{"report_id":"0b2f7788-1067-49ab-b97c-9f69eb5a6b7e","version":6,"status":"done","tags":[],"date":"2026-05-12T22:04:27Z","url":{"schema":"https","addr":"td18h.com","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"172.67.154.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"td18h.com/m/index","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"title":"҉U҉Z҉U҉M҉","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"td18h.com","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"172.67.154.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-16T22:04:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hf6d5.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-05-12T12:04:22.978652Z","last_seen":"2026-05-12T12:04:22.978652Z","alert_count":0,"request_count":107,"received_data":47080,"sent_data":50702,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-10T22:35:57.417067Z","alert_count":0,"request_count":16,"received_data":1879935,"sent_data":7114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"td18h.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-09","domain_rank":0,"first_seen":"2026-05-12T22:02:49.439436Z","last_seen":"2026-05-12T22:02:49.439436Z","alert_count":92,"request_count":92,"received_data":1998878,"sent_data":40732,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"td18h.com/js/chunk-vendors.0959c18b.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","size":51996,"data":"","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-07-22T14:00:50.013109Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":278598,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-05T23:28:05.531433Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","size":143070,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-30T10:12:01.999867Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-55231503.ea120e5f.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","size":11909,"data":"","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/flexible.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4071,"data":"","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-07-22T14:00:50.153132Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-08-08T13:41:47.168862Z","times_seen":1563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/jquery-1.11.2.min.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-09T05:30:21.726864Z","times_seen":1912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","size":590640,"data":"","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-08-08T22:29:34.880423Z","times_seen":648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-08-08T13:41:47.153866Z","times_seen":2478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d75a045ada91e8b297dc25ca5080ebc","sha1":"5459c8d31303d82ae64e465707ea4c0b774a26f7","sha256":"3bbcd117f9c743158fa2c3e85837cada012be7f205946287fe8dd509c7a317ba","sha512":"7a44155e399fa84ca4f908072115d470b687598d9d35ccde28025515a3f312cc1bbcdc6bc8a464e278f28d3563ade49f32a6d0099033870d1bd61dad4beeede5","ssdeep":"","tlshash":"a3a002a363459b385cdd3ba65470cb9a3c385121bc16b445450d1920c5a8ec2445bd94","size":67,"data":"","first_seen":"2023-03-07T18:08:41Z","last_seen":"2026-07-22T14:00:50.216179Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-08-08T13:41:47.156977Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.205688Z","times_seen":1219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.257959Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","size":3516,"data":"","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-07-22T14:00:50.173418Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","size":3883,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T13:41:47.154699Z","times_seen":3508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/app.2212e73d.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"457852577225ef8f55352ce0cab5ded9","sha1":"fe8f67f3f75a04cb437e77b94a45b19d7fb8cee6","sha256":"79d2edd40bd655f033e576e3af749b388aefb4edfc42527cd05f8a0538332089","sha512":"02426f41c08d4123228cdf2c6fac257657f1488e1857b4cc5eaaf332ce00e362d9ba4428c03f73feae9d7ab434d99c2824ac850b124bb5a059830b07441a7d5d","ssdeep":"12288:etFp6YfZIflEQrEf4oYYq25hn5g2xp2GFvA2A45BuoEkczSPACB2oaN9jzT0HWlB:ORjR55EuG3","tlshash":"c9355bd822eef7b515429109410f3b3c42191fb9f156d2916876e98839edff48233eba","size":1065007,"data":"","first_seen":"2026-03-23T02:52:10.102175Z","last_seen":"2026-07-22T14:00:50.072479Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-08-09T08:48:19.737822Z","times_seen":4450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.254754Z","times_seen":1193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.16939Z","times_seen":1214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","size":62797,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.193438Z","times_seen":1196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"td18h.com/api/banner/1/list","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/banner/1/list HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9CTgMzxixQUSVdiRzFjj1IJO%2Bpa9mfc4041SqtHDNUmeZ30WNGkUi6jA87v7jOey1UTUWMv81jcaWzDBnGr4%2FVGhLIAp%2Bu2PN%2BNDx7vgFaeby9jOGs6UAZ1nmI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9bb1e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"20c9188460c4742c32579095794ad57f","sha1":"0c0cb559a645d0e0444775824dee7ba974e468a4","sha256":"8cbf63f65d45617aba061bcb7c1c98e4020c8d2b810d8a1fb1a51d5f3a489dfb","sha512":"a256231100357593483bf1789aedbed521b091b071452444e044ebaf7c7306c337cf9623645f50a9daab01e9f11d443538cbfd5b1bd017be2effb37d9ced2241","ssdeep":"","tlshash":"9421f46ad17ae8fd950f41824adff885d49cb63fc5986ba42491cc0c84c887d6a0f41f","first_seen":"2025-04-23T13:47:12.082177Z","last_seen":"2026-05-12T22:04:52.831668Z","times_seen":19,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/icons/ic_recharge.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/icons/ic_recharge.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1139\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-473\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfsBtJHqukoU1FDctCS6OkUBJH3ZEeAYikbpYyLblsVKp5fquHwQAE8ogGGbaZ3CMinEcV0Vi5tfcPSJxhXqD1QM5eoyX7fPrppexnHLnuPKXBcmFW9pZJEBNdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7aefe8a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 19, 8-bit/color RGBA, non-interlaced","md5":"1c2937ad9f59c2144856c7e17b022a65","sha1":"4c6e4fc1d9be48286e643da67f8e88b8612e0744","sha256":"9e4d52b130ee6457bc78db04c15c4f771820eb2b983259fdd606298f1e3e9f75","sha512":"894ea7b05ebd0efd11d9b79739fa3416d83302618e0c014a95c65bf396ba0cde03d1690dbb1851c73b1a267d6a0c2b5e9db5b2a3de26201fc8a3f4280f30c970","ssdeep":"","tlshash":"5321c6b50eff1ae2d378b339c412a4a2eb9732677514360a3d15c00b94b254c4483279","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.198199Z","times_seen":92,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0c722bf6e0934b8ea3c2906d1a7cbd29_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0c722bf6e0934b8ea3c2906d1a7cbd29_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8a556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/b72ca9ad573145f5b3905a46b7c09a05_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/b72ca9ad573145f5b3905a46b7c09a05_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8eb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/locale/en.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 988\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619608ef-3dc\"\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 686418\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QP5Cfxhf5WznloseahFqCwJ%2FxZGG3q%2Fm9Xzyf3uAQQ%2BIH63GYQa2%2B0iiiNVgBjoyEYb6Qfu8P6RP4p0Ot%2BciBpbL%2Bt%2BFOsTzG%2BO%2FLBQLAnTuGlKLqBajqh1YEnmUwQ0TwCDRE2ZA\"}]}\r\ncf-ray: 9facb79b187c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-07-22T14:00:50.173418Z","times_seen":416,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d21d44a.9e3c7a52.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d21d44a.9e3c7a52.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-550\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51nnLf0WuoIbwkC5E%2FbVRB4BPDLoab6GbrcOlheoq834r5LjTc17jGjh8kccl%2F9JqOo7hN3saQM%2FsSZ%2BS9iJT2%2FzixqkDDBAf%2BGgP%2BTF6gipv1QJv%2FXyw7WRNHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a16d1d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1332), with no line terminators","md5":"063b1dce058d78683019c57d4b6de853","sha1":"cd62098b12168ff32db1afe785da0db3a3568e38","sha256":"58023a2e105bf911f131610a55750ba7386fc39096133d727635186a98a6127c","sha512":"9523fb7f681f7abe0b168b735a1b904076e6e1cdfe3e57dc02b71fc22e1603445365362148588704b92dacf0d7670b64d862cdec5943502cf419cfcaa60ad03f","ssdeep":"","tlshash":"cd210f54f087d28dac7f8001a59e3234f0242fd84551a2c3abf8c56516d5cb90b0d75d","first_seen":"2025-04-09T11:39:56.010645Z","last_seen":"2026-06-01T10:56:00.198385Z","times_seen":110,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/common/translation/list?lang=uz","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/common/translation/list?lang=uz HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbM87X1uKOKKBZitWmFVAAa5cYBlVGHlaE2YykYRHW1t5Vygy0tLy8IXC9zHiFFRPAPBfq8AkRCukEZsHFUmM2jE%2B14kCm3scnVGQw6lNPUqcMJ%2FaD5mHEr%2B0lE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a729635688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d621ec3673b1442889cef28d56722538","sha1":"8632caaf7624635c529e51e65783e9819b7ca2d0","sha256":"7dd61f94ab5da8495d6b8351874ca908a30c755ebc5c569a72df18a87ca28540","sha512":"619f2da5bba62a64853c148beb060fc72d830f4d063af01d6b0e067f9249224b1887228cb9d5a2efb987a1de00fbea203154fa713831ecc15bdb677f313eaffe","ssdeep":"","tlshash":"cac012212468bcaaa99356c38c1d721a19e89520990429188a684f34a9d9775c25d866","first_seen":"2026-03-23T02:52:10.069319Z","last_seen":"2026-07-22T14:00:50.126063Z","times_seen":37,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/poster/notice","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fu0VfDMRBGQBNXVrKDSTekZPpLevgn16shCBjKLCzAcY2WK0Auprrl7iEehKBAMbq3zYFu4g%2BM%2Fq9137CM%2Bv4MVRRJFqMqPyJHBSJFb40YJ51oYPwCG0hdSGPYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9ab155688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cfbb323aa73a4d01b950ab7339ca9030_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cfbb323aa73a4d01b950ab7339ca9030_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a0063eae789446618702a7c6fcf6014a_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a0063eae789446618702a7c6fcf6014a_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/178fe02e95374e93a4b24a83cf61c733_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/178fe02e95374e93a4b24a83cf61c733_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1393c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-11dc054a.dc0dff3a.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-11dc054a.dc0dff3a.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-225\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOK%2F7%2Bm3fCBr0EmYVJBZSDPPFPb0FvYHIprAVwXvK2i9HwLVMB91%2BmF7JNxb1UVKZ24%2FeZj5s6JQamTrOF34qFg1oX49f6FpfJS9CU4k%2F1D%2BYRuthUfCbH%2BvzrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbe55688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (549), with no line terminators","md5":"543c20808701b85c34b0d28fd21db192","sha1":"daafd5e95b9657b6ca14c3481b43074dbeec6abd","sha256":"71c664f917edc7fa00c5aed7e33a9911bd8bb185cf72724db6fb464dd86c9927","sha512":"01768a531f71d3248377d09dae80481262a7a5d1e976d4b3c8839264eaedbab1c2d302280c2786bf3b8b45221a14092e6de16917204087913c120785dfb9a66d","ssdeep":"","tlshash":"b9f0ac36391d0025b02ff76ec45006f4813ce143a52b0ea63a0a33229a675da31996c5","first_seen":"2025-04-09T11:39:55.955972Z","last_seen":"2026-06-01T10:56:00.186142Z","times_seen":105,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-20aa535d.40bcfaf4.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-20aa535d.40bcfaf4.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-b74\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRx02rxGR0xf8FAqm9kdCikpb%2FEWYg9GdsVfwJJKFeG1Z9xi2nfb%2Fr4dwo2Qeo0gAdZgr%2Fa5bGoDR2xDf4MadVDnPvWT9VXO0gnFv17zjpHXphzG%2BdhYOQOFOMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a10ccd5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2932,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2856), with no line terminators","md5":"888b5de99e3cef6cebc5c2f13b53916d","sha1":"3621f5bed8bbee870a00f73057677428c59fdc86","sha256":"d72e761bb6039b8abff19aed95c65c5e451db014e5be6176eaafd65e210fad68","sha512":"80f6ae27245bd18aa699e6118637c70e8d71934718bc5066bf173ff66ec0651f23041c48b613bf246f0a3a903f9d503f1dea8a83e18f648e2195dec35cc45314","ssdeep":"","tlshash":"5e516658b003d1aaacaf9027e51d3630d0757bfad012d083e3b4cd805a58df9271faa4","first_seen":"2025-06-30T02:18:00.917868Z","last_seen":"2026-06-01T10:56:00.23347Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-7fa7af0e.e91d9701.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-7fa7af0e.e91d9701.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-d88\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyZr37m6rHf0TezpF5tVNYlDjwrZ21lq6fDQLhMKHznlHdbfC6vqcNWx%2FqOqcmtSvfhAs4UnU2qqsElCZPGWvPyG%2FVQNAaXCjBqEmVbOavtOQdMVkV1SdANmY54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd715688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3464), with no line terminators","md5":"14703ba2c4885d4136431727be3a424a","sha1":"d2cf20082b9d5e7b2c30cb3ac41e8b29530aba1e","sha256":"3aa3fce945d572a167eb8dcd64db9ce7138980e57e3e9fa9d7bfbc02fd3dd189","sha512":"b81dc1c4e01bca729b8b001122aae12bf5b562372d035d8a4e78a0bc911bc56c242d9cdcb6f6239ea82fc9f72b2e9dfcf590e20a8e8572a60f38dc036dd3020e","ssdeep":"","tlshash":"fb61a5093b5af4a9cca7c266401f1625f05c6a69b034d4c8f370dae0d5e4caa03aef1e","first_seen":"2024-06-22T16:59:38Z","last_seen":"2026-06-01T10:56:00.211035Z","times_seen":252,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/182fe68f0c9c49e0a1a449df345e982c_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/182fe68f0c9c49e0a1a449df345e982c_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af0f0756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/42d0bb8cb0134a43bde28d175c1e3e74_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/42d0bb8cb0134a43bde28d175c1e3e74_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b02ffc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/c9125aedd74545ba93d53035c9c7106d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/c9125aedd74545ba93d53035c9c7106d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0683456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/797ba457705a40a6bbd2115657d040ee_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/797ba457705a40a6bbd2115657d040ee_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8c056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/431f5abbf75947e9b7ac3cf966632e8d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/431f5abbf75947e9b7ac3cf966632e8d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8f556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 34443\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ceb414-868b\"\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 589306\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xX1y1dsu1VWZlQ9bIEXb50pqt18Eycnal0ZctWW8QuObMA54PmtQJH84cGDkIKv4zFKw1GxYueouAu48C9xCxkJ2OibrV%2FU%2BMMxP%2BOY9Kb5jou2%2FK38bh6OxzIrlT4eSSR3ejLPi\"}]}\r\ncf-ray: 9facb79b1889723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-30T10:12:01.999867Z","times_seen":484,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-680ea45c.4171287e.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-680ea45c.4171287e.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c3\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTfLMTomhYUCdPJUQoGsRU1yHislGKYM710H6aKIB13MBn%2BDicoHMhCozmZYKoEX53GUoITGOHnS%2B26AXeLA4qn1CJrkoPAK5aurCBcFecPqXAai%2BVBcdDg%2FjPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c585688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"14ae3e0a5a74981b6393f7d242d8c426","sha1":"69078a1e59422308103d045e3e75cf6a1a9ebb01","sha256":"39f89b7568e1c1524ad50e77ea33015b12eb7dd5551aaaf7d85e97140ca82fe8","sha512":"b04ba20df584c0aef3249e0bc695478dd866b97b4ffa90b7d8aef3dea1dc2562d98871218da405704a56d55c2ca08712599508392a9c4caaed2adcd96124cd3f","ssdeep":"","tlshash":"32d002f13e9ef0b98637c2a580deed441ba6f626d17752814d429f2819c6201397c35c","first_seen":"2025-07-19T12:02:29.47376Z","last_seen":"2026-06-01T10:56:00.206977Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-f8d706dc.cbc27764.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-f8d706dc.cbc27764.