685bc46d1bff5fe035dadab99b8f72dd4fb8fbc38b81adf2b0982b252b229089ce10f93b99cc5a","ssdeep":"768:ukuvNRO5judlWgiZNOnTs6uh6kqseyj6XjUNYOjfBpP795S4:3sROR6kqsez4NYOjfBpPB51","tlshash":"404351a0e261d47bfc13b4fda39cf41da119b0c5de2557dcfe52a10267d3af608a6a10","first_seen":"2026-01-15T11:47:17.962983Z","last_seen":"2026-01-28T06:32:24.475617Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/logo-1.png","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /logo-1.png HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1679\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"68f-19bc2122044\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rdF5k2YLSwaDCv%2FoJ8vxr9PjE357ZZ%2FDYwBmzQX7DFscDQ4yhyZLVymwmDSKK2HfYPCeBA9dr3BpWyIqqgCOLf2sk2aQTXn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e73380e360b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 46, 8-bit colormap, non-interlaced","md5":"f29d7dcb2f119c5f61ad711284500632","sha1":"029e3a18d54b0363860f2386dac2f2b213123974","sha256":"7b22c4bee1e259d97ecd0ef7425b0b634703486c1587ab69a3ce1f63001a6062","sha512":"8b5754cb26120f09829d88c117dcb16715163945e794a62486fc55e0bfaa42d6256268327bdef0c9217d1f69f24728310e1f3ee653403308b4cf4140a5ccab9f","ssdeep":"","tlshash":"4d31ea8156255c3f95fd56d2148f091406f74dade2521764405b350b0e382afbec1fee","first_seen":"2026-01-15T11:47:17.970268Z","last_seen":"2026-01-28T06:32:24.476667Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/HL.png","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /HL.png HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 3711\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"e7f-19bc2122025\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrFBrsdOqJzmH9kd9uTs1%2BdWbXBudAx61qCjER%2FLozoD6cKuq%2Fyl4iz6rpjtaNXEl%2FfmS5t8TBEFeVuHYhxkgFJUhoSVD2fe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e7339ae3e0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 576, 8-bit colormap, non-interlaced","md5":"8f4d48384bde96f198c8f011e3551e35","sha1":"24ac3d54fb31c4db66da59119ccf190a0990dfc7","sha256":"1e93469ad3d982d37c8b0e2a8a79d0dec8f35ca2468c9cc6eb8f018b6cfda3e2","sha512":"8d0f84c300a8b46ad0f3a171bbb0ae49080a7a07e999fc96e92694a6d690ba5e56e341eff033bf13ddbcf63c0a6d103b32e69699c70c4a3c5d13fef114f73485","ssdeep":"","tlshash":"df716c67983a9d0bee72517919257c3cca99cd63a832415cd381acf3e4f8962e0a35c1","first_seen":"2026-01-15T11:47:17.965114Z","last_seen":"2026-01-28T06:32:24.477216Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/index_1.html","date":"2026-01-28T06:32:00.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e733b0e4c0b06-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Cw%2B7p2rVOYx5fZEjo%2BL8mliNdCzXRFhgYaqLG44FvrfqdcqpfNmczOW%2FYomOHJlKq9e5vNf6100n3htDrLd1mUAC48cW1kF%2BSbd9xnz9ibwpF%2BWZiNgFVB2T8BgH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=977\u0026min_rtt=461\u0026rtt_var=378\u0026sent=241\u0026recv=68\u0026lost=0\u0026retrans=0\u0026sent_bytes=239930\u0026recv_bytes=20160\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=640\u0026inflight_dur=76\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21233,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/index_2.html","date":"2026-01-28T06:32:00.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=j48xvpENpoRw7qZsNGnyhP5XCHm0QkTU5wLN.5jy.KQ-1769581920-1.2.1.1-hoAEUee6j.txdxGQeVPZt49Embmt.C76fkaALB.Qn7YngG6ocwyf0tvTbxQ3uYv6czeIJeFVpGQWRSUrFJcmj1fhc0RoC8zruKLRvmtx5Y8CzeuDwSwKK8hxS3d3Qtw9LF0O5WzCAzuY6ZMKI1joEyJdUrd_CZZFqy.y7Zpg_kMSAPMbRKZSPTgNcFIiw2ypewtdftAgWhBJOBSsr9x1ErweSFfMXiRRkkE_N10iTAU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e733b2e510b06-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=POQQ0RfjOMzFl9erWAmM9NG%2FUqdRFCVABeSvsWR2FuHmgCpRrpFxJ50OpNGl3qcrYkQaiGqFbmHzTqtjQFZdiQraEm2oR0OItYAXGIGserL7D9qtAnOBLJhczR0r\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1267\u0026min_rtt=461\u0026rtt_var=863\u0026sent=244\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=240748\u0026recv_bytes=21220\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=664\u0026inflight_dur=86\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20415,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/index_2.html","date":"2026-01-28T06:32:00.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=j48xvpENpoRw7qZsNGnyhP5XCHm0QkTU5wLN.5jy.KQ-1769581920-1.2.1.1-hoAEUee6j.txdxGQeVPZt49Embmt.C76fkaALB.Qn7YngG6ocwyf0tvTbxQ3uYv6czeIJeFVpGQWRSUrFJcmj1fhc0RoC8zruKLRvmtx5Y8CzeuDwSwKK8hxS3d3Qtw9LF0O5WzCAzuY6ZMKI1joEyJdUrd_CZZFqy.y7Zpg_kMSAPMbRKZSPTgNcFIiw2ypewtdftAgWhBJOBSsr9x1ErweSFfMXiRRkkE_N10iTAU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=59l%2F%2BCEBiSblE8WiPzSb2jqhI4pgOOH0I5Vb%2BtXyxkkaJf%2FUhEOPzzPYl8jLjdervQQh0wP88ZO%2FFUHIc%2BtLQM077okUEfTTFy%2Fxu0uzjOiaLMmUbeOre9mZYmqK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c4e733b4e530b06-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1385\u0026min_rtt=461\u0026rtt_var=883\u0026sent=257\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=252152\u0026recv_bytes=21779\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=682\u0026inflight_dur=96\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20415,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20415), with no line