{"report_id":"0bef5f50-9630-4604-89aa-9f223ae436ae","version":6,"status":"done","tags":[],"date":"2026-04-28T19:20:54Z","url":{"schema":"https","addr":"qevorinex.com","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"172.67.140.31","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"title":"Qevorinex","dom":{"size":53892,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16537)","md5":"7a708b7f9136b381687771554bfab7cb","sha1":"144cbe7bfc9da26d9256d76e54aa7d3db8667a3d","sha256":"8f5b1da9a924792b5bacf9ec3b641f7556bb32d6d882d3dbc6b097dd69b8d172","sha512":"0d453e898a3799a527d29f6a0d5b58e69ed0bd81bc343d1f44ed1631217cbdafc23c6ec9a27b47e359d5d489045602f976b7c9206559ea18555c0d8fefdbd6d0","ssdeep":"768:fvb1WAf/o+14bHU/45zgI+0CCZ5sm4ACZLL0YSP3hAaC94vU0uQtLRssXdEYdkh0:fz1Wf+mlgI+0i7AC1m31BNCcuGGGTt","tlshash":"57330953d01a8319e2578556bc33b203fa2a015caa524898b6ecc9fd519fec3f147bbd","dom_hash":"domhash295573cd267fb7e5a37d30560ab2bdd8","first_seen":"2026-04-28T19:21:23.066382Z","last_seen":"2026-04-28T19:21:23.066382Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qevorinex.com","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"172.67.140.31","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T19:20:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54726,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.334637+0000\",\"flow_id\":363141774118815,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54726,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:19.790431+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.339147+0000\",\"flow_id\":2109965102944013,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54718,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:19.790285+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54736,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.349665+0000\",\"flow_id\":709631818272767,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54736,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:19.790527+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54776,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.547051+0000\",\"flow_id\":1978874111238491,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54776,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.041307+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54748,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.597135+0000\",\"flow_id\":1447408415580283,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54748,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.041083+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54764,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.617888+0000\",\"flow_id\":1696810724008188,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54764,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":3094,\"start\":\"2026-04-28T19:20:20.041212+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54796,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.702193+0000\",\"flow_id\":461895957242635,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54796,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-28T19:20:20.156427+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54778,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.716809+0000\",\"flow_id\":115176132334727,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54778,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":904,\"bytes_toclient\":3148,\"start\":\"2026-04-28T19:20:20.152711+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54786,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.740552+0000\",\"flow_id\":378908599147216,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54786,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.154320+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54830,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.967718+0000\",\"flow_id\":1163008566114169,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54830,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.407417+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.981223+0000\",\"flow_id\":922247731883001,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