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-70\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZzqayl82u982bqudkBHW1dLs8jdGLvMlQB0q2U2iyxrqOBiwcHsZGw9PRRPkEFk0gCV2nIkZnC4lr33FZk6sqWZxT1t%2BUppCwANVvCtmFzdHtBDNsfeMamPa04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a08c795688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"356149ed230b9481a4b0a80bb6e9a27c","sha1":"ffdb151234ec2e972db2a4f2e79aaba15ddefb5c","sha256":"a27527c60ec70a58cb61e9aeaf0d134c94dd7e658d469bc2daaf965d466acf7c","sha512":"440c1034a95e5e6ed49eea04f26d84bb07075359217b31f6830c80c5f27cb4677443cfb707ec2f2ea1dbfea2aa6c3539cba6f42cdb2ac06a03dfaac69d7abc93","ssdeep":"","tlshash":"bab0920969072908141fba60a6380495c2e0c22a918a32978813572687d71da0bb4b0d","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.203747Z","times_seen":131,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/tabbar/home-sel.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/tabbar/home-sel.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 884\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-374\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNLykJ35qS81sW6iXm9hfoyykTX8BiRdZTVZJBYLF0%2FFg9kBhNHFnSBPYaVKeOb50UplKdwUgp%2Bil%2BbwAT4pJJY2B2IqZL3SmZdiyEwjvw9ej8ASXtw%2FzK4T25o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a91a9a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 46, 8-bit/color RGBA, non-interlaced","md5":"d59d49d76d7ff3107fc82e2d48b06216","sha1":"2bfec006bc3a8a7c65ca34d3c3e92df5d488d1a9","sha256":"9572873a018cf0366633a07c9ec33192ad6180751c8f1c7396ae734f7ca46af4","sha512":"dab4a0283652f7b58bb2c082c5f30233b13f052e5aff041f44c10b092e68e94c4af73b0e1d31804fb9c1c77d2a7108910907bc1d0474e9072790af4a0b4bd04e","ssdeep":"","tlshash":"f611b3437b233c270ee2c1b3141510c46a63b232c1a6a5380554000ac1e70e0ebdf1ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.153791Z","times_seen":92,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/tabbar/grab.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/tabbar/grab.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2181\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-885\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upWnmnM2CCqL7MYQxnvWPAL1MDc5b6I2AQIg8kK8xxHxXMDYZGNTkL%2BLJDKuvWDRN65N%2BSj2WfDHtRilJLc13NHDRLc568WTK8wbCyiWnQO%2BxAQjmhZmsqQD6o4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a91aa15688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"473a27c1195489a54d77717d2745ecc8","sha1":"afff5e5e9c8252bdcb0d620510d00d6ebf1ba7f0","sha256":"564dc8a0df824a34af42659eeee924adb20dd4a21cdc71d58ce8ec21abb3a7f7","sha512":"072ccb3e27e200e3363a4fa9d86d012f0f388b906bdf6835bfb09782e27a277900fd6f785d350db60c79ab0222dda7c2d2320fab57b7b41601558ea2a26fd789","ssdeep":"","tlshash":"66413cf380630c7ead1bf45da5814a0da5256cd81e3b903c95291d7ae04b2f0b8294cd","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.012141Z","times_seen":92,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7f7d1ce755354c53b30e00e672074cb4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7f7d1ce755354c53b30e00e672074cb4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8fa56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ed0f1ec842ee43d9aad65aa378e5f65b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ed0f1ec842ee43d9aad65aa378e5f65b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1392f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-0ce41c5a.36a8d6d5.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-0ce41c5a.36a8d6d5.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4b6\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4PCvTG%2BOsrzG8irX%2BnOGEmiVnOmP1UAV6JeG84sx158NaPgnQppkfj6BF04TKQ3Uzoiwy2BXVXIhZ7LTY0MD3Spa09yo5cyScnQ4su7GF9n4XJ35a5RXa8DE%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a09c825688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1094), with no line terminators","md5":"5e979cf4281f7ebde0d82b99cd25ba25","sha1":"1810e016d0dc79e815f84b4c21caca2e4be64352","sha256":"e265a6091249dd914b53d55a7c2a2711fd8813ddb7c38ca634dc4d02de49238a","sha512":"849df467f9db93783890c75d5e9dfb70f4742dcd0245dad279e9d4dd76ce362d4503685b25916dddaede4469f9696398a5d4f268c06b2dc0c98bd2bb9caaf58f","ssdeep":"","tlshash":"2521dd48b4d3e62dcc2f4406200f3371f0e23eae1410a8c2b2b4c99a5739ea5570f97d","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.189054Z","times_seen":267,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0d3e42.fb15c1a2.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0d3e42.fb15c1a2.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-33af\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNaF983hitqH27yeN4QLf9Vuak3GqFBpTA2JDmF0nNKV1QK1jNjuYLNCJzeowZFeSvL6mJCC5Awg7GvX3JqIt6yb%2Bc1HbABU3%2FbMRjYGKlmF9wPfCye860CqT6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a13cf95688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12985), with no line terminators","md5":"aff25d0edeb7ddd40d4f745cd32b75ed","sha1":"01b9b56947b295dd657541bef55a72c49f0d2456","sha256":"8a71b40b8413512d6716a7ffd4e998050c1c4172f45a7bb7af4cdf55ebf30516","sha512":"340ed47937e7de84c1a76ddc814478c66da15d5c483d5f8b520fbf9ed20f7811c567cc007f3572729a2a1cccd5f79a2bc9dbfa96ed16bf0a33705ac2de5f2456","ssdeep":"192:Ajt46CnVIZ5xHo9CBlWbY4XsjXYbQ3qNLqbpPtqI44PnC4QL0b/3Ps1I:AjC68VIZ5UlbKbN1nxPC4Ay3PsO","tlshash":"1c42c6ccb1d7f42946676231901f200af23e696ab40ac145f768c8e1e8b486e537bf7d","first_seen":"2025-04-17T22:27:18.820589Z","last_seen":"2026-06-01T10:56:00.204339Z","times_seen":204,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/7ffd3dc5f787425ba71b3a1bae2255e6_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/7ffd3dc5f787425ba71b3a1bae2255e6_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b02ff856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/de8f97c2ffd9480f9af8c7313e05364f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/de8f97c2ffd9480f9af8c7313e05364f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8cf56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/758da4faa75c42479a87d6789960d3c9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/758da4faa75c42479a87d6789960d3c9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b108ff56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0bdc390dab9b46ffaf7158d1c257999e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0bdc390dab9b46ffaf7158d1c257999e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/081207d30a55432598c268dc27e54aa8_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/081207d30a55432598c268dc27e54aa8_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-1d8200c0.151d881f.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-1d8200c0.151d881f.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-bb51\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORasd5gpVZSCMBZKtvVXr1k5uLoiVChyxCLuMQUDIzKsaLDAMIvo5BGPF2AHAY2EMmT3QOBSzqwtQC2SkLoKSAlyw6S%2BkQwlIBY9wly5CGWcoYoyZ03BxxIFcLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0ecb05688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47455), with no line terminators","md5":"636133671b750e8b58028c759390117a","sha1":"f46ef314ab5cb78e778312534dd4dfbcd5109029","sha256":"673b455052afbe5aafa1d630aefd8d6698c59797b5cf1e9e61370c69aff1ac53","sha512":"8ec3dc2fab8d1ffe32d80d8cd53dab2b9631703e6014a3a332b1d81e462f0af178a28e249b8b135ef471d8a4e43c8b6e8d9d62808ceddf0d667e866f755d702d","ssdeep":"768:uSJViW0ts2ZtK2Kx0GIg1udUZtK2mxMZYywuVZtK2Kx0S:ucGtIbIgNtsGYyhtIV","tlshash":"fc23d94cb1c3f06e4a6b5621851f1419e23a6a99f405d145fb3cc8e1b8a8c69772ffbc","first_seen":"2025-10-18T07:29:14.091517Z","last_seen":"2026-06-01T10:56:00.25875Z","times_seen":66,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/flexible.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-409\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnZi5NeXqUqu4AtNnJhIJyNuhAQiJZjMPnsR65Xk7L73RzDru0318sBxislx96C4tk0aNkO1gGOcvXlStM9NcLtJzwPOm2k5eTszNkSvJYEXmarfxHGSVDWMG7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ab84e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ff3955ccaab30b6705c564ec20327213","sha1":"b6a9a1cd9cd27a7791f43758a360dad129ed2802","sha256":"1a61c02df0ce591e74ffac300f6c2e2ab3614ec95a9bb2f8d29aa6a9ae099deb","sha512":"a9fc65c1298158177afdf10a06e723b893187150ee4f73bdb16b842d140bd0881d53da1a109fa051c0eb44a419ccf27afc072515f23a632d3bf64a69c7cbcd1b","ssdeep":"","tlshash":"631175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2024-01-12T03:26:58Z","last_seen":"2026-07-22T14:00:50.052784Z","times_seen":275,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/d602a054dfa64fa18486fd4ba1ef3855_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/d602a054dfa64fa18486fd4ba1ef3855_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aecec556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/ea67b2901d0946b08ba1609a46e4a678_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/ea67b2901d0946b08ba1609a46e4a678_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0987f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/jquery-1.11.2.min.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1787e\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRPOZawJn0UlqEfpz20jAGERKF%2FqJcwcgtUaDwkUdrx2m373ryWAPimQixSga7vFGPKcTQUdTexjm46S511bD6AdjGdowX6tQWZkA9HWfZwO39O6AANogjaeRRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ac85f5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-09T05:30:21.726864Z","times_seen":1912,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-7fa7af0e.ed1730e0.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-7fa7af0e.ed1730e0.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-af2\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3qW0lrkTztbB0f1N0%2FFFtJVguDl1vDp2tWVfEilT7%2F5VDfrvwyx7GTtNB8N%2BWAtaYSTNTYnc7Yvmj8NTZvXP29bTDHgxR%2BJDcM6%2F9VojgD2PFlwNskvbSIwcds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c5b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2802), with no line terminators","md5":"65777255c3090272e9fab78125aa99a5","sha1":"3f42ce9c251872515f26fc706d523518800f17e3","sha256":"ad5ecbf7349b2352cb01a3a3c8c928a0d469951ffc4ad485aa1bf62274e71aa8","sha512":"0478ec523a4888034e8840b209bfddc614f40eb8594523d7bd3e22075bdc49229a8cd9589498a27ebf48ecdf55dd38576a0fc66d208ffac76a103f6cdbbccd99","ssdeep":"","tlshash":"1051ee376214330ce427e91847dc0bae0229c22be11327ed1f626675cbd7b5e1abd19e","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.199073Z","times_seen":270,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c1c3f5d541c4444f97eacda6271b281d_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c1c3f5d541c4444f97eacda6271b281d_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aeded956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":775,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/icons/ic_invite.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/icons/ic_invite.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-318\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkY9eq6b06krf19Fla8yy3CB8NkE1nX1WE1ouVrwMyhkqVTVELh0AiAPE2fdzN7YectPohUwsQi%2BSyrrxmCoar1n8NMx43Ooxlvc3WEa6OtP3uAWll7Y6IOL1gg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7aefe935688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"ae9609f354c86c7572342b3465fb7df2","sha1":"9e3096deb064d95711813d6a0707b723f720b3c5","sha256":"581cfd62c526498c41d7fb2fa5091b6d11a15750cb4be622ba8bb5092467b706","sha512":"4e8e1dcd1be2903a55441b06191912db27a4d3b4f2ded175b9837a8a7a46e29ee2ab3eec8b7801443e5644643d1c5e54272147c19dfa3bb963b49ca260eec5e5","ssdeep":"","tlshash":"0f017590da270660d6ee934e8b871019dc7c70998384c34889488dff782f28dddf971b","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:49.999447Z","times_seen":92,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/858f88967d974be0aa970118084baff5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/858f88967d974be0aa970118084baff5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0582d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7a9df6fbb8a643ab9a55400bf2392cb3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7a9df6fbb8a643ab9a55400bf2392cb3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8b556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/65e6159c7a8242cc8dc1b05fbb5c2f9f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/65e6159c7a8242cc8dc1b05fbb5c2f9f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0a88056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/caad0d9746df4f04b82bb66d204bce26_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/caad0d9746df4f04b82bb66d204bce26_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8de56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-1cbbb860.e43e04be.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-1cbbb860.e43e04be.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2fd\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbnQzhD%2F4RADcEeG%2FVFoV4iJ0WosjTn%2BF5QN93XUXK65d3FS1kxz%2FspQ6k2L7e9o%2FNrDrH%2BX2g0gTIojsXqbFnojrtq2FlyJYttbwyQBPlXvscleosOg0NS92Wc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbeb5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (765), with no line terminators","md5":"dedea350ecbc1691a0dbc8d699eafe18","sha1":"5875d960f2c96a25fa5e2a281882c9fab260f05e","sha256":"b4f4b8fac275a3e0d022c71e3f984c36e63f3abbdabc0d22b4ea662688bafc55","sha512":"abb6f62c9a3400fb24695359add398e1f219e57e466a1cf11d45f6d1764a44b6bd8481734fbb054addd438b713e2c5cad79ae38d8c8d692a52c9ecf0698f23b9","ssdeep":"","tlshash":"9301d2f530aa2814a73af62c719867912c20e333c543028a57d3d63e4fc73d515e4e87","first_seen":"2025-04-09T11:39:56.041244Z","last_seen":"2026-06-01T10:56:00.222011Z","times_seen":110,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-e19f796e.bd45e7d1.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-e19f796e.bd45e7d1.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-d01\"\r\ncontent-encoding: gzip\r\nage: 92\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiQztjAhKp1CtMQ%2F4Gw0kUP%2FswBmwM%2F%2FUNIGksbcb8SdLn5GVlJEOQz8Wa9VV13n8jk%2FqhcJa56LP2rWoPar51zcZSWSkSa8RV62WI8V%2F9bp17cGqILAmxQP9%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd745688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3329,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3329), with no line terminators","md5":"8816bb962321c72755013a3201eda331","sha1":"24fe5fe11c9f7672715ef5ed68c3fbaab0ee28bf","sha256":"372982eb6eaed682a071751397b7f9a9b25cbb881ded13f3e0b21e68355cc5f2","sha512":"0ea0dbbf50d0a3bb2736fd78f9f9e89eb86f69f0f344a742a645d72e76a201316d0b781dd1d527841c6afd796a23c2ef023313c41c2d793086652be415d852c2","ssdeep":"","tlshash":"a961646c71c3f4bd4eb7f161402f620ae13a36416035e841eb60c9c0aaa5c6f523af6b","first_seen":"2025-07-19T12:02:29.467043Z","last_seen":"2026-06-01T10:56:00.230752Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/3a0753ffed7448d4abbfa8ec1a3599c3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/3a0753ffed7448d4abbfa8ec1a3599c3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0885c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a3cfd3c17c6449afa98d9033d0e25c88_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a3cfd3c17c6449afa98d9033d0e25c88_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0b89356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/698f1efabaf84cdda0b051c6dfd77ae5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/698f1efabaf84cdda0b051c6dfd77ae5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/007824734718494580471f46a168f26f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/007824734718494580471f46a168f26f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-f438de52.856cb3a1.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-f438de52.856cb3a1.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-9e\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32eJRrHjGNhVG%2FXA5yTaOorZpTvsYEcPcFK%2FDSBFbcSeCG3rE31qD2GnDL6z6TX1oz8VcHzKGAmb%2BDG%2B0mKpuTMXeC0cUpuwyKnQmT0SBL%2FSlRPCWX7BsAkSoLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a08c785688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5e1d6e64b7b23b2bf5b9a0995dd513b1","sha1":"a8d6d9ea89023003eaceabe2a49c41d12381b3a2","sha256":"79a9a3357587daada819296af7ff82d5518704362c3f9e0aabc927fe2cf25377","sha512":"ec6c3a70751b4e512340e86fda978d40d0d11a0a99b640513a40c32ac22afbd0c1c9ed2d91ba2c2682eb86ce7ac67f259bf334d1b4ec9ef1b14bf11d21f5abb8","ssdeep":"","tlshash":"c9c08cfd2e8c409f3e2688a608bf0a844125e29a82cd797c4aa35bfcdc2a73a1520454","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.205807Z","times_seen":127,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-7fdaf070.0921470c.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-7fdaf070.0921470c.