terminators","md5":"2271b51f9d1f875a5aa600060f62ac28","sha1":"ba0c72b0f1a5e30f6e573973e6c891a6e38440f9","sha256":"01c1a7d3e3b75f7bc4440fcae37b7d2e08d58bc14b89a6517291421c1da55d9d","sha512":"e2ee291a6b28f16b18ff9558bbafce83f2aae85ee7b31537864739bf3c9ce481481002710242e0d11b48f31f1373b7aff8b501b6a8c148130faa3b35a65a8cf6","ssdeep":"384:tVxskHB6u+x4nY7A00ryUr9lAuUS3ULDhNtGB373i+:7HQxZAPDqN8B3h","tlshash":"9892c5ad36eab8a553221cb4143b39cf72ae3dd5340d5a01c325cae8ba6473c5477e5c","first_seen":"2026-01-28T06:32:24.477768Z","last_seen":"2026-01-28T07:32:49.183889Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.18379249875146444:1769581583:pFaczp6H9-REbzhOLca6B3FiQIvBZ-8q_Z7wMMEZ1xM/9c4e7338fe390b06","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wagayu.xyz/index_1.html","date":"2026-01-28T06:32:00.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.18379249875146444:1769581583:pFaczp6H9-REbzhOLca6B3FiQIvBZ-8q_Z7wMMEZ1xM/9c4e7338fe390b06 HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12150\r\nOrigin: https://wagayu.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wagayu.xyz/index_1.html\r\nCookie: cf_clearance=j48xvpENpoRw7qZsNGnyhP5XCHm0QkTU5wLN.5jy.KQ-1769581920-1.2.1.1-hoAEUee6j.txdxGQeVPZt49Embmt.C76fkaALB.Qn7YngG6ocwyf0tvTbxQ3uYv6czeIJeFVpGQWRSUrFJcmj1fhc0RoC8zruKLRvmtx5Y8CzeuDwSwKK8hxS3d3Qtw9LF0O5WzCAzuY6ZMKI1joEyJdUrd_CZZFqy.y7Zpg_kMSAPMbRKZSPTgNcFIiw2ypewtdftAgWhBJOBSsr9x1ErweSFfMXiRRkkE_N10iTAU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12150,"data":"Vu9Co4R2OGScRcRI5w5SdnCz5RCSDCRc5o5l1H5kG5p5-eX2N9hOy5r5ZNben52Roy5SGyR5GuRzm5QGH94mHu85WC$n85lsXSKn578opM52aRkJ9Th+74U5LzrwzE13t95l2B1Vk9x8Yl9Z5C95SBVX9PkDCbsRDDsmkb35u9RV29g9+Vpuf8z0f8G5QBXRm9SO+C5YQHEa5cGeqewSLTe5MNn5oeRlyNc5t$7MlgRIPqjU9tlyFhU5n995MDn5S+b0NtBYJLK5IWZ+dwng9C5XQ0ce8$55BBNnT$R+2D5PT4sNGrEYfD95lDnKSuVbGjpAgauRb85XkOIlAnKe5RH-4c$oCdXXQXoQk5IUh5b6fLk5O9ecXr8W$tk5YYNRGltA45NjY$j6zNHVlTDQ1GE-lH1yhGVlLPedO-u95Cs8hqf-C5HM04us04Wu2b8J0GnWG+WcasGiEO683Tk52BX955aXy34yD0UU-zwD5M-P96d1jMkCtOe+2s6ZEE8dW6iXjsscps2CR46Uy$M4FWVYqJ9QD3cp7VUHlV2tHlwN1lHZFLQmCAKlJmoX9acbFtPxVlH5+tsclEnQfFgeFpL-Fhk36UMJcbdwSIcpzIpC2li9l6Jr+cD3FKVR-YU8TbksI+k2te-F6R60b6MqSujhhzIt-TQ-CpPTnKTurpiAsXqbSu-0gmu90s8cnSwx9SDXM5Xzn-8KQCI4r5-ZnhknhjDtpZiuBFRurjpQ$n3kctaKwh9XQCGLr9p62K3G4rwS4xxNkRDlSh55rcNu4nhe8H6ODGa28nlrKlCbnqqDK5ARuBCxO-dOnQ-xp4zK34IQKQtu0f84hR93$Co8E4OSDTkPTCaOf-KFUQIK9CA908C6yeCHfODrzH9krDf90T50X2uD6y9KRoI9n44l0-rUoeKOf-9Gyqk4l0CSGf98R9cBN-K0$C5Gma4X9e9I$s-UnHESS4In5NCOnuYpkOgNR-nm58IKW$Nz8a86bX4hOmCG14beBz4Q+TBRm+uHLm8OaRRVyDkkVfea-VxOtZUgD8bDR5npDl8U-YsBeFV4NL88spRDLe$LM2K8lB+56+XNkWnJKL5fInDy2YFH1cInOYIY3Kl6RE3$ETf9+LVDxPSD5pWDeYCS6jpec49CkXDXRUlekB2BffI9fphTnxKGaDrS6hcbeHaEZe2K0RD4odX97Om5DgT06O9l8azLTSzeV50Q5Glf7aEH8bgzB2bgYR5A5Yz0x9uW6fsl51u4fFxb0mDUUDwe45wupG$wVpZeDEpkaSUem9kK5g$p95YQ3TUblk4gfQ5HN+buK50O288aIn1yhVKRsEy2+WhoO2BncL5MQSKHG9H+G8$A582T7bdgfy94HCy2ZMTmC4n6kk-JcIKglq-K-95+DZ2CRYTWQIK9VQSOhaJ155JRQDx5Q1Dw54RPDquVy$HQSG$HqDTBmF670xVAe0UaiC9IOSKH4m9qFLyI4Ze73JJu7rUOn73ymby9hLRNSBQJnOmVTLU5FlBSmgiPNwkQPfnE4Tx4rfqxKQcKDiqm7xKR5XiPebQYDD9eXPPGl5FDKRuRJ45YilxiFZZrW8OCiIBCVt9IeU5tA$CDbuT5KDPR-2DRWkOyc-xFC37cRMQP7y4D1EMe5QgfbkyN2e5esSFXnG7m53OyScRK-KZHM6GrYzplKkDi8AKIU7HWzALOQboA2y9TkX5Vou5aw9cdk0GC050T5nkN4l5ZPGGXRdJuWwMbfoeZhoNr9qkTp6ZNPXVa4b2MOByPpPbX$EFKUHZf50y4ODElkECPRYOMk8VewcOReC$Vki5czud0Hz40NksSjhVDPH0nn5NXOcR1M005$zf08bytDCKrOoDSXK4rbIfl2dlOyY82Dhee5Wa+w8N9IDO5WMsbDRhV5CWe0gwW$99$udlo5SekQNG5nNo48880as2gj$9kn5tEChC6+Ky9D1o0jEj+2qCGuVHACtajCERyX8hnSO998tIy4+dtouyfmtjz+sNsEJ6BE9R0zFs$bDLkCe3w4bxIFZh+U5SUuCs5lUyKhXyG8A0YlOlL8eoLqoRBJUByEVHzdm8xVkyCkCFK+1yMuk6Moyb6ynRZ9n3+JWf1zJKXdXVAKaTGG4BAUlQg4bJHDkj83jdVo1GOWnglXU8n5X779hwaZh2a40ARXZVy-noAaDg-MfNJeYC0jzxmk1jWVCMb6+2N8uswZKlMg9$t4+yR8TyFJ45K35UOmSNVuPHSU-YqYAqB9eC7Qd-6ckKXIW1V04gnGP$s4Dg8Ca1cOEMGoEjWUbdG0kihBC$c4UkjM$1z0ASpROqymo0P2w5lrO$uw6zolHhci5XgZ74k8In2x3ZOwuXYzzU9kZoHBXp-Zpt-$NY4QR21+s6gh+Nzj9t7s-ZZOAXEJeytR7hgjnR-4Uj81loclkyAAXkGDSiOhXjG5KHSsckawaXVSztP4Rt88LHFsJs5yYLc4VXnEZ9s82Oh31lw0AOuFKZFi7ZE6RXnpBtWsD$BVhRYO-ByR+RwlHz2DUeZSzVwmCTLS0eRNp+pr2DljORWwH-KMeX5unqy2UDbL5hIlC5Jb+UdkZxkOyOGOiLgQ67YUsY6WgWQB7cAp2Ojg5RXQQJaN6CX0mOTH62CBnsAmxddS80z5hQyf3D2ygjpcHUDmsdQoUXHymHujPHxZk7QV68SA8DwcNMc0TCWsAKbIFCGoem2HQ+eZKM9ylR9CrJR$h60$05KY9rK47FWbhn5ZOkt$$w5lT2me94EXZQnh4OK$BRpBCCUSNR-AUj0$aPYz2OnPd3fsH1gjR2Td27hZLgKYXPX$5DZ4bM4duKqOLsHDc15t+V$ASX5xzschpYqMf8xb$F3woajB6sD6hnlUASjL1wNXAUCopSy0knzHDDGFpZymgwSwGLnX1ode8JnuMAeepUc8DrR3VMARX9DkNHZqw9fRnZzpdUdXXIbe3kw1xhnqM7x3VpdEMyd$oN8DqVrOdOnaSlrUe6+CRRHnZ9w5OSPAJUEIErVfF6k-UXFY5Bu2ILUB8Hg-I2m1K6TiRQuCYnZQQKbUaHt9s22N8aN9YQb5bm1rJg4iDO5sIQmMdewQ4GmDhYyec4gu$mYsKrkzdAIB5FQ-G3sTzUE7+gHf8DDz-gnEKeQPVu1bMBynZUeXpVNSt$g8w2d6ZlbJM0UStY6Q10K2h-cwgb0M5UMJ3xt48PaIIZhKKICwrP+4KnxKYohCQZ811P1eM83h0SyV1OR7qwNSyE5osgDZdloF5BtfkykphVQkc5DjgZ7-KqbGeBc7IjsGhK314JqFCmlMAKI9DmEaZK$JSzF-3N118SjHOlJSFaI8YT3sEACaXVSuQLBBZVUd1L0qLELyu1Fmmubzi-3QyTNRyZ$he7MnCDtmU+2KkPKRGR4CWLk7aS1h9eDA1TdxxcMrU-fG4yxF-O91ArjfdVC3fWUuGGyV5wkG-GcFj9JrUECwk7jr5ocVh5hrKVMUdOxBQmyn-YUduGd2AX5UG4CY5890de81j1QXM5eVMg27ebeJQxQsRXUzMT90Q9RS0KAmMn6sy+y288en6X2P4TDdctM8fnQTDWezxS8w6$4kO6RexO97C75BIkZj-ryj9chfh7O+5Qyk4wJo0rJyel5Vc6DiC898-qGs--hUyUCCCWGe8BRkjfdxQARCHcc0Rr-LROR4dy4KA8x-HrDd1Ge-8SMRHB6XjM-jMsGh9B-24k0cIfUD8YcG-HKsZPkXnG-29e