54804,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.404473+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T19:20:20Z","timestamp":1777404020,"ip_dst":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":54816,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T19:20:20.994823+0000\",\"flow_id\":549427390721183,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54816,\"dest_ip\":\"47.79.64.174\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"obobs-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T19:20:20.404639+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"qevorinex.com/assets/index-D-ctkCWj.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"app.voxsig.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-04-26T19:39:02.278039Z","alert_count":0,"request_count":2,"received_data":2259,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget-sheriff.tradingview-widget.com","ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":206730,"first_seen":"2024-02-01T14:12:53Z","last_seen":"2026-04-24T10:40:04.891356Z","alert_count":0,"request_count":1,"received_data":585,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":1,"received_data":1447973,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-26T22:44:19.904703Z","alert_count":0,"request_count":1,"received_data":31565,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qevorinex.onlinesupportcustomerservice.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":17,"received_data":1147267,"sent_data":13612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}]},{"fqdn":"widgetdata.tradingview.com","ip":{"addr":"93.123.102.178","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"United Kingdom","country_code":"GB"},"domain_registered":"2010-03-20","domain_rank":179381,"first_seen":"2015-02-20T09:47:36Z","last_seen":"2026-04-25T01:02:58.477687Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":689,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.voxsig.com","ip":{"addr":"104.26.1.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-23","domain_rank":0,"first_seen":"2023-10-18T11:33:42Z","last_seen":"2026-04-26T08:12:21.900451Z","alert_count":2,"request_count":2,"received_data":18142,"sent_data":1355,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vox-bucket.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.147.186","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-03-27T18:22:48Z","last_seen":"2026-04-26T08:12:21.958546Z","alert_count":0,"request_count":1,"received_data":13071,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"qevorinex.com","ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-26","domain_rank":0,"first_seen":"2026-04-28T19:21:09.560326Z","last_seen":"2026-04-28T19:21:09.560326Z","alert_count":236,"request_count":117,"received_data":20672803,"sent_data":51892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-09-07T17:41:01.019621Z","last_seen":"2026-04-03T20:00:27.960197Z","alert_count":0,"request_count":47,"received_data":888518,"sent_data":22983,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.tradingview-widget.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-05","domain_rank":196495,"first_seen":"2021-04-08T06:14:48Z","last_seen":"2026-04-23T09:42:31.897588Z","alert_count":0,"request_count":65,"received_data":2378002,"sent_data":33956,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.qevorine.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-04-28T19:21:09.554541Z","last_seen":"2026-04-28T19:21:09.554541Z","alert_count":0,"request_count":13,"received_data":92303,"sent_data":7435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s3.