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7bf\"\r\ncontent-encoding: gzip\r\nage: 92\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1l5Uiz680HnsASbgtbGBXCmVcnQ23jt9txTmTnil9bXbFmQW0QplzBxw3OV%2FOTm%2FiLyY0SEnpz%2F09pCYVJ9ooql1H725i%2FqxcnuC7p0APmWitY5ZtLcVmTAFGsU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd725688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1963), with no line terminators","md5":"03349f81e683a1fe231132512bb08a79","sha1":"12bcbba3a7079a3ffcd7a0dc910c1549d72d5e21","sha256":"2f77baa4e742cac2032d833ac32ebe0a3ceb321460c8913a7e2a9f72b1d5f33e","sha512":"4080f5a157d76550501adcc8b0781daa9730067d464583b6be7f0f6e908719e8f4ebe07ab0521d9267d282cc3c84f2f299982168873ebfb7a2d062229b0f784f","ssdeep":"","tlshash":"3041100db0c3f5984c7bf041912f222ae169bed0542869d0be74d0c56b61dbd232ea9f","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.227182Z","times_seen":119,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/country/list","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=863UQyvAvGlbTIjgPRnEBinB9aPXB39830rA4NzWwnfLdlRCjmyuVdiXMpx1hCNtxXIVkGOMattfLj484y28q7Jg8FiwEd7IOIzVXDsmPRxdXy8NKtHl5cclRns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a5d8335688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"290443b9ed87598307899913a4227be6","sha1":"a374ed5420f468d875537f318e2478e653087030","sha256":"ce3a6ecbdb37ce609f3431d529ed5b5aa4c8974d6ea6816a392fcc78ee131733","sha512":"e056365f2fb5f8726c941123cbb4c7e38107a062900398dac564bdaabf8a820cd8d06f3a58a49ca12a749abeb0b31b0bf0475148d8aac8cc947a990b53a9e53f","ssdeep":"","tlshash":"1701d69e250cecfdd980c510650fbb4e383d55aee0c96c6473ce8fac52839f1020d822","first_seen":"2026-03-23T02:52:10.091887Z","last_seen":"2026-07-22T14:00:50.17407Z","times_seen":37,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/cc9b3f9002de480893f4c5146a16969e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/cc9b3f9002de480893f4c5146a16969e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0987a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/72ab1f9e9b8e48e88457339fb397b909_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/72ab1f9e9b8e48e88457339fb397b909_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0b8a056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c9532c36572b458ebaf6c2b4c114bde4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c9532c36572b458ebaf6c2b4c114bde4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/flexible.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /lib/flexible.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-fe7\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaQnoHEpLPT%2FaUKaMsvKuheT4JPIPDleJLJnMjZHJNbyTsNu5GgM%2BulrqE1J9Jr4nriWQ0268kVTLPBM7CN8E0nzSxQsli1At7qgTxiF3x7P%2Fy36E04WRu391jQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ac8585688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-07-22T14:00:50.153132Z","times_seen":288,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-23cea0af.d3716593.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-23cea0af.d3716593.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1c41\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LUv%2FfrGkZ%2BsBG8tfhDEhq7SMKgJsY31UU2PIieRetb6NEQVhcPjDVd65W6n5ukG5t3kld%2BBnil6J6JC0g7xcHu0A0e%2FN9tW0OaraweiWPR5liBPIV24FRBnSrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a11cd35688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7135), with no line terminators","md5":"ea08089fa610ee4411a8ffadfd6c7542","sha1":"01d887cf565cdf69f134e85e2e55bd35fc39f0c1","sha256":"9f3747769697cc7cb715fb2810c3cc3bd9836dbc0a35dacdc94b35dec37b969b","sha512":"b2cc246ba3764ee52094b7ac59bde685166b10d83e1b17624154f14c194e93accc3e3ac34085b7624490238fa0e4ac71670a6a81958a44dc910af8a9542ab14b","ssdeep":"96:QiuRksz9+gPPX3WZfWLbDY6zwCpAUUb4vh6pxlHTlaoI0BsJADJ:3ufkWHcCpAChOxlHTlariJ","tlshash":"03e11f14b0d3f1aeecbe9112415d2a39e1317be6a405d087ba38cdd02795d753b2ebb8","first_seen":"2024-06-22T16:59:37Z","last_seen":"2026-06-01T10:56:00.230043Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0d7fe4.7ea5bea3.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0d7fe4.7ea5bea3.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-a38\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPDljgbQafQHaZURkH8NS%2F%2BpB1PfIa%2FvZEOoBLNPA2wEtAAKJzOgpYGRHvkFP4vMm85omGpgbDuiT7q%2BMmWI%2BZxoL3UgY%2F0d%2BJElA%2BQdcDioGXfLg5isPGhEGIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a14cfe5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2574), with no line terminators","md5":"85e6c16abe67c57f69d2c8c7b7defc3f","sha1":"73ec895f2a50c863d8ea3ebe379b6cea63f830ac","sha256":"d4e3b729a67d406e2f89da70f5ba68c04b9bafae8ed779377aeacd854457ae9c","sha512":"3d09869add8668b7dc709514596a96fb70d857c61756aee7e31a840f591928511cb9b7488323094839f44f36c06f22448d9b09e14ea2b7a5278e4c2564606c4d","ssdeep":"","tlshash":"8051780cb0d3f08d5dda4017b26f2564a1763ec6151582aaab38c5e15a58cd1331b7e9","first_seen":"2025-06-30T02:18:00.839676Z","last_seen":"2026-06-01T10:56:00.209731Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-4acb87b4.a96cc41b.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-4acb87b4.a96cc41b.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-134e\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06S9J2MYESOROmBe1QaxYGYPRkzUI%2FZXO28AF7O7Go3BejRjPCnf%2F3xt7OMtvnTyCWIadTxgheMwbWO5zxnUGixdlDkvnHJosDLkbi8nb0gmaiTXNpbemi1%2F%2B8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d515688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4916), with no line terminators","md5":"17a5e0892aeeaef5237292be71721624","sha1":"825cf59ca832baa56c55e8944f37879acea468f8","sha256":"e591ce5c01f71a639f47ea735de6402b56c44f04c2b664473a45b3ff3ff61972","sha512":"7d5eab5473d7065e336c0e4231e5a71bf66989b4d1bf0865c34031756a4e87235127ed10cf5863387c55d1b357110f179f781746e660683978d4238f1a2faf79","ssdeep":"96:PhDHbbeN0BH8e6B/oNzGxNvFMM+ay61C96Du5Htjpy3VQUbb:P5Huma9/oVwsMVy61CMSFaDbb","tlshash":"7ea1f969a3ccd1dcac1fc65bea1e2868222706dd71115145a2a9dcb0a253de88f1ffcd","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.223401Z","times_seen":251,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/icons/ic_notice.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/icons/ic_notice.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-192\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pydHB9I%2FPXRt6ZKNkDikxEtLT7HgI%2FhddVy1bx6wLgVGRSQ6gr81L12pBdm8WFjVcAosbOOyedQPCABRohzcTtQRpN%2Bg3xXj54alh5uiKADbmBtYnPDrl5Y5QwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a8fa8d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"abb53fe2e63bc5822dd24dee0403af75","sha1":"c8fa28643c580911924cfb5b4cf52386dcd8d1cf","sha256":"e380df313a08bbd6143377dcf272191cedba3d76a34e345b77f5935ad6481d94","sha512":"1d8f659b09f0dab32ceda5f7f5c1922b2d3c35ecbc0b7af5dcfa3138ac1fcb789e183ed601f60313bb5b91945eaeb5d164d4b6788def7d204d36710ac2463206","ssdeep":"","tlshash":"6ae08185f5238970efe6313e3c06290cc871a89c3a2482bc288e342c7a0740c47e0921","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.105533Z","times_seen":58,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/e3da21f587b945e3b423c7c9e42103c5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/e3da21f587b945e3b423c7c9e42103c5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8d756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/20ddc22b068045429db6a71fdce91466_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/20ddc22b068045429db6a71fdce91466_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8ef56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-55231503.7b381214.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-55231503.7b381214.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7df\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lccm1lupaJuV1d8hm07Xx797yl2NRkG8ChA4o3Q6fquGasFs07TAhX9yYV0tBLqS%2BPt0ZTuLi4NAi%2BF1zHQnu%2BB7JtHAR6Xq3E2kao%2B6uH3cNDC8PJ%2FvLBvwDeo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c575688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2015), with no line terminators","md5":"baed9f89708b3259796b03ce14a7c3e8","sha1":"2944a019faef359d13004fdea7dc3628e3efebda","sha256":"3c3e6bf1d30ed2f7f45ecccea34bc337164a6c2f50099773608d0ab21a7591fd","sha512":"f78d1e3fbc5f87b51317cd9e327e5c3c97018fbdbdfcbd1f1d1965d7ac8a236f1a825267928174ae63438f177bbfea3413a1a5da2aeed46a7fd54e6dc764df9f","ssdeep":"","tlshash":"d1414227f49c2d2c9137d852852c5dd54ba8ea63e50113e9d8ab2b21cfc39462cb31ce","first_seen":"2025-10-18T07:29:14.301628Z","last_seen":"2026-07-22T14:00:50.134427Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d21d0c2.3f86d8ae.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d21d0c2.3f86d8ae.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4eac\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQnT64r0f7Vg95oQWcQJBdxEIdAmCLpIqjF2MyrEp2jpxRoo%2B5n6iSSPT3ZiNu13Kh4S7XHCCZVyQIlVAEHi6UOjB7FGAyvmjfO8W4A1g8iKHeiHktG0Sbf2GQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a16d1b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20140,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20140), with no line terminators","md5":"98fc4f7d659f3ff5fe223a0005d30e5f","sha1":"8464c1b8138ce0a4b902c403fbbd61887b215a6f","sha256":"3b4fea3e5f45315e8243cf56781d0df5722e6133942671dc592ff479ba8213e5","sha512":"205b160455a2df2174059f4306d93b67d21c207f50caebf6006df72c501c954aaff7770273e5a68c9190e82251c6f62cdec564eaa28947bcb6143ed41b6029ff","ssdeep":"384:S3v3YBYcL1rAAdTRA7v0zwrmSHHHsglQFx+m1OPNtOVSLMyoLyUhyytGojYPFKp:9zwrmSPG8DOyZUoy2m","tlshash":"4f92e6e9f35542f6525d5cc5286f201ba4b0a4262c1a41acbfb5c0e7e8b8fd1787af70","first_seen":"2023-03-10T03:00:05Z","last_seen":"2026-07-20T21:55:16.775251Z","times_seen":1223,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-55231503.ea120e5f.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-55231503.ea120e5f.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2e85\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWod%2BtfNoeJ7LW7mvvGtzbig8yIHgf9IQ0kePR17ZTXk%2FLDu4dXrU45kgzuxBaKKHM8SJqSr59SvtTxrL7fMjI%2FlGTUx4yqiNlNj4Yex8C9LkBaZan%2BtgfyLdH0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d545688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11773), with no line terminators","md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/banner/5/list","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/banner/5/list HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tb4jtRViemQrD0No1faatiirSIXDXxkoLhkiTrScoqaUTYA0h36jvLz8gtuhVksuq5Jc%2BneEvrqez1nn3Ks6%2FrqJc2UK3dLh2tQz6NMw7c42KwMHWUGpsF5YlQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9db355688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e49554b07520491d3d423f71e28f7f9b","sha1":"d60625f425334ba8858c25c10bfc5a1ce056de58","sha256":"a2129d6a0bc1d6b96714a722924720aa8d674fc73f1f7e3607ef569c977289cd","sha512":"56ed838c5eb1fcd9554f95ce2967748af7d5f52e33197cca9cb49aaf3129e3ad533a012fadd7de980332b70ca2f6a6bd793abfcf4f96efef8f320f01c75bf4e9","ssdeep":"","tlshash":"07214c1a927af8f8996fc18648dfb885d4ad732ec4d51eac3481cc1cd58943eab4d81f","first_seen":"2025-04-23T13:47:12.020095Z","last_seen":"2026-05-12T22:04:52.808657Z","times_seen":19,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e9dce6ea43a3450aa9486f376121d6bc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e9dce6ea43a3450aa9486f376121d6bc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0886156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/861c935d20d344a2b75bf3cf10f39e65_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/861c935d20d344a2b75bf3cf10f39e65_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8da56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/87170f2eecae471da045580f7e1adbfb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/87170f2eecae471da045580f7e1adbfb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8dc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6fd802ca3c8e4a07a542a6770a9eabbf_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6fd802ca3c8e4a07a542a6770a9eabbf_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8fb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-e19f796e.ec38c8ad.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-e19f796e.ec38c8ad.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-94\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmrEayx77frZUOFILR6ORGpXLLSeGJZJ5wdEXPY%2BzK2BLUdzuhyj6iArXjpAJgc%2FK%2BKOAsh%2Fmu%2FCObWDis%2FSa5s5jTsIUi%2BjbuJcyAyerEeVoTfVt8tRX%2FCacmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a08c755688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"da5010df73283833c99259d2eed74202","sha1":"6dcf2fd4855c6ced3c3347bb87b782f709c4b966","sha256":"3a0957b91a0b8b9a578dfc7baacd10641eb25c7e8aefb040f8328b188e9509c4","sha512":"b5e28ceca999033b239829e616eb968fbd88cbba0713236212ec94de9288c76c0ba4986b32409261bc49c74156fc654bb939b4b92ad0d1a76e2a3b2033d8a873","ssdeep":"","tlshash":"79c04c71180890bd9137c23000deb5841425f22fd3f354814c06ba2419c6340387d358","first_seen":"2025-07-19T12:02:29.432859Z","last_seen":"2026-06-01T10:56:00.22835Z","times_seen":68,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-74757738.00ab3f07.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-74757738.00ab3f07.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-14ab\"\r\ncontent-encoding: gzip\r\nage: 92\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg2sxdbw9nZTvNyLjVk6dOz0B5qZlr4JMQ%2FItV4sYAuWE58COvmOE2fhGgztU%2BBVrbY%2F38urvTNUifyPQYeAoP4vDk%2FQtGvheZChWktL73M%2FDNZX92%2FpmAOGO3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd6d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4975), with no line terminators","md5":"102639d3a47290757dc5ad3e5a49c7df","sha1":"98b8f6b16bddd9cdcb020c0892f30c9ffe374f21","sha256":"5b8eb0bc42f9affd0e3b34f9f47922122cf3f406d9ec27fad583bfaae5bfd87c","sha512":"38740c561378b07e338fe9b60a70404d22b7fa1380ab15cea5b587da87d84ce12c0fe9e3193e36c5092eda680f82da31bb087fa085b2b8adafce8f6fd8b8cca8","ssdeep":"96:VDu9208GaSVN7kCQfYpGjfwByP2pPhqqtPeVrWpI8Lsl0uS6sl0LDLSJRm5q:VB05aSVNWRFPHMIEuzLDLSv","tlshash":"dcb1fb98f5f7a9e81df68281b03d70195232f1249c03e1d5f77685ee49b6f10150fba2","first_seen":"2025-06-30T02:18:00.864288Z","last_seen":"2026-06-01T10:56:00.232456Z","times_seen":77,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6201\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402b-5915\"\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1823123\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgOoAfLCYibEtqROQuwMVKP9KsVXc9F4Z%2BWu54pViahDNu0LpVyxga5BV%2Foh2TRkxsOd8bU6oVHVuwDiVTeKCRXapoKGfLk0nt9vh6WmAKQxLIei3rh8rt5SRT0FEpx0Aa7GdgwZ\"}]}\r\ncf-ray: 9facb79b592c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22805,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.254754Z","times_seen":1193,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":58,"dns":1,"connect":20,"send":0,"wait":9,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-44853638.dc0dff3a.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-44853638.dc0dff3a.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-225\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAlWaCoQtphBr2ND1nX%2FQHXkqBdqZlsBW7%2FIJcS6fHZkbXB%2Bpc627IvLzUn%2FL4fGRX%2FHgiUnWnxMzNQGVbrfZkZ%2Bxt5lm4vT4kIFU6vzi9QArcoatt7GGYLxu%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a02c385688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (549), with no line terminators","md5":"543c20808701b85c34b0d28fd21db192","sha1":"daafd5e95b9657b6ca14c3481b43074dbeec6abd","sha256":"71c664f917edc7fa00c5aed7e33a9911bd8bb185cf72724db6fb464dd86c9927","sha512":"01768a531f71d3248377d09dae80481262a7a5d1e976d4b3c8839264eaedbab1c2d302280c2786bf3b8b45221a14092e6de16917204087913c120785dfb9a66d","ssdeep":"","tlshash":"b9f0ac36391d0025b02ff76ec45006f4813ce143a52b0ea63a0a33229a675da31996c5","first_seen":"2025-04-09T11:39:55.955972Z","last_seen":"2026-06-01T10:56:00.186142Z","times_seen":105,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-206d39cc.fe15a964.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-206d39cc.fe15a964.