1T5h8pdVxVGLxAIkjqZ-0tU4IfhWjl4rG19GJOfn-+U6xaJBHsAu-yReysHERyfl54HO9Ud$U4K6$4-u-L$WAONXhakdDVGT5$5nNM1U$Md$QrKBHTHWZiH95rO2n14GQ8hF9+$nJVHT0dube3Q28qOThWeZAkNifJJacwcq57xP-6ZBxR1byy6w48yGeGxsd2xt8G9w52MVGAMK-fU4nSyFNkj5ehCpIIRIMS5QMW-okhjpJZNrD$M0lAQ9Zs254VCpxA042ZJ9MG9ScnApdyegCfUey1RkxA8e-rli1BO69BMpd2j$Dd5mNbx$CClcAS8X5BHD898nAn-2xrGteo5UCxGWAn--hBkS8sGlN-hz1f9lN$Ut-jfCgyANUMfGCKRTkkRccmI+8Dgngl5Y5XfbN5JG9l$8C6neyWOiM9CWOPOTG7M0gp8R$QCD9KceMYdnnQ2T5o5WerUzOeyChIu-0NRTKtZ0dGQMxT5IxokKA8h8lTlfU6neDDRf9e-qOJuJ8$50IgC96nCrOseUAetX5i$l-V5bde9m2sGs-$UWOoeV5xdwNK6ogYlGA0tuNCyZt4gGQmDT5S5xtVAqyKHCgdjV2tQD968$AbegA998-rG9GCtK5R2jC3frtQjpH81cxtlk00Eo0G-hhT5h-wy5eQOf9QA8td12D+ISx60BtUZhl4l$DPe-868SE6y5dJHjdO$A1SMRIP-Ztb-FQe4w1meKAjykCrtkgDXdRf9nNuRU9bM$CMlYOD9$5Tx2ZYDyRSRRQCXj$I-nRDXF9b5Quwko$CXzxoxVX68m$WcX1stuIVtMfLtGI4EXngG$CXj8hN6+CakXnIdBOtHV$+c36G6jE8XL-GXJN-1dd3fahwIxN5efs35i5NCHgj1plOfnI06aGuluH-cw6kxB8k0i$hs4eV2kH568HHcV2GENy956nF5mG7seRJh75oxfseIXUcNS5fEdlXUlx7JMGG1sxS2UfSsyRi$ZtA449d2edlNYMC6Qt61YRj14tpdnQ19F0m5z0I-+8UImDoeheEC+-wd$yrhaxDDGHqt2IW0Nsa6eyOMBZbIUf+j7YrdV4T05RisH1HD3QR5f-2OQsO9CxGlh4ECHNqHG9sf-82ZsHAUpdmsdZLgkZHKg9CDT5zQjCZRQZccKAD+PZ6nheQ2-Q28DNfU$D+5ZXnIUE9ZRc0D8fahScctnJQMDlgJx5IYt8IjllSfie$DGUy8$5B$AZKAIDSDw5WXy8oYHyK8wM4DqXulrDFxjg6Yj1Gs1NCX$Urt9QQYWlmXFGhk6D1lSsV2nxocdYSVf$h65ArVdcR1tZtyi$y6eC5A9YrEg+89dcnNnuHxNCcV8h6eBdfY-UaMcgn8T$XU4ngDZhaX8Ou2XUlVKsolT0aY$QZGw1CjK8uVC8-DT08CO8oA7ZoJl5gxMGPsBJZ+8$aFBHJtRFsOC9u1i-uEDgY+V28hJydcrXlX8h0YdNsJG-$AUC$CyEYVeNkxDRGd35kC6e4er+$DYkM+T+XngdajXnXl+28f$gkXpd$DQ$pXF$ZGr5GNj1lE-1pduenQuQl59HXtxxutuNVC8NaJaho2We6+qOzkqcXE4+sdoh-yalLRi$KA51T2CM-$$DdZ9Q+jsHyVcJIV8g-lOXIMaM6DcYS57Qge-J8tGc-Xggrj04nfkloF7FWehYuZP2fhixHCfhzFbUtYakNGe$sOy6ygs-+-QfDJdt9-OYFDa6dJ$08AiF4DBnTnBlOluyj9ORL56ZL276$C3fc$jdCxy$$H7gDRqGlFTe$$rgYZyllXDgbM49agjA2Zp3VJGdaMS-Hy-+uteyLLjGyem25Vg+FSPk4n4LtXG-8ljC+Oe8Ts6nd2A1C9x8p2+jie41A8rx8ftN+jS$r2q-q$IlsGbFGHECIy8p$cL51HoYaM2ES5cVCht8ehIcZlI8OICXj-Glnl8fTDTDieyddcs-pLRGIO6GQCCzUJ3JDXG9slc9pd-hW+UC8y76rUlNnQg92U2KMpN395nLzkP-2p8CQ2rG5yLH4Dte2QNABHzpoej99hVF9lP48frtrNCeeEuSJVdFsO$URLFVKt3V$VzVoVy1tLlDNCgCUdssPIutnpfOVRXYK+PAwxBZzjd-WZPZxtYtkIes6IQ20fKAUIyIl4EM-heVzjlNRtVEt8ualCtCHsxgPIJ8o5flpX$UF9R+CXX8hfV5s60ebH83ZGdcsH2OCysHxL2p$t$DCdHJZjWtI$rGs-WL+jZHWkHHSCE2otSR+5aRe9IZHOhC0cDfDYM85Mwp0tBgNL+dJuTkoaLdTC9ICXDHb9E3C8q5NHCFCyoLfUixFXlX4YLHMGD8y868ZpenUNKsnMqGdNZMRS6p+ajCFa0auEMVnC0LVCisfXWV$V9FZ6Q6fXbs+jPLqLsGhoKAm$HypXUI2KDoSMECOSY5y3U2Ng3gtgaXVYBo3LGQqopXahYStF5YZjy2G2ozZj04p-m8NCKAahgLLQKxAwX1JwKFlQZsYLCISs+hTDKAQhO1U1uCnayYakd8hjLt3zI-qGmMgh8RRgwVH-LRy6reWe7RnpYDqkagMJlgZLfUtzrD9YYJrsmL0tt$NLGpXL7VtgLErDtQt8ZgTQojw$9awZyZAaDs8I3tF94J$1at0tGseSRV37TRp-LNw3X-lMufsGr3NhV6uCgpVCBFUREVuC0DAJpd1gL5w-isjJG9bZ+Im875dJqkVSBkweBYJQD9gFA319Qp-7WeP1uL3lgL3oyFXz75wCqtF7p1ee6DT0U9KV5j5D1Fu7HyrH6zasSxHCLaASJSWcxS3fndbyTMUtGJ+C1eVC5Vs-rSHyxLzS-rNh5ahdBVU7Q6uFfbELY2KEaF8h9FnCUt+I-0Dy1Z1458-NuA53CFqsS5w1t71H6n4J58JllhS1+3Uw3aDXttnHisExaZx7UrUdbZsCs-jyl50472UeNp5Hzytgpg5llQbynpd1xW02mEUtrK-QBDGM+gU9lNao3pwOHrVrIbAflYXU6aPN7cVFPpazMYHsKhkhjzjp41ERcbtpsdULLgGFJIA1UdmVO7a3YXbA+O99KxUC-3Pz4DayPhjG-D+EFAt8Rs1dKocan+BnMzVD+CwBFlsO-ga6$Ewx1XuAnuiwfX$IlIKwJ3abZXOgVEmyI+c1f13Z-7naF9ctZC-xtWuYy8G-6aey5wEyG8Js2ZgGgeqG8oYXQLme1UNLCL9h0YJdUsCXCY1WDomAej5jRzZRieH24D5yN0KsGpksXjrtEC5pVcyI58M6Ewn$Iu3YfhERDopXYF0DDpK8qptdkCe-FrZ7x$-DLr33Oyoc-hiweAa1hXXzFHLPA4reErRTSUntMHVUNLbd8CVSjVGhYoI97bqbP2tTXWsT3rnoj9VwWeoOLLQCKs19a0M08qY-AL0P4DS+QCRHPdWgnXVpxxnugL1PNItECMyy8zHZIHf9Ud$-Pk4QI60wDnM6eUU9C3O-bXrKd5oW+YxoE+dDKAit2c1g1CZgrIOJ3f4nCDQCSG58-3obl7MWTAIW98+YU4HWN1Jj7qV5BH9jq8OpUp-8yp99NrUYWemMeEsre4djYEot7tZjows-rtRdt82yE8bz6zIj0zn7u17z8fD191ZjAX9T+8FR8gi$lVWmmmSq95jVeehwPWWxqWTUXXkjcBEH4nBH8ikZigjRyN$DmU5qzoU3BVlVZtCdUqGyfP+ULWQaQCz$KHgYfUUFW0FR2g0Dhmme$ZUnnN62NP3HGu4D100Nc59V6KlNk95GkPgk2DnEMyunK0C9l$kR079eb6Q8r-eO-rpRkHjD$9GEwk$c2e9MPOaLLHksCZjpe0Hw$G9J2MbgJcCKk08t0dSZuO+BtK0gBZVmZmhbWASq5h5flZhTckYDGKZ0m2OmQLPAOtDS-P62eTcOlHoFdMPSlqTCbASp55GK5ZupKQhDyO3CkCojVwz$CetXRVWMQy+z4yhOknGCq9yGp64Nss5AEkrTnobCh97504TUTt59O0GlZjCqKX7OJ5e08OtP2kls5QU45JnYX9eXS8gSHS060DgDVkyHguCRC2DcBho0Ubn9DncD12TkVXNL$uKs9IAVb02aCCUH-rY928TR9UDMRHX9LO$Byk+SRnbyUqk6T9aq$ACpD4kG69eb$gcRWcB5zRWRS0ep17DqKRnXhRCRNHXDc7I6o-4b3leXDWLXGBHostEHFEQKI9bdha+DeXD+RcRbDZG8VHuCBzsQdLoZk3HaDcuzE5JkYu6H-Dp9-60UQESDes0m1J8lgy8HM9KxtNbcRxkJeiCbeqKkNXk5e3h2s97gosQy4m$DH-eKdocHHQQXCH8C1054lZum$SOpYQW4ES$kyKG$BDeesopNQ9k0$B65KSV1m$sDU$49akY3ONNiO0n-cODVN$dO8HNCoOZrd89HOyN4H08GO0W5UpCCd$QyQtkyoASL9BKsZK9RpBtbL5WfzGZ8Bo4Q1zHl$bQUuQtH$jDplR5WXWdfpRQfNeR-e3pbWC2p8eFnc7U2I4I1ps0L0V9dqTCVECs0CcKDq9SZ9cj8HD$HT8uY95pZ8CsRcG76LKGHblga$rDU6ZQR1pTOeNkK+676dAuTl6HNEQCycbta1OsHS0QDd5SzXH4tHdKA1bpsab$V1HxKqdyBUoXo3eDRyB2b3kWOf5ZN29dK9uT8lk5nDjCm4V89jbun72NeWn$6VUX+fO5lBUGYK6NZHHGn0TmSIGVRXLkANIj28tKQgzb0LZ79Jcze57QapnDinwFbQ8u4F4FN0uQKO+SPXFpyDQuIecGCQpXO5uX-KcBc5a4qskDueitJke9RE4T9bkInD-WfpDV4HlQlFIyV856RA5a6I$0E5S7CCCl9kWCXSz1hmRmk0uSIklAdQLnulmepDGCASZJRFNNudtXHlwpCCQn-Y7IXcUEDtHDDouOD5DkkSdRMNjTXzctb0u$Sa5A-SoypOW4E9uGak29SKS$1RtAlt6XQyjs647s$550i5bgOOS4UD5$NBycKChU1zF-m2oWd7+FpS90D7R2gnNDEDZF1McnHDIaPLadRPCqg5CGm1To6NOx3DXLwMzAKl$Ml2Jk7ySecSqEmCjC-YTz5FwuFi5HdKakSS2eI$q$JRZCMCzR5kYykwkHkCu914kc$5YDI4-K55RU5ez0ley2SU376NhDDoZow$U9bZ2R$$H95kUwLSy3GREkB58XERbkL4me7JbleRzp0xCAE