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":165395,"first_seen":"2018-06-24T04:06:00Z","last_seen":"2026-04-24T05:31:03.711822Z","alert_count":0,"request_count":1,"received_data":14603,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"97fd063000570de23ed41d97e952eea3","sha1":"a57c2aa7d7b1b18344e7ad78fc25f722ff588582","sha256":"0524e248be59a03f093e680252b0eb5d5d6c211a24bb81f26b74e00e3e8cbbc8","sha512":"fac989db3451e2bf2c60db849f12d2c28c5a264aa6abd7daa99a8fbdacb7eea1aae5b5fb1e45e5f548f4bfb1b60fc68e446039d7e1c8ba646c8743a1602f998c","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":12217,"url":{"schema":"https","addr":"qevorinex.com/assets/home-VA_RSAJh.lottie","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":[{"path":"manifest.json","filename":"manifest.json","modified":"1979-11-30T00:00:00Z","Modified":"","magic":"JSON text data","size":158,"md5":"03d8a5bb7fd960ac1b06e05afb516e2a","sha1":"81c68571e4b546f2a9eb81a0c6ec36b860452caa","sha256":"6cdd8949eee06197541ae7bd7af77e7b49848d6ea8e840d19d246c5366c2b0ad","sha512":"b1da98c93f14a74d22edf26af62ed74f92742fb655b56cffbd6cf41cd216655729c068e860e5d8bca53ff42e91c0bf4349cfd89d0b8a3ee20bd3bcdb9d52a081","alerts":{"urlquery":null,"analyzer":null}},{"path":"animations/12345.json","filename":"12345.json","modified":"1979-11-30T00:00:00Z","Modified":"","magic":"JSON text data","size":127431,"md5":"2584bc893eb7330f6b38d44820046690","sha1":"ea79bf7b4eba2493ebfc339be5f1826020c0b0a0","sha256":"68366ae2e73ae0cd170abbc917aa26715b83c48253bfabb57884f9018fb8b7f0","sha512":"412fbc90c99e053004a4f8ae5e2eb38585286ad45f3b82b74ff71ffccb6214e02f7ac44c9b4e7a63dcff25dd980880528e36a624c49bd5fb6283e86104f5cd6a","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qevorinex.com/assets/createContext-DTDk1Our.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1d3abd1ac11d033701ccf158ff36d372","sha1":"bc0d2b984e1f7b28e2d07d185089b33c10ad0c2a","sha256":"59c92399d44860b0238cb8c9eb87244647979df92a68ff374312d117a2f50367","sha512":"ace51beddcaf746fe8141bb1967e70ce80c93731e775bbecfa0c732ec007d2fb1d74cbde73f955d41a2771ff292e20cfde8a33c1077148cc8a50d3193f9672b5","ssdeep":"96:OQMhADesPaYFwQR7cGT8Kj/fzI3OBelfVP2bIsboYpHfv:O3hADLFTxJj/UOBLMwoQfv","tlshash":"32a141c975d6f47283765ce4806f8d0af17d18b5908ca08091dde6e2f8a982ac622b1f","size":4840,"data":"","first_seen":"2026-04-28T19:21:23.1747Z","last_seen":"2026-04-28T19:21:23.1747Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-BysKq6iR.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd3c0d037ac4c0387882aa2286847e6","sha1":"bbaf51584fb007ef45285256c69f070733226c9a","sha256":"6fdf5e6eb90bd732fb068d4ab879dd99ce5a62780c451aaf547ed748f1c303e8","sha512":"fe57f77c12dc5920e751e9ee4652ba57cda18667191b922845da83500d91442075950215a3dbc000280475db8e0148272d7c5c61e51bb8cb6ef01be2bbb2bdf4","ssdeep":"192:C6KyKOKAMXwrqWsswE8WPHlXDRQwrrK/1o43jDoD3+IlvUfj:C6KyKOK22gw8PFzRQwXK/1xzAleb","tlshash":"f31208e4b048b8b0125bc5c0d1925d71c618a996e43585f8f0b64d3f2fc663da87b7be","size":9754,"data":"","first_seen":"2026-04-28T19:21:23.106336Z","last_seen":"2026-04-28T19:21:23.106336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-DyP9EBVq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1e6bcbe51a1a0d06fad50ea127b8efd7","sha1":"312f724a9d67af7fe9da5891b9dce5a8756746d1","sha256":"d0a510c014b4c2682e0602ff891ba9e7f2bf54deda4116b256c2476f17da3179","sha512":"91dfd6cbb85101bdcfd2ef42555b0d9ff57bd8b8b8adb7465e0d08c8c502c7fe099c514f98a614e71eb281734ef4f7f1623c6c0885b5b7d6c4491380d4cf1b0a","ssdeep":"1536:ZwIBPTqzh1RCEfM0LEfyBL538ze54Lqa9:tTIrILD9","tlshash":"a0c30afd268171e8f437cfa254113819b03b39bfbf368944d9e56aa4fab146415dc838","size":122485,"data":"","first_seen":"2026-04-28T19:21:23.157124Z","last_seen":"2026-04-28T19:21:23.157124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"57e890eea9e12c24a93b4ce67dc1d792","sha1":"f5aa308eec8f53097e979489d112882df33807bc","sha256":"cc972c0abdb18f4ef45427941d1352223f151530a066985241914a20a4f79b36","sha512":"0d94d983acc58fc1044168108eb96d5c848877440c18a32000ad4d1c0844e3972d34ca029a33e372ca6575a4791fc96b0b26c86e5a6c2d3274e04f753ec2d193","ssdeep":"","tlshash":"7b90020eb8210201206830c4fe8236426c9104a04f099c100101e81061c910bc8556df","size":49,"data":"","first_seen":"2023-03-07T01:41:55Z","last_seen":"2026-06-07T07:20:53.910936Z","times_seen":10126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/RightOutlined-ChmqbvSw.