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-b5da\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOIsl4%2BT913zaXKKbWtjsvNc0OjvBgPokrVZQkp7Y9WWCtczlVjxZZaLBVJsgYqk8UTYaIGfv%2FiVng5S0k2TRSmnmxTV7c%2FAU%2FkFXwYwWkkTHpfQ87AW0u9PeSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a10ccb5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46076), with no line terminators","md5":"f47d5ab2779095fd9b3d8b4cb0ffdfd7","sha1":"a2b143ff76d0144efd84fd7119dc814318920430","sha256":"74234ede5e703da2bfd18185038c4667a57d1bdb0f4db870bc204012941da76d","sha512":"788f17fed5a83f265f8bb335de29cc7717d769367b394e7d4a3d9290a1c1242b40b7fe7e018a7164a393e4f8aa390c1c6aef2277e6487900bdc3563df7a2e70b","ssdeep":"768:viPESMntK2KxE8nGIO9ntK2KxE+aGw6MntK2KxEl:v9tI7n2tIf3otIk","tlshash":"9223c94cb1c7f06e4a7b5221851f1419e23a6a99e405c145fb3cc8e1b9a8c69772ffbc","first_seen":"2025-10-18T07:29:14.095009Z","last_seen":"2026-06-01T10:56:00.215755Z","times_seen":66,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/29fa2cf558824e6eb45f92ae08a8014f_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/29fa2cf558824e6eb45f92ae08a8014f_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8a356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/daeb3e9ad3fb493e8cbfdbc0f0a87b77_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/daeb3e9ad3fb493e8cbfdbc0f0a87b77_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8aa56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7390313652794bb495974887e914046b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7390313652794bb495974887e914046b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8bc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/98814b15c54a4b439e4087e63dfb1bdc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/98814b15c54a4b439e4087e63dfb1bdc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1190f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6a00eab9cd6743b2bdf99143eca89fb3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6a00eab9cd6743b2bdf99143eca89fb3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27060\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e2d-16793\"\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 977095\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1durAQOcmpYiNgRIfPq6TKViVIougIqqnFD104xOrDWSIas4CMYCsuG9k993K2xlvJlQePFHv3gojPVLxHy0wjd2Jn77%2F%2B4k2RC9XExfAJBfD8tew8Lcjt5%2FWwU%2BjIsocNqWtu8o\"}]}\r\ncf-ray: 9facb79b5925723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-08-08T13:41:47.168862Z","times_seen":1563,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":65,"dns":6,"connect":2,"send":0,"wait":9,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-4366d870.175bca26.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-4366d870.175bca26.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-9a\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpLTdwLRwMz5uNDNB806uMXFWtKT6dBijnAYoLBH7xBKrLkkWTjLBWtpYULXLhE65aKDgc3VgbhpwenpHnGWMLRelwlNlf37N4QRqvr2%2FAIU6anxiQbU1PMYV5g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a02c355688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"92893dd74bbde0d3b99f7961ddc49084","sha1":"a2c4ee22ad640829d660abe7a0e20974076d8312","sha256":"4e87e87645a3cade6841c4948041b6446bf2e4e228b949eb1aca5b568d4f04d0","sha512":"d7cd4cf323461034e2767502d1a37cf02de528d1a4b8bc0fb0905284a72df55b518e23080bd31783e39b330c7a273602fab58b4b5ca8ada4698620a9fe091bf7","ssdeep":"","tlshash":"fec04c76658d6b2bf16af2906e5b71e86314ba27a110611b5a514630ddc3e6160d8428","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.194368Z","times_seen":277,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0e923e.8d2e366b.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0e923e.8d2e366b.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-e4a\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIANf8UTWO9Mz7zuI0pCslH%2BCuV5HIMJEY053sqPA3AbKUurajyprJrBuLoI4cSoMX%2FHLlIFlzNK2Kbes5pK%2B2IpKjit%2B3JpZrzapuaWC%2BvgV0ubIy023V5IEhg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a14cff5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3488), with no line terminators","md5":"5cd88b23fc8f2931b4b8f4d7174fbe3f","sha1":"71e4990884653e12960999e9885d034b71a403d9","sha256":"20469603c96e56a4fe21c108bbc580962e51abd5920005f3e6cc12c0a77e96d6","sha512":"c3dd8dc3202c3fccd5cbb47a83a41b4164972fa459485b44483ebaf748a1a7722a855165d9ace5a417bcf5026ccd7cd7b7b376b7c575857da45d6e8adbed082f","ssdeep":"","tlshash":"6271c79688d3ff9cec266054104f316850313a8b6916e2e8f37855f2d7aab69070f72d","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.259299Z","times_seen":123,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d213517.1d9c21cc.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d213517.1d9c21cc.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5e9f\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXg6RO78ORwI0uO2S10IoEjhc67viYUGEQNnizhNjwWe5kFpOHAAhKpRNuU12%2FOtIxtL95yZWLc7yU3Rqk4sE4ENmdWRVE2gWHcVVhqZLfMHtJ4Wmz%2FRsp8SmII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a16d1a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23849), with no line terminators","md5":"a7c08fe4876958637fb95af48340d03d","sha1":"6d8d46b389fce2058d06de9fc48855fb23bc139f","sha256":"d330977b223c5e5917914c4ebf2a603c3472927ce31e00918ba963aa9b13d1f9","sha512":"f00413356fd68992d5b47883c7db89b34a76c52e204db5441c4a4ddaf3fbeae5dc254b230fde5c6661e819b67e6502c1a9aa34a01588923bec918358a79a9f00","ssdeep":"384:NYoUhJhj5qaL0lV8/pE5TPLt+/NojvZuHoEBjptEC3:NYtPO+hoTjt+/Nojv7I5","tlshash":"79b2c98cb1c7f16a4e67a021416f1519e33d7e89e45cd044fb28d8e0a9b84596b3bf7c","first_seen":"2025-06-30T02:18:00.837564Z","last_seen":"2026-06-01T10:56:00.217659Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/favicon.ico","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 99\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZLLlfX8mYmv3hn1nqv4liKlWKKdoeZqLS5Vfps0Ghlc83357bQHljPpGm2zIG8m3ejgP1BPbe%2BBBM7DXcKqh7v4IVa75pedfNHoKKTMmf%2FoTov3ZflYA%2BnmD4k%3D\"}]}\r\netag: W/\"68b800a6-854d\"\r\ncontent-encoding: br\r\ncf-ray: 9facb7a28de15688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34125,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 578 x 446, 8-bit/color RGBA, non-interlaced","md5":"ba0f5807fabd898304ddabebd2e2f2b4","sha1":"089507a6a1dd588a442cef54301af7ac2dc06399","sha256":"966a8dc85527a77f4f5b49a537b05a0ae25f50327da4f973e2b646cbdf9b476b","sha512":"33909946df2616600babfa0d8d079f8dcb1fef49067b3a9355e0e7c8fe8e569fd76ead6c8a82e0486914752a714a6a7d9d8f8d14f76e8c3e41fe6dafff3059ab","ssdeep":"768:JMgj8Wrhjc4EFr9mjPqTbG52AFjUItMNotJT9X2F:DBFjpEFr9m7uAJUIBBXm","tlshash":"8fe2e1ef515c8eb663364cf49f14ff24e404aa9dbe3db9f694db24140590f998320e61","first_seen":"2024-06-04T08:05:51Z","last_seen":"2026-05-27T01:36:09.471868Z","times_seen":44,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-55231503.ea120e5f.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-55231503.ea120e5f.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2e85\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZGYQY1warfkxQ9HDqMFRw3cQfzeHYVE7inYwB9y%2FfHVYTH7zoepyvpJzD5%2Fm1%2FSfrzf8rACVLTV8Ou%2FxaNjRET8BUM544o9wsWiR5cbXtOMKXP6JLnviEaqVRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a8aa5c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11773), with no line terminators","md5":"ae8154af92809047b6dd2d5d60eafad0","sha1":"cdcdda3b8fe33fb2d3969bc7a9831e39ceb0d788","sha256":"851adf4fe150b6ffc42487b66f677fff1462739f909a688c352153ab1419ba9f","sha512":"562d698304ce7e934a51647d1895cb4b2dcb3b35c1a095dae4be13955acb74d1ef4a4cedd97a9773c408a9da1bc45c81dfd0e6e66f755aa63c15cdbbeb2ff0a7","ssdeep":"96:hzOO/KhO/KPpaimmxQKhMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMLcA:hUMKhMdMGtUcw40zcj2P2VWHl3Pg3W","tlshash":"03324409b4c7f16acc6aa021412f2535e17a7ec55422f141eb34c9f0a6b9c793b2df9e","first_seen":"2025-10-18T07:29:14.338877Z","last_seen":"2026-07-22T14:00:50.011197Z","times_seen":42,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/46cb805e206e4ddab66791b26f66a8d4_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/46cb805e206e4ddab66791b26f66a8d4_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0a88356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/44f891887c664566a106c837b9fbcdc8_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/44f891887c664566a106c837b9fbcdc8_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8e056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-22e427f4.bc3938a7.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-22e427f4.bc3938a7.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e99\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YfuAZZKrcH4AYEmWl5uP7vTZ590wEvRg%2B5UASnB6SZp5rpvkXhkSoFtrlNajnX2lxVp9MwnomNShMNnQuPEs5AWDLBy56JQ11U8CqyfLbMMdlumoAw0lmQ7Knf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a11ccf5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27447), with no line terminators","md5":"bb0d5f5f6b6e6620b7a30fec0845baf1","sha1":"6a6c470f3b6b9de62fb203d8009d26b499713adb","sha256":"97e4f4a870a8e947e1028f76e899eb89bd4dd43d143f017dc786554d339dd360","sha512":"00bb31208b9641b2aa8a31c9f0683b135fe23d6d8163e005e0cb81ee5f507cefc1417ff20ebc356b47bfb90afc598d91f27a0ea801f083a7373fafe667b7c931","ssdeep":"384:Fjz/yR8Vj16EDwF6Ey5pATBPEVxj8/pO9fToSWSJPrPUq3ZPVx7IyMtmjZx68dfX:FjTKCuUXNSDtmjZx66X","tlshash":"4ec2a7ccb1c7711a1cbb3062712f758db336b64c380ad19493a8d8e598ec9d89e67f94","first_seen":"2025-06-30T02:18:00.762509Z","last_seen":"2026-06-01T10:56:00.208983Z","times_seen":60,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d90c97c.170827b8.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d90c97c.170827b8.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-804\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70dIlQWDjy0FBXGbliMgvxMZn0pBndLYx%2B5FKIPJwAx8tOv7Z%2F4L78FneR1quP789Q9KI0V8KwcZLgJSSVwzwojvkBcST4lBb3f6hgPNk944KKQm%2BoMJRdU9uQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a17d245688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2052), with no line terminators","md5":"38ff190d07bd2005e8eeed02e73e4202","sha1":"79e52f2f3e35d773b345238b68ee2813c2854e3e","sha256":"f8a1abb5115294689f2b203f819c2357aadd5e88027c261398eae26d4eac2118","sha512":"c13ec5283526197997540236a214eee9e4ef2cf7f8c99f8d84c09f0d956a35b29f524e39092671f0827ce88c9af414728f2a968383affbe6d544cffb3a3dcab9","ssdeep":"","tlshash":"77413468b096f17d9c32840a245e3230e15e1ff45920edc1f2b8cc97d2bae9d072e69c","first_seen":"2024-09-19T21:03:31.183439Z","last_seen":"2026-06-01T10:56:00.210457Z","times_seen":109,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0d3008f40c504358adcd4d739d106903_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0d3008f40c504358adcd4d739d106903_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aebea856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1066,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1066,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/4dc04a2ebdef4ddcafb359dda80db270_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/4dc04a2ebdef4ddcafb359dda80db270_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8f356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ea39dd9df5184d6bb1bedfb089ed5d50_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ea39dd9df5184d6bb1bedfb089ed5d50_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1190c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6cf1e6f7b82141d498b31dd545a8e3eb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6cf1e6f7b82141d498b31dd545a8e3eb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.3.0/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16651\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fd5-f54d\"\r\nlast-modified: Mon, 04 May 2020 16:16:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1771792\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1LMfPIrMSU239YOPjPXAYVhnnPEotm9w1lygQqVMrh1dAdGA4n6IMyCpsIPfWmRSmtY7Fi8IWEHLLUBX6rI7wR1VAaH3JSuDuJAIl2Z0wsBjHs9evl8oXfLmvOHCpg7e7h%2FhbLL\"}]}\r\ncf-ray: 9facb79b1879723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62797,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62696)","md5":"f0a01fa31e644ca44836356a172ba7c9","sha1":"e81438a79e8a7f34423168c70696cff2a820dbf1","sha256":"840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7","sha512":"a18f9c600996f8f31c046e80334cc794efff550c2286bc822ba7bbc197d99e4ce5f032133866b18cb9743a717b76e578cdb2a9fb5f6ebe42614d08ea1ea2e47c","ssdeep":"1536:XFWQV1ZGORGWiB67hAHLY/IyYT3uu+OLFckh:XFW8tG967hAHM/IyYT/Law","tlshash":"5853e8c5f46134a213e7a2b582bf11032376953a640c85b4b798dcf98d7d98c532bf7a","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.193438Z","times_seen":1196,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-19e6f436.122c28fc.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-19e6f436.122c28fc.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1327\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRDq2S2m8y1fbv8XJI5qiUvdzMvXXH2mdTa68iTRBgSQbKw71d3WnT%2FJj2mHPBZt36v%2BMfJN%2Bzgo8Q7HIOdJcMj3oHUPOTxGwAZ%2Fn9em0Fg9hJiuDsYBucjbWy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0eca75688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4877), with no line terminators","md5":"2e0bc0f3abefef3d980d12dd9a6107ef","sha1":"2de709a2db4ef69f18d8755645be6d72526ae01a","sha256":"42a00d5f218e022212b6487123dd5438ea64f9ee3da4323b8dd6870c03a8be1b","sha512":"3714d19b125886394875f97f6e36c7fa7a5952e080485931ad3ef459e72e493459481facbf242f4950ae19399c8a57de1ef3a3c1fb92ff1baa135a54f986f087","ssdeep":"96:WDHbbeN0BH8e6B/oNzGxNvFMM+ay61C96Du5HtjKy3VOUPb:CHuma9/oVwsMVy61CMSFvZPb","tlshash":"2ba1f969a3c8d1dcac1fc64fea1a1964222b06dd71115145a2adccb0a253dd88f1ffcd","first_seen":"2025-06-30T02:18:00.906349Z","last_seen":"2026-06-01T10:56:00.194951Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-4b346616.a149f580.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-4b346616.a149f580.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-e96\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saX0ObjkW1l5Dq23%2Fy5kyTnMnJqGFKb3aBcgOhbF9xRZXbPesirI5VGMoN9PvHyJXCGyHVV9LRNktyTlg9k%2B3fagVXkqQUAenbnmL6%2FIGTYc%2FIYUb1HpMx748WE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d525688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3734,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3604), with no line terminators","md5":"8872ca58192b8763c01cde655e58a24e","sha1":"21d8cce695a7962fee9275c354c4bf996848a65c","sha256":"8c7be6935e5631fb25fe6dd1b8406b0db0b4c417e94d103a3843d2d0c1b172cb","sha512":"bed9a8fd258f9482f807c54952182dd4fc94e276c397a45822bb8002c12bfe913318552dba07c68b0836796a8a17da33e0adee9fb06eff7a38cae3789454dc80","ssdeep":"","tlshash":"3071fe04e8d7d29a9c7b8502915d1a70f0362fa0c921f043e3bccaa463e5db86b0e7dd","first_seen":"2025-06-30T02:18:00.899229Z","last_seen":"2026-06-01T10:56:00.200555Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/6bbc29f7d02e4c2aae231c77e3f50228_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/6bbc29f7d02e4c2aae231c77e3f50228_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0481656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/186717abd1ec41d1b41bfa1658a0efd5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/186717abd1ec41d1b41bfa1658a0efd5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0582a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c0c534ea60394c7482fd5f63dcdb5b22_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c0c534ea60394c7482fd5f63dcdb5b22_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8d956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7772897cfbb34801879b268ed368e925_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7772897cfbb34801879b268ed368e925_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b3ab1e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1111,"timings":{"blocked":332,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEpG59jmf5ZOuMzoIVIUa6VbQy96NJd3e3H%2Fu%2FgIHyHbtiU3aQE%2BaXSoET126MN2SCxFTd3ORoIJbtDDYt%2Bqcvhq6QT9KG0XeUYVH2gpCwDbpHuS3r2aQYX%2FGO8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9facb79ab84a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/app.d0b60b6f.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/app.d0b60b6f.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2781a\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPWdgUuQsDYZyTP9E5feJKUiXjg1PSoP3T2etd68VGFIk%2FK5pukw0vDhJ0DlmBse9eqr%2BQ3hiIA8tOa1VIjTPQVR9%2BwgvnmMhfrZRTI4TgPi%2BA4K%2BGblLhvPqis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ac85a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64370)","md5":"9c806df89d61e3e0efd1c1e9fc4500b2","sha1":"68dd2a4116cd8e54ffddbaf7ca938d07172c0543","sha256":"075ecb6cfec87e16daac1178a38a51715c60e16f1eaa2fb5462fa0f365371d7f","sha512":"992a0dd658cd74437eef21b957cb0ff4510223e1cfcacf4d7fa1ce6328ff92c4195c1b4fcfcb999e35ad82746a2630de3ec508b1687fbb6eea7f456870f85172","ssdeep":"3072:3kZYwo1OAPkuD336ya5hrCen0eTUIfS0QqX:3kZYwo1OAPkuD336ya5hrCen0eT0Y","tlshash":"60f39997bad5210cd8574e92c6cd7efcea3f491252928cd7b1433baa8b453db238501e","first_seen":"2025-06-30T02:18:00.921698Z","last_seen":"2026-07-22T14:00:50.209308Z","times_seen":81,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/common/dict/allMap","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://td18h.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://td18h.