94SDbjSK1rr$28+onoKcdOOJoHSK9I5bFQAxomKR8Sh75CE5xCwUVqp8SusiR49MmgZ+GXrRcfr55Zm$IFhzH9gqK6K2dpejHHwh0BmrF6VnOWsT$SsU0yak4S44kD+2LGZQbZ0mF5lsCVZtUSlz4pTGW028UfXXn7$pxs9$dkDXEp4pjN81SjDZstuc9TgVs$sF6IRO9CzhLKNLVwPR5RD3$Y8FjU$WXQDHnDbK12kERGz9LVN29sC5X5Qzka4Hxu3DTIo-WID8xYG10yzl$5G1Ge2KzUSUzIuo5DnAboelKRjRnunf+9ieBCUnSF4uI8f2k99bMH45Y$nK2KkhIdOYRT$SCIgFZSnRT5PCXUOXS3lI4Z5GeaYGUSMlwCIDBCe6an54$VWNL-K4s7r9N8FWSzwtJbUdVD5XdsDo90CFtqC52HdDguS0D1GtbLsw$YC666l45Q30wpT5w5IyJr9tH$1YUG2FC9uy8OdR5Crr8aCEXIStnKENAQARWyxX-1qk0ybglNlpd+RruQ2dQlWTxeN1ojR23DGeRSdE1qnDjLA-AoO4+4eEa23JmazwsSg0naNBJt05z4x1JE$Cmz0Q8rWFp39L2P4Rs4wWIUn0b0TXdL14zquYEp0DXTaPLdMRnER21ek752SJ1gcUCQCmED2pb1O8ZCaJ2mI-pJa3ZLf6rdYOP0Xa3Zt89SQQUFCT1V5ufN95Ekj5iszErcix$9O$SQaM5eOWy5NdhHiaL-NunR7w+Y4L19XefxRzxYq0XaM9hX9o5Ek8S$NPt4CbfqCqp0X10EYxzJLEkzDAEPteCx-L5FKOs3mE3O6QbDcARzDOEwOwBIqTlrrtynTGKrknb-SWKotxm2DkCPL0CyOOZYzJY$oizcyGUFOf$Y7Q5l2y+foc2$LzC7bJautuCtjXnzn8CLhG49R$$CqXzisNXx5Wx-KFFbcNpXW2qUOT5qDuyV$dcMI8abeBIy75CO0H$uh3HFeWXYeQE5Wb28Ro8EpOWdOkgDB-yDsnO0--kwGa31jXyL$tSuFcDtuBEi0tlUkFUM4cOEueyMzyIQOAyKXBDmlzoyAQJRIuC2HGLNbLaKyxu+UeeIqoKOPKgGUHK$26JBob9wKkfsVCxdCZJy5RR2dpc2dCZVyFXNYLdXrSTdZKxssGUN$Cqe926Qsb2H1Oo99y-nMsS0DkZfNC1woXsQ1agmGcrswyBKe14ChqTB0ARysR24CQ8RcS-$m9R2jJy24rz+NQXa1FYROWq0XaD$$59g2zWWpMV9Ci1PyHwznMChenY1fw5ERnRNRktW2H1TOgeYH$MNUitXLLyRd6S1XFDmzg292Ca5CfsGQBXa4uYIUjXkyKsmOb7b4ROYLcAkczsIrJaNu4MlTCEOCerDdYoiGIRWbcp35fnDcCj8tXuYiSfYSsKmQ3XcBCHeEo1aj$lXx5f$oH8hqJb2gGDkLT989HYBfluHfD0DBiSkRGoKYqSb96cpQgywARx1zYeeyX$oTVY$1mXh6c+muq4M9VwYs9zGU8+j0bKaYzGNEnZpLQ8SDeCDmSGO4wkxy8-9ZqKy8nNn$wEt6cNMKK5p8I$h5Wcn+zroL8715E0ulVBDQS0Ea6+b1dKSqVwsQwKEU23VZMgY9gaj5PC2FL6$XB2Df+MZHFmEbwMfhEYwctTIMwoWswyELZWFmhgV0VaQ+$hFJ$i$bYSnNszZ6LzkqzMphkscjnLlkqbMt5psUhh-MPSBMaayKphjekqyu$e4os5hgYMUdmsQh4+5jcdGiW0DbhI51yoN8Znqs8yd+VfpL7ZJxYQwBEK297HxcmWhRPEgjgYmwYBMAh9X3jgY$5gWYVh9XfjhS75hOMeZm14OfSDCJbb9Z6Xwj+tYCqzMuoXYFhCHMZ4VYshd+gOh$8hnnMpe-QzZdHBAhnP1Go+q8ID0AnuBghIX0jn+LeJZEfyL1C4i2cGVF8Uyp+iQenl9wbYyhtXJ+lpm9gnPcZsXYyspZnnqB3KsQb2gYLnF6Yp4sYR4JoSJqK4UtUVDdA62RhGrMyGE6d+zKd00w+huso4AgLHgfYCZfVT43RK$gfYeo4VT4gSKEn4MnZqVtdUSUEgO8eZpYUUjazKQ1Mw4m+588o7jWEk$70VlU1+-8gPYEokFsDY+8AnjYaa7VQMEtz-c1A8NFsx6gYmsqtHQZts91rLLshVYWo$sydA+zYcgHzo6+SM6wL6nq8WySsQMVp8hnj6sZFs7UPcBchnSwyxFBUE4I+qA8FZosjZ3oMfoKnA5qNxhNDTNQdXPpsF-d70DU0kB8EiGa5GH-OQc53lLFmI8zBc5P5q5Q$s9LFZKDC5tChCze8gmQqfnT43cGe7OqcR-4ORpxLrb8DyFQdXeOO3Pk9mn924rcPghMHV73wHQNwCCzAskBlcDW3cxYbypGSukMU4R9555-0NPc$NuUCICbcXn$L5WC+cp3FZSX5qC8kj0b$kfQ6DZDGe1jUe5L4-OGrSkC0SGSl$a855OYKyCbCOkC0kzemKTEO0SaswDKBYe0+5KCzS+Nh9XuokT8HYz7k-uZBmM9YPuR05-e75Xan5589Dlf55knHLGJWCI6BZntHr5w5SOG7c2XC518uJrnlocNAZrFLIJ1PzDVkR2jODBI6fXwn5S2BI1P8CCSAwRC3BIwMS5RFRJCFLRJwWDRW$C6RGLI58fVCXTSD5JLc4QK9tXMOKrn58-wB27gi90RHu6USGTbqK58z35bAe9ktsAntHS555MsgRgSgLo5KekOwPS+rM5z-CKoCOc4Fr5YY6Z6GdnKRG5A3W5yOkD8WObzQRACH8VZb$$Puq-E4yOTt5iQRD56QKX8bQ57P6Dc9d2JngwOVbsOgjODUjYb9Bl-9QnS2SGIAcN6xRACNcYm7EP$ODXwDJIED5zhlPAHwhHeUeVZRJSTrClBOZ6yWhzAn503e0-5XaJeSeR95QkU5VC584HCdt-QRhkEQgktC98zI4Zt-IgXD$eUgEK0-$o45ij$n$CYCQC2rPu5zlm5OmTZXnI-wynNRi5TZkdbhwLnjGpC$d55SkGxW5sRbIAWcjKhICrHpJN6mrfLHIgDX6kNP8SJ0H9Z5OOyUzAH8KkCBNo255OxdHn55"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e733bfe5e0b06-OSL\r\ncf-chl-out-s: B38bdHD1zuU3xwtY+NZqNQ==$ftgwsMfevJE73nzL+1DF6Q==\r\nset-cookie: cf_clearance=SiAGIfccprR1gcbzzsRVpANk4I46oMm3Nnlrtp.WKmg-1769581920-1.2.1.1-Ipxltdey9TWroNfk5W.ihqbCQGt_K0do3NrlpFyVL1vP3B.tUarZ_2JUhrjmrsRNf_cYA95zdQUjz0CwziJxXXQQKnPghAd4.4cp8U6H6MM1.lmU4woMHU.2dQnC5U.xtc5CcEm96n1simwvSwCggHKOtwRVqunLDEt6CmjlPJ3pS40AksaZgEdA8vrMfmz40FOLHDbU2aVqj6Qm9huvgaboR3ZFqLau.oKsh06KP08; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=wagayu.xyz; Expires=Thu, 28 Jan 2027 06:32:00 GMT\r\ntiming-allow-origin: https://wagayu.xyz\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Sx%2FkpEdS3O6%2FkKYZZCngu103fSg40UPb4jSJ2jeOovefBwsFBMY7aHUr%2FYTWfTlxM6CPu6qVSNnBKi7xw64%2BkwvHNxdCh8cMRxzPOfz777ZlAcuj3lIZFHHgnYek\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1288\u0026min_rtt=461\u0026rtt_var=856\u0026sent=272\u0026recv=84\u0026lost=0\u0026retrans=0\u0026sent_bytes=262449\u0026recv_bytes=35010\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=797\u0026inflight_dur=97\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.18379249875146444:1769581583:pFaczp6H9-REbzhOLca6B3FiQIvBZ-8q_Z7wMMEZ1xM/9c4e733a5e470b06","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wagayu.xyz/index_2.html","date":"2026-01-28T06:32:00.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.18379249875146444:1769581583:pFaczp6H9-REbzhOLca6B3FiQIvBZ-8q_Z7wMMEZ1xM/9c4e733a5e470b06 HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12150\r\nOrigin: https://wagayu.