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NfukZG5nCfjyOfOJjyWIeMo7vFeom00i794kub7GB1hS%2BpZ9IQV5ELIXcP4cyWSnhQ%2BPD3h6SrycFhrOmqAdHsLebwXpPi2u9wc%2FcAkBf0X6lRC8ppL4ooxDaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79f6bad5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11841,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28783fed56b0f7b7395887607a20ceab","sha1":"d80467cbb58998ec464b590a2c59a786cc4ae644","sha256":"df8ce596f057dc0a8ed2cb9b4bdf6ae57660a6ccaeee62c26a7005c98fdbbb05","sha512":"57a36f9a00419ded86bf556ffdac775c6af33f2e576aade6e96de1eee51b859c828ebcc2db6aa17cb1b5ebcc1c7679f94b678aa0c8dcee5b52b5bfb145006759","ssdeep":"192:awc+IuwVYwWN3V7VBEHdMWk3LQR7MEjQLHkVV/q2VyfYo/QJLM2Gl3hAjaqxDQUy:awc+IzkN3V7HEHdMWmLQR7MEjQLHWq2O","tlshash":"c532008d664779f99d0fbc2452fc68ae90bd7f761e8dc2546e52b44430b0082aa25f3f","first_seen":"2026-05-12T12:04:29.442902Z","last_seen":"2026-05-12T22:04:52.827756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0d2ed4.404a1f79.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0d2ed4.404a1f79.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-44d5\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33Z9SLXRj%2FtNxwpyxsdamZfZBYMmoJ9mUlJU3EOOsPjKalNo%2B4S56yO1jdQ9W6CfZBiAnqlHRWhtv9fcnIfWocjy4QUjLVt2TXCVH6nrt8ORa1hBa5X07rzNFAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a13cf55688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17621,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17135), with no line terminators","md5":"13c6928599f17d2ad708dd7f4bab9e3b","sha1":"7fd95ca1a3a3f1adb1600edce49ce83357614d9c","sha256":"86e552d551b2ed65a1b6d38021529ab378c6845716e6c3e98e3175a9d30f2409","sha512":"f647da8cca6a948d375bcead5b04e5b968d11fdf1d807bb87d9dbcb000c106c4d77ae3d4ef7965315d8e26781feebf20cf4cd202fa92617bc1260ddd8d1f631d","ssdeep":"384:LoGGUwbV6mRd8M4cLbubqk+1TYbr7+eYjMdjE2RJH1r7:LGuWk+1T4r7+eDdRn","tlshash":"b282a68dfacaf4270fe27325741f208ad22b546cf809455cf32cd9e679baa095117b78","first_seen":"2025-07-19T12:02:29.438221Z","last_seen":"2026-06-24T19:10:58.011156Z","times_seen":49,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/virtual/commission/list","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/virtual/commission/list HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxnnJVPeM2R8D4%2Fbo3CUsfpAGfG6Pf%2BhAqw1H8l3vQWoa0onnVs2anJQ3vpADNTGnIbR2EaCd23qNu1%2BCfsP8XT7Zf44wuGlIF8y9MIcgZ7r3zUf7dQFdA8WWQ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9db315688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21055,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4c5abc087e3007c7329ddf81ab157e0d","sha1":"f29b35ef1dcd08dc1454a86d43aa702d910d39f6","sha256":"5f5cb323525011471d2ca009f57cf171c069f85afdfaeafabf67c7f8e138fdcc","sha512":"22fca95145a27a48382ce086943c961b348156f15622c72b08dd12e72692bbfbb48d8fcab6f28fa446c6975b48c6a8b05cfcfb067fde865e1b5ad1fc64f389cd","ssdeep":"384:el6H4d1sCJWXZY9wY2EOIIHkP8E0/xnXMQQt60Q+Eh2l3islr/La9K7sU34aIX5s:eZGCP1","tlshash":"ae92ce1f8379ecaed45880835b5fbae7d484b62fc4849fd425b17d1c8689c3a1e8e41e","first_seen":"2026-05-12T22:04:37.78737Z","last_seen":"2026-05-12T22:04:37.78737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cc8595ea7c8e4ad5b06d147c038d97f4_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cc8595ea7c8e4ad5b06d147c038d97f4_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aecebc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":771,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1c290dc4d7134905b96e7ab415f91311_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1c290dc4d7134905b96e7ab415f91311_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af2f1f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2f96a40f40304bf2b777394736ad5831_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2f96a40f40304bf2b777394736ad5831_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af2f2156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/app.2212e73d.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/app.2212e73d.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-10402f\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7CzzNrUU5MO7hgep4ZY2sanBsUK2FdsMYgOvS7xDABm6z%2BZmlrmj4Ed1oekR%2BzALMrMFJoERTCCAghEqFc6Q%2FR3B%2BI8G0EDWF506fc3QUvVn543%2FOLIMRGtPR4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ac85b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1065007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52570), with no line terminators","md5":"457852577225ef8f55352ce0cab5ded9","sha1":"fe8f67f3f75a04cb437e77b94a45b19d7fb8cee6","sha256":"79d2edd40bd655f033e576e3af749b388aefb4edfc42527cd05f8a0538332089","sha512":"02426f41c08d4123228cdf2c6fac257657f1488e1857b4cc5eaaf332ce00e362d9ba4428c03f73feae9d7ab434d99c2824ac850b124bb5a059830b07441a7d5d","ssdeep":"12288:etFp6YfZIflEQrEf4oYYq25hn5g2xp2GFvA2A45BuoEkczSPACB2oaN9jzT0HWlB:ORjR55EuG3","tlshash":"c9355bd822eef7b515429109410f3b3c42191fb9f156d2916876e98839edff48233eba","first_seen":"2026-03-23T02:52:10.102175Z","last_seen":"2026-07-22T14:00:50.072479Z","times_seen":38,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 7869\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402b-60f6\"\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1823123\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tS1W9KZ3S%2FDD1XiCEqxceDH0BmFZJxTZkE9Lhf%2B9hQuzQSi4P%2FAYfOqnERaRGiM6CmQLxen%2FARYb%2Ba%2FGk8M1nU8bFMWb3ByZHRoTZlAftjQJ837FiSMRm3YCfW7HM2tnEAARxvM\"}]}\r\ncf-ray: 9facb79b1878723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24822,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.16939Z","times_seen":1214,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-0ce41c5a.4006cc4e.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-0ce41c5a.4006cc4e.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-1292\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2quMVQHLmNOwYdGeRLKy6O7ZwefMoAUkAJZULb0vGsPjqXT2WAWdISLHiL9bkdiXGmjzXtYKZZlQ5O972BoMuRXTLCx%2BuXr2XPtUUDp0Dg83dK8LkmRZ6TQ818s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbe35688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4754), with no line terminators","md5":"f2cf758791111fd2d848603463e99178","sha1":"6efa309eee6c7aebb25f7eb378ebb367680cea9f","sha256":"be18a5cd6c8dd5547446a18363472d5ee56a0d2008b3d187fda6f866ed32facc","sha512":"33df9c558a43f266d0231279d5d2c940a857326b2e9e6de968d1b17983e6a784938bc4de991b04007f737e16b67f475a7c1fbab4e82228b22ec105c37d238cb3","ssdeep":"96:92hnM63MqkM6uoSYbc+7fb3bDb9UKUea6:yM63MqkM65bc+7fb3bDblUea6","tlshash":"eea159db78d68112d277ea5216ccd51adf336be73ba10cea71d8284dd706a80631f0a7","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-06-07T01:38:16.110616Z","times_seen":1107,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-2d90c97c.245bb9cd.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-2d90c97c.245bb9cd.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-12ba\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHDp3nSd9LLhFWvDYDA%2FFgiOKto1tm19WeRdaayu4dqEp10sx0vLVj84gQY%2Ba7U6icdm9q6aTDJ%2Fb2xO%2F%2FoLEXqPQcV3aoX773jDdYHU0Uq9lVf2RaPjuEg9EI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a02c335688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4794,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4794), with no line terminators","md5":"d81af9f0fed86f2336e72d4dbd27b0eb","sha1":"f7aaa56d9a8bd8ae249c346f868bf6a66e5c4d09","sha256":"93cd6c5726c486853f54f0522bad1d31d143d5ede3f3d41dacd43b1297cb0477","sha512":"b7220674ed2cd37383d4cd6840f0f7b9bb2e0301319a7c9fe9786dc2fb91bb94a3ba5d41d998b3dfbeae59ce2af1bf3156e12f11596711bb921471d799bcde7c","ssdeep":"96:RxU1M6UMqhM6pLxmA94d2+Wlfb3bP4PUKUez5:sM6UMqhM6Z4Q+gfb3bP43Uez5","tlshash":"2aa18fdfa4f68111f1f7de6217cc9445de326fe339a10ceab1da148d870aa85271b0e6","first_seen":"2024-09-19T21:03:31.100076Z","last_seen":"2026-06-01T10:56:00.239006Z","times_seen":250,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-0a888720.79a39264.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-0a888720.79a39264.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-2d60\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66sx0i2HyaLNA2b%2BMkrRrL9WMvpwGwBvzP94OT3z44XOJZ7l5%2FHRFIx5zED2KSTG3akJPBPyLqXWzkggSKns1GZ%2BSBtTjPDcoOoLhqiymzUWLkd6D5hs3Eb8Z8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a09c7e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11540), with no line terminators","md5":"0b9e6201702e9ef11c5c3a4c3a1f64f9","sha1":"6a4748a1758daff2fd25b236cd246633e3873f7c","sha256":"6996d0a4d1e3559b00e7cbfcf627f6816a0a5a06d9e7be3c9226c3a68b95e459","sha512":"e44f5d8391c63c17a3a90119c8aedfd7a4120d0d3903b5a2b00219bfbcf65ab7339db503af7bfc071e39622dd50b34babce8fa8e3d2af596cb7975903d15e52d","ssdeep":"192:3ugiH+ttVS72rfDyFqINV2bYWqNVqV8tQhrqj44ACc51YZ0E:3uWfDQOb31atQJ4xARqZp","tlshash":"a832a88d72c7f01647a77331d01f100ae27aa998f4099185fb28d9e1b875859b32bfbd","first_seen":"2025-04-09T11:39:55.963244Z","last_seen":"2026-06-01T10:56:00.228919Z","times_seen":107,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/f758248ec1dc4c23961504ea4b49fb22_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/f758248ec1dc4c23961504ea4b49fb22_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0887156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c4da1ba6573343f9bbf14fa3b14419da_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c4da1ba6573343f9bbf14fa3b14419da_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0b89556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/4d36e37d728d4f8d9b713fdbb03056ff_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/4d36e37d728d4f8d9b713fdbb03056ff_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8c956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 122414\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619608ef-1de2e\"\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 490815\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuZdCmJFvj%2BCyugL53955nbci3CEQECGopQ4HZTYhl%2BECZ5t%2FSdZQgEiMmWKY5YZ37HsPUa4M%2BYX%2BEJFOXaEUhmSLY%2FpoFmBq%2Fg%2FNestkhfpAqx%2FT025eolQ72L0xYoBpFQF2DwQ\"}]}\r\ncf-ray: 9facb79b187a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590640,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-08-08T22:29:34.880423Z","times_seen":648,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-1d8200c0.68ff336f.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-1d8200c0.68ff336f.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-790\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EZ26g6Za4Y%2FvSOelTuN4myRb%2BQMoxaels2olwfQ2Qmkjbb45aqD2VYzhJQyl%2BeXzrEBdheQ%2BLYPeJfLvIXwCJnQUqUHhaTsLqEUHk%2FDSiamN5TNCCI2x9roRk8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbed5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1936), with no line terminators","md5":"ae6b44f25ea0633abb1972fd12e58aca","sha1":"8c320c348eb188f35693c586e2e740a4ab377188","sha256":"71d36942dd08d28d0e673d926aa9313c31dae8e60e9da4d5d0ca2e66ec20cc5b","sha512":"5f97436344e6e7ee6f9d07bd777dbe87d7cdf1e4c16ad8302a7efa8f897e2659e5da69e4cb95cd4e79a4784ee75331a3793f1f396f8647703e3b04558a1aa55e","ssdeep":"","tlshash":"c64138b67e040016bd2bd81ecba410c771ba6532d12345963973bd24eba7af032ef791","first_seen":"2025-06-30T02:18:00.903678Z","last_seen":"2026-06-01T10:56:00.193536Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-4acb87b4.1b8f641d.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-4acb87b4.1b8f641d.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udS3MD%2ByzeKa8Q4QvxQIAQIilQHFpalj7mVgfMkZoYRRsdC4EF8D72OpUkyvmHsyJIqr3tOLxRgI0D9OazQ3FmE7Cb84MWDOTo5uy67IW817jOERKO88fjnGkgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c555688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"63a91d823ad0600516e8142070f73022","sha1":"3b0cab14963a46b974598c88d60091229973a527","sha256":"1c3f2cd35e863cff9028dc65811b7e2eed91c9780bf887d7ecb29ebc6bcf5565","sha512":"deb695cd0e1585216a1bfbb391af8b561d3019893fa06b2e833a36a002ccc0d1f1b59e6a10ba2fdacec64f38bdc3fff79224335606f53491f9ab6ff9290417ff","ssdeep":"","tlshash":"6cb01200bc0c0c0d0ee3d3482064da871410ab13c980339f3da1c9308f03170b403c89","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.236614Z","times_seen":265,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-4366d870.60bd4013.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-4366d870.60bd4013.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-760\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZvgXMBeuApLGDinb4HB7AJ3efcsVaGh3Nl%2F7NdOVJhNZN6JN0tAipGjN%2FwQXPgzxkjEy7daHBZ4G4H2JKvsfJjYCRktdyPwUJ%2B6tymlhN%2F3SCm4h2t%2FQMqjqks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a17d275688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1880), with no line terminators","md5":"1bad28d40532cfb347b325b0ab26b0f9","sha1":"98dae2768f84d8b9f58f044077dc33da68b9fbc4","sha256":"f25b13e2bc2f948a5c29f39814b304947a9fce6fccb7c2100591ce928a5f1ad8","sha512":"a1f3f37a9112509150cee74a267b8e43d6c83c0a09781ae4a6fd8265c154b78fbc801bd1140efca58e5a460e956bd062a12c93e7560fec587cb8acc739ed8a9f","ssdeep":"","tlshash":"bd41234cb183f0a907eaf126701f231ed2b56a95a81194795de0d1c0bf3266d2237aaf","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.261517Z","times_seen":119,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-4a224979.246b7db2.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-4a224979.246b7db2.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c61\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGxt8in5KWWus1rFXUUYVOhqGUCc5j%2B%2F7R5clS8jg6Lf0%2Fi7LxgGQPWFtmzWTv5zIqIX6ch6vbgcg5kwyGEZx8oEfk9YuvT6dTa%2FeJq87lvJkUtJ%2BiFlBV8GKOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d505688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3083), with no line terminators","md5":"b4792c42c75fef8ad3f1159ef3fdb587","sha1":"21aabf5cb8110e614dab5f8ecba0e13299d76b77","sha256":"156be5bc11c900d5ec8ce330e36aceb810a1a118a4442427ad028e6af93ad289","sha512":"e0c2ba5af9242e54f2771a0595fed02237726bedd33bf0e193c1650716017011392da1d3116c5311863e68c80767b05a59561ffb46210213b98a2c08c31a5dcf","ssdeep":"","tlshash":"0d511158a447d2aa9c9f9063e51d1731f1b57febc402d083e3b4ce805658db4372fa98","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.208381Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/front/bbbfc7b99d884d7bb654e443a8195599_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/front/bbbfc7b99d884d7bb654e443a8195599_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7a8fa2556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":764,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1a40669198d14258b748271bff89c6da_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1a40669198d14258b748271bff89c6da_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/965f0ca778cc4761a7acdae3469cc5a1_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/965f0ca778cc4761a7acdae3469cc5a1_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1190956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-vendors.0959c18b.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-vendors.0959c18b.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-cb1c\"\r\ncontent-encoding: gzip\r\nage: 101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izp4YwzdzYEVvEDGiCYJ3%2BFVymwtP9DauDlpbFpwFsXxjc%2FaoLUaJFMCRTlVXLwNAyutwag1hY3SbERhS%2BRUhVtC5udk28OffHXx%2Br0jvfWUsFct57xTCAebJHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79ac85d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29775)","md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-07-22T14:00:50.013109Z","times_seen":132,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/box/bj.mp3","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/box/bj.mp3 HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztMOPfX9znakhIZZOpjLWC5dK1NhrFEAbU0dKkZ0Y232kvGeMRyjWjrJu%2Fb4ha6QkOGCOImTsqm20iI5KvGjdHDxXe8RrmHtcdFtLBLf4vtNtyk9V0xOhkEWnDE%3D\"}]}\r\ncf-ray: 9facb79f7bc25688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-4b346616.5f36c1ce.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-4b346616.5f36c1ce.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-137\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efxbsdRv0GbwDCQtNCrJCdVMgBHpAdBHCSOPgQO%2FWO9E4IuikkywAiQ6WJeQ2NxbcEbRSHaDpT2re0Q3vNj%2FKYZ2%2BKsiRynqA4ATxAPv%2BjX%2FJZ%2BMiW8D8zjkRyM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c565688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (311), with no line terminators","md5":"08d7468828b9d3af79f2beddd30ea454","sha1":"9d937dabc497e1d26fc72d16e44d6c38397ade66","sha256":"a5f727bac268f24c09680cef211f65c30cf1a3b5c7df78b2db92b215344f80d8","sha512":"810377a34e3b7d2e2c00123d4a43a72145cf349d9efde2914d6c7868318acc25b7a4082caae4d36b788f6104d4d709688062eaf0a57787cad6c5c62a302a87b7","ssdeep":"","tlshash":"c9e0c21a79ae20092b3fd3cbf4405fd894a06b12dc6847a3ec8247350f0f2f62b00a89","first_seen":"2025-06-30T02:18:00.922588Z","last_seen":"2026-06-01T10:56:00.183085Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-1b5a0ff6.73cdd133.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-1b5a0ff6.73cdd133.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-af1\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZzRUoU3WK16thm6ADfiYIcMA8WsS6viYDfBPshHzvR7jn4oSMcGU7vQG1urbf2Iu1%2BLEJ844OGfzUScbCCWUDAa5mHUdPGiwsvHSjRiOPCweDJ1F%2B13wviCkRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0ecaa5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2801,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2801), with no line terminators","md5":"f20fcc67b5bcdbf76d1fcaf70e39cc94","sha1":"fc9dd05191827fd72e5de36cd3a1b6e4512fcc7f","sha256":"ed307e364c733c0e394bad53e71b12208a2d289df7ea3e06c520a546740d85b3","sha512":"c0e601058a9b08c3c566f0b78676591257246a010aca294414fc3399ca847af9a76821f627962773b95f5188226b4be8917b1c3d01431f3fbf94c68632bca4c0","ssdeep":"","tlshash":"cd51842c7192f4bd4e67b1a1452f7216e13a36451035e881f760cdd0a7e5c5f523ab3a","first_seen":"2025-07-19T12:02:29.488808Z","last_seen":"2026-06-01T10:56:00.199979Z","times_seen":68,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2adbb60fe2ac4d00b360e12edc9c2d81_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2adbb60fe2ac4d00b360e12edc9c2d81_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aeceb456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":802,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/2056021d90414d918850f5a2ca8cb16f_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/2056021d90414d918850f5a2ca8cb16f_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7aedece56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e0a81405adf74439abc19459a9c37231_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e0a81405adf74439abc19459a9c37231_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0885756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/5f03540dcd554fc3b12b0d3eaf6dc4f3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/5f03540dcd554fc3b12b0d3eaf6dc4f3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8a856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-1b5a0ff6.5bf61409.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-1b5a0ff6.5bf61409.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c3\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddLcFwzGDdVuFuvMvXQMX7Kg%2BMfUCTYhUTTODxdwWGIdgFqt9uBKZINxkPyvFg%2FxmGsMIBhsTDGtTbcySn3TwFRY6dGGVimG1NNUsjyJKbtUMwTQIp%2BZ1jlw8nU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbe95688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3221fb067b1cde22f7a51f3e176d770f","sha1":"4cdf60b231ed45d5d22340945a519a1ff2d8a59c","sha256":"3262ab79ed69af173a45cf6ebe34046a3e5a5423c5a0b49fa001ceaf86324ebb","sha512":"034b963413d230db730001b883a237049a791f3a9ccf111ccdbb5f31d82c02de015f75f10e1b469e4464d788fb766c2a04d228d18e1ec7fcd90e0b4f53e1979d","ssdeep":"","tlshash":"37d002b1291de0bbe637c16501dcbc449165f626d2775a41c9c39b2819cb2033eb4398","first_seen":"2025-07-19T12:02:29.42352Z","last_seen":"2026-06-01T10:56:00.22532Z","times_seen":68,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-1cbbb860.a57f141e.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-1cbbb860.a57f141e.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-166d\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJmOwEgLhP5QyI8wC%2BzgVygnQK8R2lNlJ%2Blg3c5ND4E2tf%2BoQQrf1YPfhx2JLGTjMYT%2F%2F4eTxYuludmSDitLrE1K%2B2%2Bo6miVYMgaiboExa0bHRULhduGVT%2FSj0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0ecaf5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5419), with no line terminators","md5":"3a4c54ccf2f91c0f82848d2ddbec8961","sha1":"776d35e67a25b6d53cedd8c99228a7b53e693b5f","sha256":"ca99699952ee76b8244a575fd4397fe1bf2ca9424df1afb18ba6f461b5a29534","sha512":"637319aaaa6a3cba86ca7a50f5fe20f3af09cc695ee18db3ca039c22c65302fc8c883ddf35f4f007fb0dce7d26605f7e357ac22c1f5b48e0101fbddade9c055e","ssdeep":"96:uwh6S/u208GaSVN77UCQfYpxjfwByP2pAhqqtAeVf22I8rsl0uS0C0LDCS0zVr:u205aSVNKaFWyXIyu/LDCS4","tlshash":"5dc1e858f5e7a9ec1cb78281b03d7025a232f2249803e1c6e775c9de5ea7f14150fba5","first_seen":"2025-04-09T11:39:56.022377Z","last_seen":"2026-06-01T10:56:00.219569Z","times_seen":109,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0a35a2.c4556ea5.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0a35a2.c4556ea5.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-4c8\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0pBtqBr26KOQVNavR5Z%2BmrHDw57nlTfthOzUUGavL0KQb0oMoWUlnPN5lmLvDlE0Dd2%2FYjQJQa%2FFAog0n3fgmagdHy7Tvqg426IUOMPeBpdNjXV0rnp2HNFHRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a11cd85688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1200), with no line terminators","md5":"65107d72da04c1cbca07ce7505dd52c9","sha1":"59f0aaf3238f3930dfeb8b72766c5c326a2173fb","sha256":"e5091d66e518dd0250dd6bf49ca20d18f926dc0d872419ade3ac72edb96746f9","sha512":"668adccd98e0602575b37f5d887dbd5be393853a6acb597f79fcc6fa31fbf434703707b9c328af41da6873378d98c26c234c71e0b058677f674bec95358f5d2f","ssdeep":"","tlshash":"74213514f053e9d4fc7f9445222c7334e062bec58946a1c1b9b8c69553c4c651b1e79d","first_seen":"2024-06-11T23:26:01Z","last_seen":"2026-06-01T10:56:00.234251Z","times_seen":259,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d207f61.5777890d.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d207f61.5777890d.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-a3a\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9F2O6EIt8MR5fFabfmSbO6wSpbEkNziBXItAeOq56tElFqLc4V2%2BtdyGn4EUhMxY0edJUeU17OMqf3wLQwi3CnYFWmn%2FSwniwWvBRFRDtsmIEpct43D9yhNjzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a14d045688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2576), with no line terminators","md5":"3a114186f6be942215aecba1a5e8f0bd","sha1":"b1fe4469917a7b0a5f948801440967c7e436c29e","sha256":"9dcf1dacc6bba72317f67d47f5ce5371d3b6c121a21988d7b1531915cfb66564","sha512":"18ac6131c93227b662390b292f14c10b04ec9e03be914ae28332ca3ddc457d61a6456ec057d6cc254e0724ab5a6d661bdfb2b257abaa7133e0e2805ab6153e38","ssdeep":"","tlshash":"db51770c70d3f09d4d9a8017b22f1a64b1b63ecb2515c1a9a778c6e15a58de13317ff9","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.217003Z","times_seen":257,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-44853638.a268897a.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-44853638.a268897a.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-598b\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKDOkwVUB0KycaynCgI2UEB%2F8cvJ48MB9E3T%2FoBR88fJ38%2BuG0ptn%2Fn3ocQUKzlexEbuv0Rc2WSwQv9LTil%2FLOOHIoDgVpuxpE3K2HAi2pkB9E0qmM58O%2BNzLaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d4f5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22627), with no line terminators","md5":"079213fc155480bd62209dc4257cde1e","sha1":"8e5a547fe103f6f06dd800ff013f65fd6ffb6926","sha256":"6c94351db225214eedb9f5bb34717f1a1af329510f51d1c800804ca9da0ea672","sha512":"d905c6322a78faeedceed25940fa3bb7f2bad21ad53c959d75d6cef404eccbc2484ebf8f9d522fb12b124c9adde1b228284357601a2c3f8fa1ee17fc48c878b5","ssdeep":"384:8TOSwD92BtWlp+zp6iTu8xM0qP+dqA5raGJd:8iPE18Su8xMidLb","tlshash":"6ea2c748b1c3f16e8a7b9521811f1929e2396ac5e416d045fa3cc4d0b9a4c6d2b2fffd","first_seen":"2025-06-30T02:18:00.747245Z","last_seen":"2026-06-01T10:56:00.234817Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-680ea45c.bb5af193.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-680ea45c.bb5af193.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-ab3\"\r\ncontent-encoding: gzip\r\nage: 93\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6e8hl46PxIFxvJ%2BT7kRxS8d4OSWzqVrNNH56o6S7X2k3Lttck4k5Xb8N5%2B1yFTkgXBvkl0l5zVX5jNMua1xsxbSEZXQ7alkd17EK0ktIZIv3yRmPRUY7L3SpOcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a19d555688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2739), with no line terminators","md5":"0229ad5705203b258375deccd035a1c5","sha1":"948a1c31b40b0944de3f6fedcbe1c4589685d082","sha256":"f0fdd44dae1197cb964f9ebdc26ad8beb30f7cb52591cf6c14caf22d551a00e8","sha512":"be231cbac8962637bdf3a64be6ba50c723475b656f1bc10ce79cefa9283b49a931a5088b08beaf1f35108f467f51472121bd92e85f4829bfaac4ed78e1d2b25a","ssdeep":"","tlshash":"7f51612c7142f5bd4ea7a161452f7216e13a35451075e881f760cdd097e589f823ab3a","first_seen":"2025-07-19T12:02:29.44903Z","last_seen":"2026-06-01T10:56:00.212728Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/common/dict/allMap","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://td18h.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://td18h.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwAc78%2F8ViXqnG7JcGvqzGYgoP%2F9LoW72oEGmakpok8rqy7%2FCROSTXvXnEKX8MtpM7t5cIRGN2rmAVBxpliFXLpdV9kNoDHd9GJLFMMWOE4%2FtGtyejawXau1IHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a47f355688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11841,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28783fed56b0f7b7395887607a20ceab","sha1":"d80467cbb58998ec464b590a2c59a786cc4ae644","sha256":"df8ce596f057dc0a8ed2cb9b4bdf6ae57660a6ccaeee62c26a7005c98fdbbb05","sha512":"57a36f9a00419ded86bf556ffdac775c6af33f2e576aade6e96de1eee51b859c828ebcc2db6aa17cb1b5ebcc1c7679f94b678aa0c8dcee5b52b5bfb145006759","ssdeep":"192:awc+IuwVYwWN3V7VBEHdMWk3LQR7MEjQLHkVV/q2VyfYo/QJLM2Gl3hAjaqxDQUy:awc+IzkN3V7HEHdMWmLQR7MEjQLHWq2O","tlshash":"c532008d664779f99d0fbc2452fc68ae90bd7f761e8dc2546e52b44430b0082aa25f3f","first_seen":"2026-05-12T12:04:29.442902Z","last_seen":"2026-05-12T22:04:52.827756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/country/uz.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/country/uz.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1341\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-53d\"\r\naccept-ranges: bytes\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pb1zKbEc%2FIgX676mXrCGuY0lt9IGHUHeapj3itD9iWFUuTgF4QuXdfQYxo1qKSVpmuGUHH8h0uuCRsGPVW81ox3BEcjsVHdcPZ0ERftsnN08G%2BS6yssbW7gkYUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a8fa8b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced","md5":"ca41cb18e955c2d0f06d6d9a04d23b07","sha1":"dfdcf9f6d6276d277ae737e794aab6c11f1e21ec","sha256":"fad6db29e5fe3c2abb8334cce95777f8c3c7bf2db59ae10e39834f9d02a87a29","sha512":"1651ad057d7e8e74ead9d2ce7f8730e3dee006bbad8a44047eb76fa93048f9815a891dc0c151085910e28316f70d6a14796a434778d883c88bb2fe9d66bba411","ssdeep":"","tlshash":"2221a8865be9a07dca27368b0c913f30a41c87bc706151a826b4a26eded6e49d52c464","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-07-22T14:00:50.182864Z","times_seen":47,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1299\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec5-f2b\"\r\nlast-modified: Mon, 04 May 2020 16:11:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1047136\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fG4ebJX5Dn1RxqXc1CTBPijwiaVhbPKfxGqNsus4CtOSsOlAaG9QY2eW%2FHtmINIbTL3pP970zB%2FBhpL495Kqy5cE7EZTiKQrBNYMLqiqPHMJEIMF5eYi0zcOSb2qIwaNGWqF4haQ\"}]}\r\ncf-ray: 9facb79b1881723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-08-08T13:41:47.154699Z","times_seen":3508,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-19e6f436.b313c630.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-19e6f436.b313c630.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-6e\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Fi%2Bez6R%2B7rAR84D5FVB1Bm%2F9aaloo9gIdRomi%2F58%2F3%2FJPWsvQ7Jvn%2BR3Qn0gP2wGlW72m0v74%2F4pTqymCOPgsGQ1EQndVisEn7zYp%2BLYIFOPX52D7%2BEHIaVRao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb79fbbe75688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f9d9f82e65f7eff1cb8e131e0b71a4f0","sha1":"249cd39b95839347af6d8d0dbd1d4f80bf2d6bf9","sha256":"16a28002d833971b2c0ff5252e93461a84c69cb02e95be2ac634ceb9b7bca019","sha512":"cc6a5e790589789c4ea19bcb5cdd5b29d4d2196631d56765469d4c3d9746ce99a5f7b12df2203c97466957c52d4afe781e49a33998acb9ddab735953cfa64b22","ssdeep":"","tlshash":"9db01240f80c4c2f22e3d3c82064dec536103993cdc0939d3ca8c1228d231503512ca1","first_seen":"2025-06-30T02:18:00.800899Z","last_seen":"2026-06-01T10:56:00.202567Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-206d39cc.ca6a7c12.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-206d39cc.ca6a7c12.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-25d\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1WKrpT%2BVg3JCi%2Fntz6hfOTcxbgTzcuF%2FdfR7W9qIM4ykAWkeXDi9Wy3SCzwKaiQt5r7Auvk0eJcSgdp922MULpP%2FNXwbZJXFUD9RwEkNpy4KDzQzav0hkumagk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a01c295688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (605), with no line terminators","md5":"9859ac42814ba16915f4bbde321961d0","sha1":"6981964e0e7f875688afc8f3bc15607aad67c663","sha256":"7632b8d3825c45debf2fd39b10c62cbd2405f512e63d776bedfcd530ab2a0464","sha512":"659c8ee4eccfd3b98c54a9b721e9bf465190e8fcf2cfc8ac5cfbb66748fd7cd05dcb6ebe4b7ccb36fc9664da3db545df3d55fa5980ec2ec1a8967922ebf05cca","ssdeep":"","tlshash":"bff0dd36391d0029b42ff66ec4800af4813ce143a21b4aea3a0a7362af971da30586c5","first_seen":"2025-04-09T11:39:56.05907Z","last_seen":"2026-06-01T10:56:00.225873Z","times_seen":105,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/tabbar/work.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/tabbar/work.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1736\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-6c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYB%2FMjqKxgfVbeRFSTJoHGbxcWjS5geDo2pfJDEQNPL8vbWzMRZP26WMKkYuRgcNGw7HMiLVTD22eSyIpu3ES0kkNP1FFYKDMKHWK3Hbg8Hu1%2FWxXSibM4KryTw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a91a9c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 48, 8-bit/color RGBA, non-interlaced","md5":"bdbb6ff7b3a99d44d2b5d0a81bae3261","sha1":"117ad42cb03a00523864aef54bf83fe96292d401","sha256":"05c5c12d4f4cf615f695ab94b8ee03a2a62d4e560e930940d7f14e7b039bfc42","sha512":"c670cb3ad8b3b3da42d907738a701d6c2927728a00184925566bd906f1ca41e2a0acdae5573e5ceed8e158b7533c8f492c032033bfb6b90d8cd493c865b7f628","ssdeep":"","tlshash":"b731e96b29841c9c489055e943365ea88c2c2b9d3e3a7e24e1048aaf0a0d2f988ccc99","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.108117Z","times_seen":92,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/poster/homeList","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"POST /api/poster/homeList HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://td18h.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://td18h.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaDDKWenfzRLO%2FNzl%2BxZu9yViUgSlWv%2FKQRXBaLSIQLLXza8lUQ8KRI0CX432OVAP3iQOMS9RWUufjh7EZDPwmyb6k4KL9sY%2FI%2B1qrD5XAJAQmuLH66qsNpN4bQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9db345688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/63d21f7521e74ad3aa956d782855e861_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/63d21f7521e74ad3aa956d782855e861_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0683d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/356ddeeb8f4a4db6a2ffe6f4798498e3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/356ddeeb8f4a4db6a2ffe6f4798498e3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8ae56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ce83def00e254db09abeb9f63cb450cd_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ce83def00e254db09abeb9f63cb450cd_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8b056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4213\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d6a-3546\"\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961713\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hsug9DWymUfPs1FEs9cqIiqenrTrEvtClu3K3P%2FrUf0HLj0l3iplwa0vWnxrxbvPsylbvwQM71NbzA6Kq3CNzASmKjZ3swGgZXMJW9Cn23qrBJct0Fwwoa3Qp2mbcnsgKepIkg%2F2\"}]}\r\ncf-ray: 9facb79b5927723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-08T13:41:47.205688Z","times_seen":1219,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":61,"dns":5,"connect":4,"send":0,"wait":9,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 28993\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf2-1f6e9\"\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 407892\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwk08%2FDOmkhxpHC0GVk3HHLp1sIrAg7lH4BxBvguEyG5dsrNr6ehpPzQjgaN1f8SEvH1Qk2Nyd2CZUndkG%2BSZ40CgLZz6jF%2BG6Go3yYc9LtUcdc7b8eTIjfEx7Lc5BWLAlFRLoFi\"}]}\r\ncf-ray: 9facb79b187f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128745,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-08-08T13:41:47.153866Z","times_seen":2478,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0cf330.d3cb0e12.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0cf330.d3cb0e12.