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wagayu.xyz/index_2.html\r\nCookie: cf_clearance=SiAGIfccprR1gcbzzsRVpANk4I46oMm3Nnlrtp.WKmg-1769581920-1.2.1.1-Ipxltdey9TWroNfk5W.ihqbCQGt_K0do3NrlpFyVL1vP3B.tUarZ_2JUhrjmrsRNf_cYA95zdQUjz0CwziJxXXQQKnPghAd4.4cp8U6H6MM1.lmU4woMHU.2dQnC5U.xtc5CcEm96n1simwvSwCggHKOtwRVqunLDEt6CmjlPJ3pS40AksaZgEdA8vrMfmz40FOLHDbU2aVqj6Qm9huvgaboR3ZFqLau.oKsh06KP08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12150,"data":"Vu9Co4R2OGScRcRI5w5SdnCz5RCSDCRc5o5l1H5kG5p5-eX2N9hOy5r5ZNben52Roy5SGyR5GuRzm5QGH94mHu85WC$n85lsXSKn578opM52aRkJ9Th+74U5LzrwzE13t95l2B1Vk9x8Yl9Z5C95SBVX9PkDCbsRDDsmkb35u9RV29g9+Vpuf8z0f8G5QBXRm9SO+C5YQHEa5cGeqewSLTe5MNn5oeRlyNc5t$7MlgRIPqjU9tlyFhU5n995MDn5S+b0NtBYJLK5IWZ+dwng9C5XQ0ce8$55BBNnT$R+2D5PT4sNGrEYfD95lDnKSuVbGjpAgauRb85XkOIlAnKe5RH-4c$oCdXXQXoQk5IUh5b6fLk5O9ecXr8W$tk5YYNRGltA45NjY$j6zNHVlTDQ1GE-lH1yhGVlLPedO-u95Cs8hqf-C5HM04us04Wu2b8J0GnWG+WcasGiEO683Tk52BX955aXy34yD0UU-zwD5M-P96d1jMkCtOe+2s6ZEE8dW6iXjsscps2CR46Uy$M4FWVYqJ9QD3cp7VUHlV2tHlwN1lHZFLQmCAKlJmoX9acbFtPxVlH5+tsclEnQfFgeFpL-Fhk36UMJcbdwSIcpzIpC2li9l6Jr+cD3FKVR-YU8TbksI+k2te-F6R60b6MqSujhhzIt-TQ-CpPTnKTurpiAsXqbSu-0gmu90s8cnSwx9SDXM5Xzn-8KQCI4r5-ZnhknhjDtpZiuBFRurjpQ$n3kctaKwh9XQCGLr9p62K3G4rwS4xxNkRDlSh55rcNu4nhe8H6ODGa28nlrKlCbnqqDK5ARuBCxO-dOnQ-xp4zK34IQKQtu0f84hR93$Co8E4OSDTkPTCaOf-KFUQIK9CA908C6yeCHfODrzH9krDf90T50X2uD6y9KRoI9n44l0-rUoeKOf-9Gyqk4l0CSGf98R9cBN-K0$C5Gma4X9e9I$s-UnHESS4In5NCOnuYpkOgNR-nm58IKW$Nz8a86bX4hOmCG14beBz4Q+TBRm+uHLm8OaRRVyDkkVfea-VxOtZUgD8bDR5npDl8U-YsBeFV4NL88spRDLe$LM2K8lB+56+XNkWnJKL5fInDy2YFH1cInOYIY3Kl6RE3$ETf9+LVDxPSD5pWDeYCS6jpec49CkXDXRUlekB2BffI9fphTnxKGaDrS6hcbeHaEZe2K0RD4odX97Om5DgT06O9l8azLTSzeV50Q5Glf7aEH8bgzB2bgYR5A5Yz0x9uW6fsl51u4fFxb0mDUUDwe45wupG$wVpZeDEpkaSUem9kK5g$p95YQ3TUblk4gfQ5HN+buK50O288aIn1yhVKRsEy2+WhoO2BncL5MQSKHG9H+G8$A582T7bdgfy94HCy2ZMTmC4n6kk-JcIKglq-K-95+DZ2CRYTWQIK9VQSOhaJ155JRQDx5Q1Dw54RPDquVy$HQSG$HqDTBmF670xVAe0UaiC9IOSKH4m9qFLyI4Ze73JJu7rUOn73ymby9hLRNSBQJnOmVTLU5FlBSmgiPNwkQPfnE4Tx4rfqxKQcKDiqm7xKR5XiPebQYDD9eXPPGl5FDKRuRJ45YilxiFZZrW8OCiIBCVt9IeU5tA$CDbuT5KDPR-2DRWkOyc-xFC37cRMQP7y4D1EMe5QgfbkyN2e5esSFXnG7m53OyScRK-KZHM6GrYzplKkDi8AKIU7HWzALOQboA2y9TkX5Vou5aw9cdk0GC050T5nkN4l5ZPGGXRdJuWwMbfoeZhoNr9qkTp6ZNPXVa4b2MOByPpPbX$EFKUHZf50y4ODElkECPRYOMk8VewcOReC$Vki5czud0Hz40NksSjhVDPH0nn5NXOcR1M005$zf08bytDCKrOoDSXK4rbIfl2dlOyY82Dhee5Wa+w8N9IDO5WMsbDRhV5CWe0gwW$99$udlo5SekQNG5nNo48880as2gj$9kn5tEChC6+Ky9D1o0jEj+2qCGuVHACtajCERyX8hnSO998tIy4+dtouyfmtjz+sNsEJ6BE9R0zFs$bDLkCe3w4bxIFZh+U5SUuCs5lUyKhXyG8A0YlOlL8eoLqoRBJUByEVHzdm8xVkyCkCFK+1yMuk6Moyb6ynRZ9n3+JWf1zJKXdXVAKaTGG4BAUlQg4bJHDkj83jdVo1GOWnglXU8n5X779hwaZh2a40ARXZVy-noAaDg-MfNJeYC0jzxmk1jWVCMb6+2N8uswZKlMg9$t4+yR8TyFJ45K35UOmSNVuPHSU-YqYAqB9eC7Qd-6ckKXIW1V04gnGP$s4Dg8Ca1cOEMGoEjWUbdG0kihBC$c4UkjM$1z0ASpROqymo0P2w5lrO$uw6zolHhci5XgZ74k8In2x3ZOwuXYzzU9kZoHBXp-Zpt-$NY4QR21+s6gh+Nzj9t7s-ZZOAXEJeytR7hgjnR-4Uj81loclkyAAXkGDSiOhXjG5KHSsckawaXVSztP4Rt88LHFsJs5yYLc4VXnEZ9s82Oh31lw0AOuFKZFi7ZE6RXnpBtWsD$BVhRYO-ByR+RwlHz2DUeZSzVwmCTLS0eRNp+pr2DljORWwH-KMeX5unqy2UDbL5hIlC5Jb+UdkZxkOyOGOiLgQ67YUsY6WgWQB7cAp2Ojg5RXQQJaN6CX0mOTH62CBnsAmxddS80z5hQyf3D2ygjpcHUDmsdQoUXHymHujPHxZk7QV68SA8DwcNMc0TCWsAKbIFCGoem2HQ+eZKM9ylR9CrJR$h60$05KY9rK47FWbhn5ZOkt$$w5lT2me94EXZQnh4OK$BRpBCCUSNR-AUj0$aPYz2OnPd3fsH1gjR2Td27hZLgKYXPX$5DZ4bM4duKqOLsHDc15t+V$ASX5xzschpYqMf8xb$F3woajB6sD6hnlUASjL1wNXAUCopSy0knzHDDGFpZymgwSwGLnX1ode8JnuMAeepUc8DrR3VMARX9DkNHZqw9fRnZzpdUdXXIbe3kw1xhnqM7x3VpdEMyd$oN8DqVrOdOnaSlrUe6+CRRHnZ9w5OSPAJUEIErVfF6k-UXFY5Bu2ILUB8Hg-I2m1K6TiRQuCYnZQQKbUaHt9s22N8aN9YQb5bm1rJg4iDO5sIQmMdewQ4GmDhYyec4gu$mYsKrkzdAIB5FQ-G3sTzUE7+gHf8DDz-gnEKeQPVu1bMBynZUeXpVNSt$g8w2d6ZlbJM0UStY6Q10K2h-cwgb0M5UMJ3xt48PaIIZhKKICwrP+4KnxKYohCQZ811P1eM83h0SyV1OR7qwNSyE5osgDZdloF5BtfkykphVQkc5DjgZ7-KqbGeBc7IjsGhK314JqFCmlMAKI9DmEaZK$JSzF-3N118SjHOlJSFaI8YT3sEACaXVSuQLBBZVUd1L0qLELyu1Fmmubzi-3QyTNRyZ$he7MnCDtmU+2KkPKRGR4CWLk7aS1h9eDA1TdxxcMrU-fG4yxF-O91ArjfdVC3fWUuGGyV5wkG-GcFj9JrUECwk7jr5ocVh5hrKVMUdOxBQmyn-YUduGd2AX5UG4CY5890de81j1QXM5eVMg27ebeJQxQsRXUzMT90Q9RS0KAmMn6sy+y288en6X2P4TDdctM8fnQTDWezxS8w6$4kO6RexO97C75BIkZj-ryj9chfh7O+5Qyk4wJo0rJyel5Vc6DiC898-qGs--hUyUCCCWGe8BRkjfdxQARCHcc0Rr-LROR4dy4KA8x-HrDd1Ge-8SMRHB6XjM-jMsGh9B-24k0cIfUD8YcG-HKsZPkXnG-29e1T5h8pdVxVGLxAIkjqZ-0tU4IfhWjl4rG19GJOfn-+U6xaJBHsAu-yReysHERyfl54HO9Ud$U4K6$4-u-L$WAONXhakdDVGT5$5nNM1U$Md$QrKBHTHWZiH95rO2n14GQ8hF9+$nJVHT0dube3Q28qOThWeZAkNifJJacwcq57xP-6ZBxR1byy6w48yGeGxsd2xt8G9w52MVGAMK-fU4nSyFNkj5ehCpIIRIMS5QMW-okhjpJZNrD$M0lAQ9Zs254VCpxA042ZJ9MG9ScnApdyegCfUey1RkxA8e-rli1BO69BMpd2j$Dd5mNbx$CClcAS8X5BHD898nAn-2xrGteo5UCxGWAn--hBkS8sGlN-hz1f9lN$Ut-jfCgyANUMfGCKRTkkRccmI+8Dgngl5Y5XfbN5JG9l$8C6neyWOiM9CWOPOTG7M0gp8R$QCD9KceMYdnnQ2T5o5WerUzOeyChIu-0NRTKtZ0dGQMxT5IxokKA8h8lTlfU6neDDRf9e-qOJuJ8$50IgC96nCrOseUAetX5i$l-V5bde9m2sGs-$UWOoeV5xdwNK6ogYlGA0tuNCyZt4gGQmDT5S5xtVAqyKHCgdjV2tQD968$AbegA998-rG9GCtK5R2jC3frtQjpH81cxtlk00Eo0G-hhT5h-wy5eQOf9QA8td12D+ISx60BtUZhl4l$DPe-868SE6y5dJHjdO$A1SMRIP-Ztb-FQe4w1meKAjykCrtkgDXdRf9nNuRU9bM$CMlYOD9$5Tx2ZYDyRSRRQCXj$I-nRDXF9b5Quwko$CXzxoxVX68m$WcX1stuIVtMfLtGI4EXngG$CXj8hN6+CakXnIdBOtHV$+c36G6jE8XL-GXJN-1dd3fahwIxN5efs35i5NCHgj1plOfnI06aGuluH-cw6kxB8k0i$hs4eV2kH568HHcV2GENy956nF5mG7seRJh75oxfseIXUcNS5fEdlXUlx7JMGG1sxS2UfSsyRi$ZtA449d2edlNYMC6Qt61YRj14tpdnQ19F0m5z0I-+8UImDoeheEC+-wd$yrhaxDDGHqt2IW0Nsa6eyOMBZbIUf+j7YrdV4T05RisH1HD3QR5f-2OQsO9CxGlh4ECHNqHG9sf-82ZsHAUpdmsdZLgkZHKg9CDT5zQjCZRQZccKAD+PZ6nheQ2-Q28DNfU$D+5ZXnIUE9ZRc0D8fahScctnJQMDlgJx5IYt8IjllSfie$DGUy8$5B$AZKAIDSDw5WXy8oYHyK8wM4DqXulrDFxjg6Yj1Gs1NCX$Urt9QQYWlmXFGhk6D1lSsV2nxocdYSVf$h65ArVdcR1tZtyi$y6eC5A9YrEg+89dcnNnuHxNCcV8h6eBdfY-UaMcgn8T$XU4ngDZhaX8Ou2XUlVKsolT0aY$QZGw1CjK8uVC8-DT08CO8oA7ZoJl5gxMGPsBJZ+8$aFBHJtRFsOC9u1i-uEDgY+V28hJydcrXlX8h0YdNsJG-$AUC$CyEYVeNkxDRGd35kC6e4er+$DYkM+T+XngdajXnXl+28f$gkXpd$DQ$pXF$ZGr5GNj1lE-1pduenQuQl59HXtxxutuNVC8NaJaho2We