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-893\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lC7V1fTbBqKjFzsrD74TAcZBUCB%2BBZmnuLmo0iIyCuPTi5efrpEsjofKsaiqgS%2FqafyF9tG4j5ADy7kX4jT9kFOt%2FXgeifWEABIyMk2Mg1VjyQfqOBhj1YFinmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a13cf25688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2183), with no line terminators","md5":"940b7b1594fbb05b40ebad18fa7000e5","sha1":"ecd71236bc23c695c06da8ccfbc33e0eac2910e4","sha256":"ee1e38b7ad5206dea00e0f500875ae3bf88cef0f8fc8de8b9659f22ff1ae5a4d","sha512":"bb98d694a3cb128b1cd66ea613a39f919126c0287ab28e7c949dda94483c31fb96ffe7d09929e176b66ba97aa263c72d485a3833d40790492c63a413ffe508fc","ssdeep":"","tlshash":"c6411108f893d2bdcc7ea825562f1674e1709ed44504f151f63889b1a3e0c784b5ebed","first_seen":"2025-04-09T11:39:55.904569Z","last_seen":"2026-06-01T10:56:00.226407Z","times_seen":106,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-55231503.7b381214.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-55231503.7b381214.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-7df\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKEgE7E%2BRKbrQi8e3KarHQACJKYY9QZYCZaEdv3z8MVE1wak3v3KKD%2BrqRn5%2F9nDQxB4vP6ViRjheYBNRY5eUhdF4Fb5petxmfuKCPSTiAWXmHYwrHmA5fFY2aM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a8aa595688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2015), with no line terminators","md5":"baed9f89708b3259796b03ce14a7c3e8","sha1":"2944a019faef359d13004fdea7dc3628e3efebda","sha256":"3c3e6bf1d30ed2f7f45ecccea34bc337164a6c2f50099773608d0ab21a7591fd","sha512":"f78d1e3fbc5f87b51317cd9e327e5c3c97018fbdbdfcbd1f1d1965d7ac8a236f1a825267928174ae63438f177bbfea3413a1a5da2aeed46a7fd54e6dc764df9f","ssdeep":"","tlshash":"d1414227f49c2d2c9137d852852c5dd54ba8ea63e50113e9d8ab2b21cfc39462cb31ce","first_seen":"2025-10-18T07:29:14.301628Z","last_seen":"2026-07-22T14:00:50.134427Z","times_seen":42,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/0913d86cad4c4c53b5ba1b2e2af0598b_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/0913d86cad4c4c53b5ba1b2e2af0598b_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8ee56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/5752d4259b534a1f9bd3232b831e8b86_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/5752d4259b534a1f9bd3232b831e8b86_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1291c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/cb390c98c3924611b45dfbf99770e85e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/cb390c98c3924611b45dfbf99770e85e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/9e47572647094122acadedada3d09a8e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/9e47572647094122acadedada3d09a8e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.12.0/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.12.0/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 27462\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e43-38cf6\"\r\nlast-modified: Mon, 04 May 2020 16:09:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961713\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mgAAMxPjhsUtSradEGkcNPE4ryBHFRcYoh6h%2B6KQ94pdZg8Qu8uPw2hEsmQUaxOYzgig%2BfhUARi9iTsYtZCo1S7PSOm5a18Na%2BSQmfL0crOngufGnzltqhepZt5%2Bz9QgmOA%2FN%2Fz9\"}]}\r\ncf-ray: 9facb79b1873723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232694,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b156c93b3792c208a43d643446f0d308","sha1":"1ee68ab3ff034e3553c779fe94079bbd43436f67","sha256":"913f0305e94e0c8cfea0ab62c4bbadbe86b52b5cd6893a1a3740d495a1005155","sha512":"671b1110d3c3f19b6c0ecb8e6a0771d05beefba8bfa8b3fde91e955df08c168477f23d526ca2eb355c7397dda5ef47e3f8196fef126c53d17cc4f8a236ff9c61","ssdeep":"1536:y28Y7SrW3YeWXA1u9w4HCe/l4ftg5fNME30e/8OaiZkW9YO8eQw4yG4tfNIc0yr6:Xbk0Z6fKyZL1dw","tlshash":"0a34a6219b07216b612bde6db6c0ba895f18c323d4725bbbfe55340dcbd34891263a4f","first_seen":"2023-04-06T21:01:19Z","last_seen":"2026-07-31T19:08:36.538561Z","times_seen":395,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":39,"dns":1,"connect":1,"send":0,"wait":23,"receive":2,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/236c00421e6344c3abd69e358d4dc793_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/236c00421e6344c3abd69e358d4dc793_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af2f1856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/fb47ce5e6baf4be9b975ee846689fab5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/fb47ce5e6baf4be9b975ee846689fab5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b02ffa56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/256e7e2e04904b78ad29f52ccf20f819_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/256e7e2e04904b78ad29f52ccf20f819_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8e356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1cd162f6f78749c1a4fb16d4bbecb180_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1cd162f6f78749c1a4fb16d4bbecb180_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8f156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/f7968762b5704d2fa2938f7d70e26e50_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/f7968762b5704d2fa2938f7d70e26e50_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/23320d1bbdd24b008ba94d680bf09f79_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/23320d1bbdd24b008ba94d680bf09f79_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a9f9a4f046354dfe970fd2ff90d17771_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a9f9a4f046354dfe970fd2ff90d17771_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1393556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-20aa535d.7d892f1c.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-20aa535d.7d892f1c.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-45\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgilQ%2FH7IvBYCdnjWgyS%2F4xTDOAmkHf5oJzl8A9eO%2FLUXpDQDcJFT6GXfNyO8mggypMf1eaHZE8ZEe1yguIvn%2F3znUDyqhLBQRbuHz5I1lXGZf38G5Pzo6eSoDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a01c2d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"24c94bdd51ac5c41571ed99206810c33","sha1":"080da262a6cef9cda0e3f1e9af67c230e5536d8b","sha256":"d39d41f904e10dc5c21717c0067df4f3906c163074210397fd695989d82e5536","sha512":"b09ad734773bb7423cdac225f237fc6c1da71b8a69ce98e8d8a15339901ecb527a5425d5c0f81d23f30a94bdea968b97cac08ed1a1f388b8c3f19c75622b679a","ssdeep":"","tlshash":"45a02220fa2eb83a8238fe002c00aac00080ab0200030030c2e2fcc80803a2338f0200","first_seen":"2025-06-30T02:18:00.788732Z","last_seen":"2026-06-01T10:56:00.257556Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-23cea0af.f88be9a7.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-23cea0af.f88be9a7.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-95\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rO1Eh4SeKM1x%2BK2v5TDg23Mp04twWAPm4MrMMckfvZYR4dUNrn%2FPcubq8GtrxV6yZZ8YSRPzvC7Sv1RQCvtZWDVdxcP%2FtP6QJJHrujOhm%2BbPCuAJlbUtzpnTIBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a02c325688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"8ff02eb123d7e9cc01a6e0a37a8e2421","sha1":"4f866a4cac5ea6d9c9b22a96aab46df2b1c76e17","sha256":"ce59cda2443069f2e9f0decfb33419d36a8a8c8066485b0dc283995ead3d5d4d","sha512":"de173bf58d2cb5837df3ad16d08ff842c87a0d05b365913da27d3b90409ef3b99b69128264d7849deaca9719c8b42f731af90a6e1d8e462c4943ac98d26651a7","ssdeep":"","tlshash":"07c02b03761a2026017f88fd217445c239dcaea3ddd1c1e058b3c4001c83a76370f12c","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.222673Z","times_seen":127,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/tabbar/mine.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/tabbar/mine.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1848\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-738\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sn6ozhCOQOCa%2BBryAKoLrKb%2BY1Xpe58EghCEYnYbqBixfnq1OvaPKEdHjn3CzKx4AVdVD4EJRsHAViA%2BZUsIoUa3H5W2ryEd%2FFHhDEWZsl3NC4xIFvbXx2wtLTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a92aaa5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 46, 8-bit/color RGBA, non-interlaced","md5":"feedd3f006c5e1f1faf22cf2ee250c39","sha1":"838e94489b8cac4da6b3eca3274dd25204bb70d7","sha256":"385b2888b16f8eb27611e9296b5d4ec60f4d75361603d51d6c8d54706f81331e","sha512":"c7656c033ad34733d8f8cdc3d64241c64b7a5ca3184a8a418f458b9c39967c7def37d7a34818c7aaa3f88628232f0d822ae06cf4fa891bd8a5ae48ffee94be6a","ssdeep":"","tlshash":"053109803b1ad87e32264f33e7723d9ad6341368ca10032610b12d80b1099fa06fd6ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.176003Z","times_seen":92,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/792352e1d8c24e5bbb4f3ba489320f2d_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/792352e1d8c24e5bbb4f3ba489320f2d_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af1f1156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/d7d0852044ba41b78accb38ec8f0339a_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/d7d0852044ba41b78accb38ec8f0339a_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7af1f1456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/498d50c7dc1b491aa78874e3a2c92f61_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/498d50c7dc1b491aa78874e3a2c92f61_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/037f877ad62146269db5b3bbecdca0ee_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/037f877ad62146269db5b3bbecdca0ee_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/8ba24459661247f8ac3dad87a1e6ecfc_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/8ba24459661247f8ac3dad87a1e6ecfc_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1191456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-12T22:04:05.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFP1jxnjogyuhJlK%2FCdq4UWswGd2lFLWotkX3uu%2BEdCRzpd7HxG4SDHTnHt8uCh4WoA4i9xcoeXRg6Ham0LecWXNam9KkC2j%2FKXV8sJt5EpqVBEsgGprp42fDEI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9facb79508f132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"SockJS:1.3.0","description":"SockJS is a browser JavaScript library that provides a WebSocket-like object.","website":"https://sockjs.org","common_platform_enumeration":"","icon":"SockJS.png","categories":["Web frameworks","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11857)","md5":"0538f7ebda3424fe3f97304a0cca28ad","sha1":"f5b8b23251a85a9d18eb424365725721440f81d3","sha256":"1c8f2c126b548537ba0289e2db2d14c2b05939645d5624aeda7eefc455d099b1","sha512":"a3f57bc1f551cd40530c350126cf7a15845127035d06b9c310291dda5121e605c30b4b832fe0cb77c4619e06550a572b23ab842a9ec7dcadf0784a8b08ca69e5","ssdeep":"384:d1J0CizqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztM4KaZ0W1nX:d1yJuCaRJkJI0ntyztM4KaZ0W1nX","tlshash":"6d6264a9d60008edf592ce8b5a75bb6994e77c773931e484f26d884bcf18fc4162608b","first_seen":"2026-03-23T02:52:10.066623Z","last_seen":"2026-07-22T14:00:50.172166Z","times_seen":38,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":768,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/index.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/index.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 38108\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620aa8ff-94dc\"\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 961713\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pznmzb4YTn7kkHiLgxp8q3uPmLrmhIK5S0cCNyXCekgDhTYL0RBh7C4y4dVUwI6UDq9fLQ5z4A2F01ppQaL7%2Fc5k%2BUUbe%2BAUdMd0ZEI6evIxrsQwzHGmEAwFct6X%2FPWLlAVPzyQf\"}]}\r\ncf-ray: 9facb79b1882723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143622,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a547188fa485f8ca9b2cc7d6d2524ef","sha1":"7893335159a1f637eb24cd05aaba96ac156c7f65","sha256":"897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433","sha512":"23653fb8a5c2f4cbc15cb35f215f166150516d84b8bcc143aff2d9c73056ce8e33689ef0578010cad93ea2c2e04423d3cc9ee1f5535a6bcb1e2302e5d47da263","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYaAfP1rz1jVLSV:KTeVc5HMjajXfNf/SV","tlshash":"e3e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-07T19:23:27.300031Z","times_seen":2231,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-11dc054a.b4f2d272.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-11dc054a.b4f2d272.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5a10\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZAWxqG1lnY5zIxfkL3mQX2BLNSHB8tKrrVZGPCxGVfS5KansYfZmrg%2BmfKahytaXnPBH2eB3ZGBuS7lmrAu0fgO9djnZav45WTkbCTJFhaj9WLng3LhQ3VG3oQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0eca35688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22760), with no line terminators","md5":"ed50c6d644b682e17968288255bf7440","sha1":"e9a3328cd426b48be0900355e5228c4c94452709","sha256":"47b447d821f058f7fe0b1f222b77124d1edf46c0ed804cc148ee8d7fd041f9f2","sha512":"07b44194568d52c8cc3399f6367021333636fda2c1de5e0f8f1d99576d36a9b8ad009f219c293c0cf117e256f2f5071f0aa30fd8e5c8efb1e0f904f6a6b86d8c","ssdeep":"384:GTOSwD92BtWlp+zp6iTu8xM0qP+oqA5rYGJm:GiPE18Su8xMio5Q","tlshash":"dfa2b648b1c3f16e8a7b9521811f1929e2396ac9e415d045fa3cc4d0b9a4c6d2b2fffd","first_seen":"2025-04-09T11:39:55.960728Z","last_seen":"2026-06-01T10:56:00.258085Z","times_seen":104,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/front/08d0e0aa6f7f4a1aa35c2a1f97eb763b_.png","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/front/08d0e0aa6f7f4a1aa35c2a1f97eb763b_.png HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7a5dfb556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":809,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/api/banner/4/list","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /api/banner/4/list HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: uz\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgmNFShvmBfzWg46wDIvsz%2FxZP1OVBUCp%2Fb83zMl%2BZytz4wR73JXspGvC8s1JiN9%2F%2Btv6AMvEIlFYWwrvtUbUSDSGEgIL9WpweB8lA48VOKeZuPtho9mP8NeDhA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a9cb265688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-08-08T13:41:47.156269Z","times_seen":5382,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/69d9061895a34aba973427b5dedd7045_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/69d9061895a34aba973427b5dedd7045_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8ea56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/21c69280ea094b9db275bb736bf32cf3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/21c69280ea094b9db275bb736bf32cf3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b229fe56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a1b92c073490486c8a8764bbcdfcd3e1_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a1b92c073490486c8a8764bbcdfcd3e1_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b39b1756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1100,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30769\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402c-16deb\"\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 497473\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1qL7baY062nonrO9p9lUtDXlFYaN4cZe4%2B%2FA5YsgKx1w6L8ZcUOkDYJDqAHRrf%2B1LMdvVK7OheLlsPPoOlkn68GJzw4TdHvdTpvW9mcMRT8HOLnvN9ZPRfeRbE%2BYeQY%2FRnOWfGE\"}]}\r\ncf-ray: 9facb79b592a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-08-09T08:48:19.737822Z","times_seen":4450,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":64,"dns":6,"connect":2,"send":0,"wait":7,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-7fdaf070.c293b530.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-7fdaf070.c293b530.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-128\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nh8bi3sB5NkHUayMIhlgeSOM7JT91B5K%2FgAaUd%2B7cdH25%2F2nXRYzH2X9HA7fWDT%2B8w%2FG08BCpsXGv2OFq96Y50mjVzEckRi7ZNU5N5jvV9XHbt%2FFYkSOy9sAXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a08c705688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"31409204b8266587230f69e8ebf6c469","sha1":"63184ae00e5a49abec4aa8747b7fa776146b4536","sha256":"c626f89a80a475d50efc020bb3502241a4b52fdad3e62fb5d4be32654cb6db77","sha512":"dde60faa565d1a20c70c621c70e501eaa31747b3aa4ffb72add3976d37dc9f07608e0ab0664619fe3a3c08f64712618e2e8c13bc0b3804c0209273699f675683","ssdeep":"","tlshash":"05e0726a3c8e220a28a3e06738845cc6c0a5238190104332b9b3bf296f57e2170a033b","first_seen":"2024-04-28T18:22:37Z","last_seen":"2026-06-01T10:56:00.255082Z","times_seen":128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/e13f1b411a6d46b58cf112e26fd2bbdb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/e13f1b411a6d46b58cf112e26fd2bbdb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0380b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/e8a509bad41743cc9e67d8a35a6c9c7c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/e8a509bad41743cc9e67d8a35a6c9c7c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0a88a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/15cfb441d08442d197bdd6004ebf4a95_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/15cfb441d08442d197bdd6004ebf4a95_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8af56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/7d95d826d05d4983b9a2b7cc7be9a2ce_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/7d95d826d05d4983b9a2b7cc7be9a2ce_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0f8f856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/bc927c2274f44b0b8dba611654b1d3cb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/bc927c2274f44b0b8dba611654b1d3cb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1291a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/c90eda8401b142f18a63c01e1e796509_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/c90eda8401b142f18a63c01e1e796509_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1292156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/vant.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 67557\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620aa8ff-107e5\"\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1050840\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4nTONZXfluQKbaJ1YU6sxM6nmKPMzzKY0sDiWBbj7EVtfsrUXFAS0J5Y42BNxdZRik3OIBSBr9S%2FeP5F5BECULTzX8WyJyxrM0gJaeytLlw20p2CkR6q7ZrRkd4NurLd8nq2g93\"}]}\r\ncf-ray: 9facb79b1884723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-08-05T23:28:05.531433Z","times_seen":241,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/css/chunk-4a224979.ae575bc3.css","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /css/chunk-4a224979.ae575bc3.css HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-45\"\r\ncontent-encoding: gzip\r\nage: 96\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89XBG7Ma45%2BruWcNO5y1eSi%2Fegq7T5quiqF34OH4A97svS4WImxZkO9gZcdpKllMLPzfIY1Yr1gAuYVv9eTbg8ZtaQFfB3qJPwq20CQSuS3SzV52H8oAO1C2UeE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a05c545688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4324c2c9e4ae5d00fe133d21e732b33d","sha1":"f5dedb85e0037227dee83b560409ec1f9af860b6","sha256":"54f30efbaa5e7f8cd31950fe9b21c5501fb79789e9b6d78f5e6ba066db61560f","sha512":"4860bd919a0b2fab508bdc2efe107868262f3afc964437fd552a48facdbbb1f43056395fc36cb7b5f719141c6b8eb67e78ec72874c484d74294f763c3d7e0bc7","ssdeep":"","tlshash":"b0a002a4fb9f957a5139fe156a551dd04180a75244930114d7e3fd545803a23faf0254","first_seen":"2024-06-04T08:05:51Z","last_seen":"2026-06-01T10:56:00.196204Z","times_seen":124,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/a38f0cf239d24adc94f2e636157a51a5_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/a38f0cf239d24adc94f2e636157a51a5_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0a88556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/527a248a2abd474ca480526aa417e31e_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/527a248a2abd474ca480526aa417e31e_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8e856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6920a4b193b74f6ab59228af9a2a0a9c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6920a4b193b74f6ab59228af9a2a0a9c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1393a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/87e4173946a14df988617ba9ce9ace9c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/87e4173946a14df988617ba9ce9ace9c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b3ab2456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1106,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d0b33c0.76b45f33.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d0b33c0.76b45f33.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-8b3\"\r\ncontent-encoding: gzip\r\nage: 94\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6eONj4MnwBDB2Z0DvsU%2FdeZtgDu4rhG3UUPCjdambyaJo82PsjlgQOS7XXV6DR954UwSEjzP7LI5wiKU6B%2Bb6xAknxbYVkNpgciSt5KtkuquCLCcgvgtUQDGQU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a11cd95688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2157), with no line terminators","md5":"4d28200dc1a96e8ea942110d0de11fb3","sha1":"329c8686545c332b8042152343ac66d849239635","sha256":"1fda28079b6bf3c9de5280daebaa102756fe7d38e6e21bccfa3f7249cca0b1dd","sha512":"8c563dc451a1a62df20936018a4b2ae1fd9d2cff06f9eb0c4c40937dbcb4a1bf632e4de6a81042b75c4e92171c9aa34fbddcab287ebfea77af37f7204e42fd7c","ssdeep":"","tlshash":"a541668db087c29e4d3e9442151e3335e13a6bcd9d2198c2e771c4856296c5b632ff6d","first_seen":"2024-04-28T18:22:38Z","last_seen":"2026-06-01T10:56:00.237367Z","times_seen":123,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-2d22d99b.2e59ff44.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-2d22d99b.2e59ff44.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-f37\"\r\ncontent-encoding: gzip\r\nage: 97\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6vqwDcbwBMu2ES2sveUnZ4Z%2B4srEZXF2cpxwl9OYJmwFI61Lheqm55%2Fa7Ls7mpy0GsFRhuJ6p7jW%2BMRCl9ycpC4qw3I1chCk1li5SB12fYIue8GCJpiSi0aTYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a16d205688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3771), with no line terminators","md5":"701547107e6c26359bf15b379ac81f45","sha1":"d1d973e5688a2cc6887a70fe0fb47c07511f4af8","sha256":"f3b58341aea10d657a2f81302aa3937756bc3e61f950a464753b71ae46503957","sha512":"ec483e4c2a2d0605ab020ac15e4d9ccb007bd05e9ee7857d6d1d4e428feab6009c2cfaafaad5519f8fc63f3f823dad234bacaaa4478ea11e3f11d360f259eb70","ssdeep":"","tlshash":"1181a79ad888fc287d22d141712f31f4e11ba92ea5545bd4f7f1c6ca0ad86680a0d73e","first_seen":"2025-04-09T11:39:56.053084Z","last_seen":"2026-06-01T10:56:00.207503Z","times_seen":107,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-f8d706dc.d39875d5.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-f8d706dc.d39875d5.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-c06\"\r\ncontent-encoding: gzip\r\nage: 92\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5h1M6i%2BHZWzR%2BoCorzn4zd7Ar17DMrEXx8rrAlZMgqyQYmNJkRrG%2BGjEcbf5E9f1NZJ0RmJs1w3V9LDQ%2FJ5PfVY7iOA%2Bhd3qSojUQsCyM%2Fk6WjFZqKxrcmhpync%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd775688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3070), with no line terminators","md5":"c0d65fb50ce143b5605c10d3e6e71b2f","sha1":"b63607f03ad005e13ba8130d6dfb3cb75a4c47eb","sha256":"b2c0c555e2214756afa19dcedd12893181ae941786d7535e3263d53f7495dab2","sha512":"9f6ac6e832e05b9b7921d9ad1b396d130ad3f66cab6beca11c0d3b2901cc79259ca37af1d6fb3e15958017b69463e8784d1cf5e9428d9adfad55ecab7927cda1","ssdeep":"","tlshash":"2851330d75c3f4689aeab161501f2239f22b6ec49006e910fe34d4d17f61e69332eaed","first_seen":"2024-06-11T23:26:02Z","last_seen":"2026-06-01T10:56:00.201167Z","times_seen":120,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/tabbar/orders.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:08.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/tabbar/orders.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 906\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-38a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fn8xnJBULdj2YKyET%2BJDc2ssRH8XoO9tNU9hcUbQAKfZAkgS2IrKCZ1mA11N0OlnIp0yIv%2F063Ymisi3lSlasHRUyDm98PD7aLhxLuge%2B01bXl9eTUG5LshclL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a92aa55688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced","md5":"7158cc1ea0a5361d7da036a4ae236e7b","sha1":"f8b1761e2ae0d975005dfc59e0d8be65f2444ca3","sha256":"940f1ac824ebe17c2c94051bcece498bc54564c3fcd9a0a47c77184cd96f08b4","sha512":"237c5cdfafa2b358d9cb1ceb1ae6c4aa6229a3bd345172f38d5780a8231c1c6951ee08cba7ae002c643b1fe6687f4292d4333efdbaa7b750c4a7cc60c6a835b4","ssdeep":"","tlshash":"371163ce6379e8aca68c5b3c74cc053fdd72517e60ceb108a8105368ec7a745414a2e2","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.09654Z","times_seen":92,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/static/icons/ic_withdraw.png","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /static/icons/ic_withdraw.png HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1020\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b800a6-3fc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6J6LzjXOiykuVprwqUJN1BjiHIbz8XstI1XwDWnK1RhYFqIgRIk2o%2B8JJ5eaUwBXsTkcH8gxoz3aPHvoBOFGSxir66viJ92M1sMLrO7g%2BEY2vyuiDLymIwImlVA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7aefe905688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"70d1c13f7ac751ce09b753e3d955dcd9","sha1":"c968143931b9a22e7b6eb3f6a4bde6bf35f7154c","sha256":"6162c404f5ecd341bccec293364e418717a70e7bc69088f3539932283c9b9209","sha512":"120456706abe3cdee25d06462dcbfd3ae3c3b353b80f1c4c4ba0596e34ef19e7affed608afaa51a20c76f1382a9c78a3801de2cdc155c0870d6d6a5baa820610","ssdeep":"","tlshash":"9a110ce301519d22d95712fe8e340460b5472dd4031022c8bea39fe8eb14fe501c4339","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-07-22T14:00:50.041496Z","times_seen":92,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/fb7633f1ff974bfab8984eeda40d69c9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/fb7633f1ff974bfab8984eeda40d69c9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8a156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/f9d964acb1f0420588cc06ac9cc28a0c_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/f9d964acb1f0420588cc06ac9cc28a0c_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0c8a456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/722e480fa0ba4562b322feb5c510d318_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/722e480fa0ba4562b322feb5c510d318_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0d8ba56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2776\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb0402f-2693\"\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3057311\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3ojmLJ%2FqCw14X76JAv43WK1Ud3%2Bo5nt6tEkwZaz8%2FfUPUuMJeaD%2FYcTwFUMjj%2FyXXOHibxMUThC7UDw4EuVQXNBAHE4SqcTDdEjPkZAoPXxagE%2FmPm1CQdc9q3dCj7D96kJwzN7\"}]}\r\ncf-ray: 9facb79b592b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-08-08T13:41:47.156977Z","times_seen":1475,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":59,"dns":1,"connect":20,"send":0,"wait":10,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-13ee2c88.cfa5704c.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-13ee2c88.cfa5704c.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-5181\"\r\ncontent-encoding: gzip\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkNeCBfjcH7aRWtYEvK2zLR35sQjyo82EHCGeYlmgWU4SYV%2BfHK%2BPkoC033fGjA%2BG4OJx1psfBSk00I51tCDY9eREQnTcskfQSXsr5irfUfrVQDZ435wEAu6phY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a0eca55688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20535), with no line terminators","md5":"33c94d891c02fa7b1c1c79c7f0bb273c","sha1":"979c7ac6009966a8f7a1bf4a56f4af8b284a9156","sha256":"0b52197469cfc1a4b92594d515112f1db40f7b9edb2487e1b0e916bb739138db","sha512":"ab893d5df6acad9fe87a260ca1f846852ee413a5e9a6dea659bbb894ace369ca0cedb97719ee75371c5760209e02f987584753cfdf3cd4398ef3ed9863b80a55","ssdeep":"384:Ytz23MbmZeudvQILLLFZN1nxwL4pUxNhOo:YDmZYCJX1nxwMWnhOo","tlshash":"b192d88871c3f01606e37121902f2149f2797d89b809d55aff78d4e2b879959722bfbc","first_seen":"2025-04-21T10:41:38.078267Z","last_seen":"2026-06-01T10:56:00.197169Z","times_seen":87,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/71849a7d211f498b8f5c7353bcfdcddd_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/71849a7d211f498b8f5c7353bcfdcddd_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0987d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/6333e65ac13742998605f740fe495917_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/6333e65ac13742998605f740fe495917_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0e8d856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/8acd754e635943d0b35eab43626a61b9_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/8acd754e635943d0b35eab43626a61b9_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0683956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202604/15/91ecf20ba8ba409da246517a44a986c3_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202604/15/91ecf20ba8ba409da246517a44a986c3_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b0784756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/ce6c5e9144a042389c836b5f6e70ecdb_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/ce6c5e9144a042389c836b5f6e70ecdb_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b1090456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hf6d5.com/api//file/cfg/202501/02/1804b8b1becb4181902993042efa4393_.jpg","fqdn":"hf6d5.com","domain":"hf6d5.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:09.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf6d5.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 10:58:03 GMT","end":"Thu, 06 Aug 2026 10:58:02 GMT"},"fingerprint":{"sha1":"9B:2D:72:89:A7:06:DE:21:1D:8A:8C:66:D6:98:BE:63:86:A6:DC:05","sha256":"EC:78:AF:96:95:38:5D:86:1C:6B:65:EC:21:B0:DD:87:BB:25:76:D3:25:16:BB:57:FE:B4:15:01:7B:A5:AC:DB"}}},"request":{"raw":"GET /api//file/cfg/202501/02/1804b8b1becb4181902993042efa4393_.jpg HTTP/1.1\r\nHost: hf6d5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Tue, 12 May 2026 22:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6370\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9facb7b3cb3156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":1117,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:06.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 May 2026 22:04:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4219\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ceb414-107b\"\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 318719\r\nexpires: Sun, 02 May 2027 22:04:06 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwpjnOalgFJGwvc2pXN7QmsK8ZHD7F7sPegn0grM57BMGDmMSSA9kwzikv74k%2FzQYggd69MqaTgCF3o%2BsS9K5D4GLR%2Foqdyj6Qa1h5nvnMUIUyKlC5FQp6ETdWcm3mztl7AxhaNJ\"}]}\r\ncf-ray: 9facb79b1886723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2240)","md5":"dc42cb727908d66cfc974a6f55cd237f","sha1":"18a5e51a20f48241f660c87214ca0d38c662fa63","sha256":"de3aa2bd1edb484896d8b84bb8aed72f913eb094961ee10277fd908158cbed00","sha512":"e531910a5de13e8aadaee84efa6b9b4eec921ce7dc101bf221f8961e808af300cb99fe82d54ef7394a0d094e99bf24fff2f7c27216b520d0c8a3c75a6c39908f","ssdeep":"192:XbaCmUJbiKnectoOJ4PQ6UpqWaJxYG6OdbG68FWPLF9FFDE4bRswwMclce7se6tS:XOUbecnOPjUpTlGrGATF9FFE4b2xlh","tlshash":"bb82029853b01c1326274e7a1a728774ebb854810b4bdd79e2c06d48dff99fc631f2a5","first_seen":"2023-07-11T11:12:19Z","last_seen":"2026-07-30T10:12:01.992807Z","times_seen":155,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"td18h.com/js/chunk-f438de52.b3979a8f.js","fqdn":"td18h.com","domain":"td18h.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://td18h.com/","date":"2026-05-12T22:04:07.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"td18h.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 May 2026 09:08:52 GMT","end":"Fri, 07 Aug 2026 09:08:51 GMT"},"fingerprint":{"sha1":"1D:A6:E8:2E:23:A9:CC:48:AD:5D:25:C0:DD:A5:42:D4:9E:94:F8:10","sha256":"77:E6:F6:35:AE:AF:46:8E:C2:D1:07:81:C5:C7:21:EE:AA:6D:83:99:51:3F:F3:18:F6:3A:06:77:D4:10:6E:8B"}}},"request":{"raw":"GET /js/chunk-f438de52.b3979a8f.js HTTP/1.1\r\nHost: td18h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://td18h.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 May 2026 22:04:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 08:47:34 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68b800a6-26b4\"\r\ncontent-encoding: gzip\r\nage: 92\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UH%2FX8WDIbTMDYxlo3AFNvBu%2BnUjMTl%2B5VaWC69Ck1oaR7IJ2%2F5PR%2B6OKyWwgk5oWinsF7RfqJkhCdTkXUJe3dvNRgMHuZXFkzbGVt9pNEqMrqQvyl1TgV1%2Fd9ak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9facb7a1cd765688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9828), with no line terminators","md5":"5f3e3b3cbd0913dbe7a4059ba0b393b5","sha1":"0b3e152c57fb42963b1c4203ef3b660bd058dc9e","sha256":"b616c4e67a7ede46fd307a729f5770f2f7d90186720efd9c939e50a4d76006e1","sha512":"66296a292165096d152a5bfb42bbc36d6639cd205737583c263017e2f4683d22384bdd3459b9d08b39107e1f0c55570025e29dc4dc2217bfb1cb8acbb0adea78","ssdeep":"192:KoTYBNJHelxkoOt96Fbq/7bTIqNLq74GM1ql44kNWOwQ:KoTc/hb0bnWqxkUO/","tlshash":"3112948db2c7f15987676221d11f101af23a5999f409c085f328d9e1b8f486aa72ff7c","first_seen":"2024-06-22T16:59:38Z","last_seen":"2026-06-01T10:56:00.256356Z","times_seen":115,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-12","alert":"Sinkholed","trigger":"td18h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}