6+qOzkqcXE4+sdoh-yalLRi$KA51T2CM-$$DdZ9Q+jsHyVcJIV8g-lOXIMaM6DcYS57Qge-J8tGc-Xggrj04nfkloF7FWehYuZP2fhixHCfhzFbUtYakNGe$sOy6ygs-+-QfDJdt9-OYFDa6dJ$08AiF4DBnTnBlOluyj9ORL56ZL276$C3fc$jdCxy$$H7gDRqGlFTe$$rgYZyllXDgbM49agjA2Zp3VJGdaMS-Hy-+uteyLLjGyem25Vg+FSPk4n4LtXG-8ljC+Oe8Ts6nd2A1C9x8p2+jie41A8rx8ftN+jS$r2q-q$IlsGbFGHECIy8p$cL51HoYaM2ES5cVCht8ehIcZlI8OICXj-Glnl8fTDTDieyddcs-pLRGIO6GQCCzUJ3JDXG9slc9pd-hW+UC8y76rUlNnQg92U2KMpN395nLzkP-2p8CQ2rG5yLH4Dte2QNABHzpoej99hVF9lP48frtrNCeeEuSJVdFsO$URLFVKt3V$VzVoVy1tLlDNCgCUdssPIutnpfOVRXYK+PAwxBZzjd-WZPZxtYtkIes6IQ20fKAUIyIl4EM-heVzjlNRtVEt8ualCtCHsxgPIJ8o5flpX$UF9R+CXX8hfV5s60ebH83ZGdcsH2OCysHxL2p$t$DCdHJZjWtI$rGs-WL+jZHWkHHSCE2otSR+5aRe9IZHOhC0cDfDYM85Mwp0tBgNL+dJuTkoaLdTC9ICXDHb9E3C8q5NHCFCyoLfUixFXlX4YLHMGD8y868ZpenUNKsnMqGdNZMRS6p+ajCFa0auEMVnC0LVCisfXWV$V9FZ6Q6fXbs+jPLqLsGhoKAm$HypXUI2KDoSMECOSY5y3U2Ng3gtgaXVYBo3LGQqopXahYStF5YZjy2G2ozZj04p-m8NCKAahgLLQKxAwX1JwKFlQZsYLCISs+hTDKAQhO1U1uCnayYakd8hjLt3zI-qGmMgh8RRgwVH-LRy6reWe7RnpYDqkagMJlgZLfUtzrD9YYJrsmL0tt$NLGpXL7VtgLErDtQt8ZgTQojw$9awZyZAaDs8I3tF94J$1at0tGseSRV37TRp-LNw3X-lMufsGr3NhV6uCgpVCBFUREVuC0DAJpd1gL5w-isjJG9bZ+Im875dJqkVSBkweBYJQD9gFA319Qp-7WeP1uL3lgL3oyFXz75wCqtF7p1ee6DT0U9KV5j5D1Fu7HyrH6zasSxHCLaASJSWcxS3fndbyTMUtGJ+C1eVC5Vs-rSHyxLzS-rNh5ahdBVU7Q6uFfbELY2KEaF8h9FnCUt+I-0Dy1Z1458-NuA53CFqsS5w1t71H6n4J58JllhS1+3Uw3aDXttnHisExaZx7UrUdbZsCs-jyl50472UeNp5Hzytgpg5llQbynpd1xW02mEUtrK-QBDGM+gU9lNao3pwOHrVrIbAflYXU6aPN7cVFPpazMYHsKhkhjzjp41ERcbtpsdULLgGFJIA1UdmVO7a3YXbA+O99KxUC-3Pz4DayPhjG-D+EFAt8Rs1dKocan+BnMzVD+CwBFlsO-ga6$Ewx1XuAnuiwfX$IlIKwJ3abZXOgVEmyI+c1f13Z-7naF9ctZC-xtWuYy8G-6aey5wEyG8Js2ZgGgeqG8oYXQLme1UNLCL9h0YJdUsCXCY1WDomAej5jRzZRieH24D5yN0KsGpksXjrtEC5pVcyI58M6Ewn$Iu3YfhERDopXYF0DDpK8qptdkCe-FrZ7x$-DLr33Oyoc-hiweAa1hXXzFHLPA4reErRTSUntMHVUNLbd8CVSjVGhYoI97bqbP2tTXWsT3rnoj9VwWeoOLLQCKs19a0M08qY-AL0P4DS+QCRHPdWgnXVpxxnugL1PNItECMyy8zHZIHf9Ud$-Pk4QI60wDnM6eUU9C3O-bXrKd5oW+YxoE+dDKAit2c1g1CZgrIOJ3f4nCDQCSG58-3obl7MWTAIW98+YU4HWN1Jj7qV5BH9jq8OpUp-8yp99NrUYWemMeEsre4djYEot7tZjows-rtRdt82yE8bz6zIj0zn7u17z8fD191ZjAX9T+8FR8gi$lVWmmmSq95jVeehwPWWxqWTUXXkjcBEH4nBH8ikZigjRyN$DmU5qzoU3BVlVZtCdUqGyfP+ULWQaQCz$KHgYfUUFW0FR2g0Dhmme$ZUnnN62NP3HGu4D100Nc59V6KlNk95GkPgk2DnEMyunK0C9l$kR079eb6Q8r-eO-rpRkHjD$9GEwk$c2e9MPOaLLHksCZjpe0Hw$G9J2MbgJcCKk08t0dSZuO+BtK0gBZVmZmhbWASq5h5flZhTckYDGKZ0m2OmQLPAOtDS-P62eTcOlHoFdMPSlqTCbASp55GK5ZupKQhDyO3CkCojVwz$CetXRVWMQy+z4yhOknGCq9yGp64Nss5AEkrTnobCh97504TUTt59O0GlZjCqKX7OJ5e08OtP2kls5QU45JnYX9eXS8gSHS060DgDVkyHguCRC2DcBho0Ubn9DncD12TkVXNL$uKs9IAVb02aCCUH-rY928TR9UDMRHX9LO$Byk+SRnbyUqk6T9aq$ACpD4kG69eb$gcRWcB5zRWRS0ep17DqKRnXhRCRNHXDc7I6o-4b3leXDWLXGBHostEHFEQKI9bdha+DeXD+RcRbDZG8VHuCBzsQdLoZk3HaDcuzE5JkYu6H-Dp9-60UQESDes0m1J8lgy8HM9KxtNbcRxkJeiCbeqKkNXk5e3h2s97gosQy4m$DH-eKdocHHQQXCH8C1054lZum$SOpYQW4ES$kyKG$BDeesopNQ9k0$B65KSV1m$sDU$49akY3ONNiO0n-cODVN$dO8HNCoOZrd89HOyN4H08GO0W5UpCCd$QyQtkyoASL9BKsZK9RpBtbL5WfzGZ8Bo4Q1zHl$bQUuQtH$jDplR5WXWdfpRQfNeR-e3pbWC2p8eFnc7U2I4I1ps0L0V9dqTCVECs0CcKDq9SZ9cj8HD$HT8uY95pZ8CsRcG76LKGHblga$rDU6ZQR1pTOeNkK+676dAuTl6HNEQCycbta1OsHS0QDd5SzXH4tHdKA1bpsab$V1HxKqdyBUoXo3eDRyB2b3kWOf5ZN29dK9uT8lk5nDjCm4V89jbun72NeWn$6VUX+fO5lBUGYK6NZHHGn0TmSIGVRXLkANIj28tKQgzb0LZ79Jcze57QapnDinwFbQ8u4F4FN0uQKO+SPXFpyDQuIecGCQpXO5uX-KcBc5a4qskDueitJke9RE4T9bkInD-WfpDV4HlQlFIyV856RA5a6I$0E5S7CCCl9kWCXSz1hmRmk0uSIklAdQLnulmepDGCASZJRFNNudtXHlwpCCQn-Y7IXcUEDtHDDouOD5DkkSdRMNjTXzctb0u$Sa5A-SoypOW4E9uGak29SKS$1RtAlt6XQyjs647s$550i5bgOOS4UD5$NBycKChU1zF-m2oWd7+FpS90D7R2gnNDEDZF1McnHDIaPLadRPCqg5CGm1To6NOx3DXLwMzAKl$Ml2Jk7ySecSqEmCjC-YTz5FwuFi5HdKakSS2eI$q$JRZCMCzR5kYykwkHkCu914kc$5YDI4-K55RU5ez0ley2SU376NhDDoZow$U9bZ2R$$H95kUwLSy3GREkB58XERbkL4me7JbleRzp0xCAE94SDbjSK1rr$28+onoKcdOOJoHSK9I5bFQAxomKR8Sh75CE5xCwUVqp8SusiR49MmgZ+GXrRcfr55Zm$IFhzH9gqK6K2dpejHHwh0BmrF6VnOWsT$SsU0yak4S44kD+2LGZQbZ0mF5lsCVZtUSlz4pTGW028UfXXn7$pxs9$dkDXEp4pjN81SjDZstuc9TgVs$sF6IRO9CzhLKNLVwPR5RD3$Y8FjU$WXQDHnDbK12kERGz9LVN29sC5X5Qzka4Hxu3DTIo-WID8xYG10yzl$5G1Ge2KzUSUzIuo5DnAboelKRjRnunf+9ieBCUnSF4uI8f2k99bMH45Y$nK2KkhIdOYRT$SCIgFZSnRT5PCXUOXS3lI4Z5GeaYGUSMlwCIDBCe6an54$VWNL-K4s7r9N8FWSzwtJbUdVD5XdsDo90CFtqC52HdDguS0D1GtbLsw$YC666l45Q30wpT5w5IyJr9tH$1YUG2FC9uy8OdR5Crr8aCEXIStnKENAQARWyxX-1qk0ybglNlpd+RruQ2dQlWTxeN1ojR23DGeRSdE1qnDjLA-AoO4+4eEa23JmazwsSg0naNBJt05z4x1JE$Cmz0Q8rWFp39L2P4Rs4wWIUn0b0TXdL14zquYEp0DXTaPLdMRnER21ek752SJ1gcUCQCmED2pb1O8ZCaJ2mI-pJa3ZLf6rdYOP0Xa3Zt89SQQUFCT1V5ufN95Ekj5iszErcix$9O$SQaM5eOWy5NdhHiaL-NunR7w+Y4L19XefxRzxYq0XaM9hX9o5Ek8S$NPt4CbfqCqp0X10EYxzJLEkzDAEPteCx-L5FKOs3mE3O6QbDcARzDOEwOwBIqTlrrtynTGKrknb-SWKotxm2DkCPL0CyOOZYzJY$oizcyGUFOf$Y7Q5l2y+foc2$LzC7bJautuCtjXnzn8CLhG49R$$CqXzisNXx5Wx-KFFbcNpXW2qUOT5qDuyV$dcMI8abeBIy75CO0H$uh3HFeWXYeQE5Wb28Ro8EpOWdOkgDB-yDsnO0--kwGa31jXyL$tSuFcDtuBEi0tlUkFUM4cOEueyMzyIQOAyKXBDmlzoyAQJRIuC2HGLNbLaKyxu+UeeIqoKOPKgGUHK$26JBob9wKkfsVCxdCZJy5RR2dpc2dCZVyFXNYLdXrSTdZKxssGUN$Cqe926Qsb2H1Oo99y-nMsS0DkZfNC1woXsQ1agmGcrswyBKe14ChqTB0ARysR24CQ8RcS-$m9R2jJy24rz+NQXa1FYROWq0XaD$$59g2zWWpMV9Ci1PyHwznMChenY1fw5ERnRNRktW2H1TOgeYH$MNUitXLLyRd6S1XFDmzg292Ca5CfsGQBXa4uYIUjXkyKsmOb7b4ROYLcAkczsIrJaNu4MlTCEOCerDdYoiGIRWbcp35fnDcCj8tXuYiSfYSsKmQ3XcBCHeEo1aj$lXx5f$oH8hqJb2gGDkLT989HYBfluHfD0DBiSkRGoKYqSb96cpQgywARx1zYeeyX$oTVY$1mXh6c+muq4M9VwYs9zGU8+j0bKaYzGNEnZpLQ8SDeCDmSGO4wkxy8-9ZqKy8nNn$wEt6cNMKK5p8I$h5Wcn+zroL8715E0ulVBDQS0Ea6+b1dKSqVwsQwKEU23VZMgY9gaj5PC2FL6$XB2Df+MZHFmEbwMfhEYwctTIMwoWswyELZWFmhgV0VaQ+$hFJ$i$bYSnNszZ6LzkqzMphkscjnLlkqbMt5psUhh-MPSBMaayKphjekqyu$e4os5hgYMUdmsQh4+5jcdGiW0DbhI51yoN8Znqs8yd+VfpL7ZJxYQwBEK297HxcmWhRPEgjgYmwYBMAh9X3jgY$5gWYVh9XfjhS75hOMeZm14OfSDCJbb9Z6Xwj+tYCqzMuoXYFhCHMZ4VYshd+gOh$8hnnMpe-QzZdHBAhnP1Go+q8ID0AnuBghIX0jn+LeJZEfyL1C4i2cGVF8Uyp+iQenl9wbYyhtXJ+lpm9gnPcZsXYyspZnnqB3KsQb2gYLnF6Yp4sYR4JoSJqK4UtUVDdA62RhGrMyGE6d+zKd00w+huso4AgLHgfYCZfVT43RK$gfYeo4VT4gSKEn4MnZqVtdUSUEgO8eZpYUUjazKQ1Mw4m+588o7jWEk$70VlU1+-8gPYEokFsDY+8AnjYaa7VQMEtz-c1A8NFsx6gYmsqtHQZts91rLLshVYWo$sydA+zYcgHzo6+SM6wL6nq8WySsQMVp8hnj6sZFs7UPcBchnSwyxFBUE4I+qA8FZosjZ3oMfoKnA5qNxhNDTNQdXPpsF-d70DU0kB8EiGa5GH-OQc53lLFmI8zBc5P5q5Q$s9LFZKDC5tChCze8gmQqfnT43cGe7OqcR-4ORpxLrb8DyFQdXeOO3Pk9mn924rcPghMHV73wHQNwCCzAskBlcDW3cxYbypGSukMU4R9555-0NPc$NuUCICbcXn$L5WC+cp3FZSX5qC8kj0b$kfQ6DZDGe1jUe5L4-OGrSkC0SGSl$a855OYKyCbCOkC0kzemKTEO0SaswDKBYe0+5KCzS+Nh9XuokT8HYz7k-uZBmM9YPuR05-e75Xan5589Dlf55knHLGJWCI6BZntHr5w5SOG7c2XC518uJrnlocNAZrFLIJ1PzDVkR2jODBI6fXwn5S2BI1P8CCSAwRC3BIwMS5RFRJCFLRJwWDRW$C6RGLI58fVCXTSD5JLc4QK9tXMOKrn58-wB27gi90RHu6USGTbqK58z35bAe9ktsAntHS555MsgRgSgLo5KekOwPS+rM5z-CKoCOc4Fr5YY6Z6GdnKRG5A3W5yOkD8WObzQRACH8VZb$$Puq-E4yOTt5iQRD56QKX8bQ57P6Dc9d2JngwOVbsOgjODUjYb9Bl-9QnS2SGIAcN6xRACNcYm7EP$ODXwDJIED5zhlPAHwhHeUeVZRJSTrClBOZ6yWhzAn503e0-5XaJeSeR95QkU5VC584HCdt-QRhkEQgktC98zI4Zt-IgXD$eUgEK0-$o45ij$n$CYCQC2rPu5zlm5OmTZXnI-wynNRi5TZkdbhwLnjGpC$d55SkGxW5sRbIAWcjKhICrHpJN6mrfLHIgDX6kNP8SJ0H9z5OOyUzAH8KkCBNo255OxdHn55"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c4e733cae5f0b06-OSL\r\ncf-chl-out-s: UblZxnD7wEY6ObwxmrInbw==$AIriCGjLmdXNMQ8ZVqg4xQ==\r\nset-cookie: cf_clearance=8FMQVKTZV1MPAQBAMrvvLrdyDcYGlU5ReTw6if9NVhw-1769581920-1.2.1.1-b.Iu6StBlBlMrsXqj6Sh6BxfcQIMzfCcyI8FcZrtRNCQSGsuhrZyleF_t8WeV5U1JTTPe2obgiuqOHOaWju_IlsU42dCR_iRduZliJjGjS5wCYQuqBUo_cYd2xRwRNgZhBeS_bnv7lHXgKeS2PxAUA15A5POR7vaqWlVuny7CUMDy1hu64_Sy4796fmq1WsuSHt4Ga.fv3sNQgR2PkIslg71c9MfrESL_yE..6DDArs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=wagayu.xyz; Expires=Thu, 28 Jan 2027 06:32:00 GMT\r\ntiming-allow-origin: https://wagayu.xyz\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Jws5BEEu6L3EQlYYlMSt8lld2oa8T%2Bw%2B1PfavVtbEuFYbvEWXHB7nqF3%2Fc5vka52M2flebLnAcJJgZUz7qQRMv%2BfZztJU1kX15U3xxkuTiQd0T7SiqQ7ok773NZx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1350\u0026min_rtt=461\u0026rtt_var=766\u0026sent=276\u0026recv=95\u0026lost=0\u0026retrans=0\u0026sent_bytes=263598\u0026recv_bytes=48233\u0026delivery_rate=32078617\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=46446\u0026ss_exit_bw=32078617\u0026ss_exit_reason=2\u0026cwnd=47108\u0026unsent_bytes=0\u0026cid=e59afab3a6202d8f\u0026ts=902\u0026inflight_dur=119\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T23:46:43.370624Z","times_seen":17926730,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/f5b8de02-f6da1d855c13.min.js","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /f5b8de02-f6da1d855c13.min.js HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"f62d-19bc2122035\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4084\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSqtV1tBrUySQ%2BDCYA4IAk4MHe546jG856I9TNIDoVlN2LiMq2ZekfSPaWxk3OFUz7NU8WcJa01cdHy%2F4SGdRxFXtMUq8iEo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c4e73380e350b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63021,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (63021), with no line terminators","md5":"cfbca216146eb341c5f6e82cf2e66542","sha1":"709b6b4c2377ccfc197156003a26dc3e50ce5feb","sha256":"3ee30d9f53119a5f9c0395db1b1892b3e91d3caef4f4b895ff70e850b6adb8eb","sha512":"2934fcd3cd6ee879144ad68018e12688828526dd36272543c4dacb612773e6b41342b1f8f9fee44c9b8b4e23b523b26a2693a79ae1069246904fabf6461d9f37","ssdeep":"768:VECYScstNRo0Rok40x6oxxGpeAu5OcR/EDMaPQb00TtcVrW9G3i5c66cORcODxXc:fP60UoxxGpVcMIrbre7ecQ","tlshash":"b453a4d5590bd0e88e5224ded473e919e4280a63cdadf1a3ba3cedc1741ef61848763b","first_seen":"2026-01-15T11:47:17.969422Z","last_seen":"2026-02-13T23:27:18.094836Z","times_seen":12,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/background.jpg","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /background.jpg HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/306e8d314a09c540.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 105788\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"19d3c-19bc212202e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G93bqOQjJMCOZUyQRWsMOibadpxpKRH3D6NJjAoEHHUQPmRGgpxc2hdB%2F%2Fqi%2FJN6%2BiRjSvGjQyUg34KO9qBVedM4PFVrO8d7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e7338de380b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1920x1025, components 3","md5":"6e150b99f935c6b7611458f163f0cd2b","sha1":"f059148f5389a7c9a3d8bdf7c65787e5e93b8eed","sha256":"a76da8a646da675e04dba97d0cb306cd9b6807e72a0bfac1909b14995762e86d","sha512":"a9bbbc1ff109c9c907682c97f469499a2cc42e6f4b27258258581fb7ead91b43a5618956c03993b38ecde8b08d6ff85ab6aca12ee8c10fc18da10e9a46583fbb","ssdeep":"1536:d1bqSOrD37hQ3Si9PaGQV4BI/vZMzfTngP7wtbFNSaNbmJ4LJrx2P7Pk2uQMAoUt:lOndQ3lTRB4yrn0faDt2PruVFAqBa/Vr","tlshash":"65a312522f6d1946ca30a1b4dd361e97383387bc78be8cb960165571d93283c717e2fa","first_seen":"2026-01-15T11:47:17.971047Z","last_seen":"2026-07-10T08:04:36.433356Z","times_seen":38,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/ee40bb094c99a29a-s.p.woff2","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /ee40bb094c99a29a-s.p.woff2 HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://wagayu.xyz/306e8d314a09c540.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39152\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"98f0-19bc2122032\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0EqdPboAE%2Bh8wCpXZ%2BYSDxMwV%2BWOXmnNFIF7DmkcvdeaGYg8Uos%2F4IyaBLAxcigmOKYhUs%2F%2Bm3SRkCj%2FTfR4MANQQ9tiWae\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e73393e3a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39152, version 1.0","md5":"acfce21e9f6eaf62a1058b502b920e06","sha1":"c67f96573543ec91b416b0da07f979f80b89b6b6","sha256":"20fc9b6fc618e7c3c68d3ac750a2a5dfbceb8521675458d2cea580b5693e4798","sha512":"213daf669f64b3d1c2e86311afdb173873ee379bccd1e7c2a891bb17cd5f0c01e485bbed331b34aeb8cf0ff7b8962fefa136533e9b9218174eb6a72cf3c5eb00","ssdeep":"768:8oje8HA6B+ldUVqnpuc8oq8OlKJZejd5sSuSbccIeC8MQ:8oy8Hf+DcqpWo3OWZc/sscccQ","tlshash":"a603f13825463274fa888f297b2485859d2c3cd68d25e9339cefa35d2302d7915bbdec","first_seen":"2025-09-17T21:27:48.949651Z","last_seen":"2026-08-16T21:30:05.7382Z","times_seen":3436,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/favicon.ico","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"10be-19bc2122039\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcPU47kyT8fH7LvqzqUYYXiraMgOG8TLFJqRTL7FPfifmfHBXsy0Rc5lFRZLvmKpKzed0W43PGyRCnG5mMMibaD4eXFZg5MZ\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c4e73397e3b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"42c2cd7c326db3c5fc502631edbe93df","sha1":"8c4aea718114e988d5d06849fdb8f7f3206c686d","sha256":"95beb2555859ef1bf68a61aa753f8d4c98c4ec0214c25c30c1e03d2a10ac9dc8","sha512":"febd0bc029b27ee3d95c0c2dc2af95455cfa31e261208fc2cd92507a0e0665e0b61b7ea053eff6ce8902f96b4d8781a94e6cd3c0d75a1c3b9e17859df3ba4637","ssdeep":"48:ByYcyTsu3Zzk+DL8eph7dyapb5L68jida9tKsPQJVkd2:ByYc0supzkwLNBdyaRg43Kec","tlshash":"7b91618ad0f2a069dcd8dfb50855294d13357f676c35ab8f19dcb9247ebb3832200938","first_seen":"2026-01-15T11:47:17.967895Z","last_seen":"2026-07-10T08:04:36.434768Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/wagyu_icon-1.png","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /wagyu_icon-1.png HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 808\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"328-19bc212204c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FVyb57ccsEYY4Rs4mDAIPsggdWLy%2Fu6NWbZlQiVFf5TPHLqBbnMfhojA%2FxmxCgrBscYPdQHvNxiCZKC9QVWdLMeZgPGo5W7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e7339ae410b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"bb9cedf94963a6db30ea9aa8a649cc8a","sha1":"b9a45e818c3a2e46464f6d5ca58c362626086426","sha256":"5ce8f6475da0d579f690201de26298fae1e9580294dad33d1a8d4bef5fc4c42d","sha512":"44cf7fb707a5e2e8ed5c6cd4c202548fab485823485554124f806a6e6f6d9cb55306bdd7eece698500ff804d28f37025aaa6422d9e88ca28dd75a3ed2917d969","ssdeep":"","tlshash":"c10186c7c0919c97158e26f4aaf30416880370fc39fe38171475d91be9022966876396","first_seen":"2026-01-15T11:47:17.965988Z","last_seen":"2026-01-28T06:32:24.481316Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wagayu.xyz/milk.png","fqdn":"wagayu.xyz","domain":"wagayu.xyz","tld":"xyz"},"ip":{"addr":"104.21.19.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://wagayu.xyz/","date":"2026-01-28T06:32:00.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wagayu.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:21:17 GMT","end":"Wed, 15 Apr 2026 01:18:36 GMT"},"fingerprint":{"sha1":"E7:B0:69:F7:45:81:DE:64:7A:38:A3:86:8A:E1:82:DC:E4:4F:42:E6","sha256":"7E:13:50:56:9D:1B:5D:B1:10:69:5F:45:07:81:D2:65:51:DD:A7:52:52:B2:59:DF:C8:75:87:69:3C:C3:C0:39"}}},"request":{"raw":"GET /milk.png HTTP/1.1\r\nHost: wagayu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wagayu.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 06:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 867\r\ncast-mode: default\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 15 Jan 2026 14:32:06 GMT\r\netag: W/\"363-19bc2122048\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-cast-cache: MISS\r\nage: 4084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSwqOzFc%2BspxFULEfyMahJ0%2FwK7BNq7CBfkqWLnMDiwrwq%2BRzXC5sYFZkK46lVN4G9G0g89Nc4ik%2FgjUndYep%2BuoPVFKVGWi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c4e7339ae420b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4aa9955d7d6cc81ad860eec3495c4aae","sha1":"e1d43232aeb7353bf0840ddc3edd9797689c13fd","sha256":"6e3978b67f3fa4853446d431bc2c26b47f719c2393d596c099c5330894ee7ff4","sha512":"ef42cef104b7ae935c5381a77add9d4d984cc55a7dec227c90e884d948dba8b2a09d03d24cba362470490ba594d8064223ab42201b3cc426463ba5216cea601b","ssdeep":"","tlshash":"bb1152825746c87f5a3d1572331e3b2ca997476c7d71c614a1386c21a3dc2a3ea86616","first_seen":"2026-01-15T11:47:17.971845Z","last_seen":"2026-01-28T06:32:24.482198Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"wagayu.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}