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a1ce9cdb8d4869bf060f4adcb67750b2","sha1":"40d16e5dbe8419859b855b0894dfa1204d83628b","sha256":"28bce60e3e095f31228b521e16737513082964aaf423acf9ada63b792fafcaed","sha512":"be3e4c3b1c3bfdc2e1b320a6cb543019978d36d5bdc4be2576bb01f80ae073e39911085d6a811ae57a81fe805f9004e99dcaf89ba3057c7c50578d89d7e74ea7","ssdeep":"","tlshash":"004197f8b24ae27902545c8e04372712632b285cb46ce4e0f5c4def6595874ce057fdb","size":2110,"data":"","first_seen":"2026-04-28T19:21:23.104793Z","last_seen":"2026-04-28T19:21:23.104793Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-tab-status-DB450rZV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"968ee546d512c045a407210af6560212","sha1":"5447f7eb06cf6b9b01adee73a843661bd16fe424","sha256":"828c0d820decf1eb95a259d16388ee8ec29d7eb63d5d7dade7f61eff9fcb2510","sha512":"1b239b70f9775c3ed1e47402ac3abb421d4be99ed093a842145c5b93c5660acf3ee8f9909ab8ca7c72897583990241712e570a7fa8606c8cb050854be504b8b1","ssdeep":"","tlshash":"d6b0120f0c0070b9040a0dcc231c18324321985d2bf25ad09215cb141b511caf10da02","size":96,"data":"","first_seen":"2026-04-28T19:21:23.095444Z","last_seen":"2026-04-28T19:21:23.095444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-lSzl7MlH.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3dc91db572f9bf89793b207c85c5937b","sha1":"cee3244b4e1a05305e3d9070be813bc6b069c649","sha256":"4c023f02ba54936a0966a253adae5fc4582306d17e1f34ba4478de05111f1027","sha512":"28b305405b7451b19326ac5e8e584099554182c267674bcb38dc1e459872a8fa907bc5eade934f80a060f2f1d5b82a55febf67bfb31b6555f4dc7aa943b43a6f","ssdeep":"384:2RKLMpWRCdxdKz722oHPPP4pxeO4AkMAgpEQdKX2MbBdzpJM/8pzhIZ2Lsm:6UMpWRCsn22oHPPP4pxeO4LMAgpEiKX1","tlshash":"7a62da917580b472c77ba6c8c01945d1563e2b88b128d6e6f06f1d26379a8e0f0fdf2d","size":15372,"data":"","first_seen":"2026-04-28T19:21:23.131811Z","last_seen":"2026-04-28T19:21:23.131811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/clsx.m-DHulAg21.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dd64838e50061a16762037242174d321","sha1":"5bc1624ae224e067c9d93bae60c518ca57f48e49","sha256":"fb137b760bacfb05fc2eacfee16f7954a01bd739c1846a2efd5ea53e24f454e1","sha512":"b5207d2b5bb502a387ef3bbc933f4ee8cfa6d2fca59ce3c0514b46ee83e1349746b07ac1b0a37e34b1480cc0721551b151e4126ee79bac1eefa48dfd49035d90","ssdeep":"","tlshash":"4df09ec426c1608153ed58c1952b9143f418876297bcb040f5c0e7b551d4aa5120bff7","size":478,"data":"","first_seen":"2023-12-22T02:32:13Z","last_seen":"2026-08-10T18:16:56.894784Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-08-10T20:23:01.349709Z","times_seen":2232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e548a4883d99421f4e359150b3895db1","sha1":"d2c5acd053757492edfec0ee60091a71a5e404ca","sha256":"01c0bbfe1e72c63c85657ae68d3c4ddc357f4f4fcb7c626bf8ffbb1faa4a96c0","sha512":"59314eff00988226d2885e8c4869a21a8d83820bf3e627aba0ae2cb64102ed7fe617c5e7e82b3d8e8ca18198aaf1ea6fedc05b09124bdb87699e71352c23f0b9","ssdeep":"","tlshash":"01e0864781348810a2d55848a13929f63504b696e61209f1f220bb0cb1567f3a8d5dfd","size":321,"data":"","first_seen":"2026-04-28T13:49:56.040915Z","last_seen":"2026-04-29T08:13:58.580937Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91184.b533ba526f3dba73f194.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f163fe398287baf0a93d6a5e67eb5e6","sha1":"2d6355e759a14f17458723ca8c811ffab1e5ae10","sha256":"d99c902c217bb28535ddf2f4603faeb28a970fb7fe0bc8a1a3a95b89196fbe5a","sha512":"602e258e44768e68e0af1a188301141b6b53e82ba9385b992f9675de7ab727ad47ca25742469ad1eaf2b85cf2ea03adaafb9630044842e876ac0b4b4a605c63d","ssdeep":"768:BKDMotxUGiG7s8frffVXzTBcGW5mzhHT5N1Cmq8ghwMA+mv60F/0rFLfLuPBbZ3W:koG7hTclhdI60V0RuQUPrECkj","tlshash":"bfd296ca32d6733693d1c78508750903f33da5743c0a55acf6ac69cfbe1a882916ab7d","size":30062,"data":"","first_seen":"2026-04-23T10:22:42.457306Z","last_seen":"2026-05-05T07:37:29.059902Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/3193.bf0956124aff296d9619.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b19c2a2d96cb336c07d6d8a6dc51755","sha1":"0ec49b2d679f7b6092dd039f15fd979b7754dbb0","sha256":"8ed9e69ea55c0438d2f03b7bab105c9c7045c9b51320db349d9d15d3ca30e144","sha512":"1d2feff1c96fb57db6d755978c7dd844698ca93aaff2bce6307c4497d29ab482aee60d993f5394dcd539fb042b0f8c6f08328a125e3614a504d203ce41cf3a28","ssdeep":"384:bxjVKZysKJy2r9Ey6fr2PrIINayMwsF/lrQDfP7yXP0wRmNXoQ:rKZysKJfr9B6jQ/EyMwC/lrQjP7yXP0Z","tlshash":"6572b68931c2f06557a32866443f5009f33c1c58350e98a4a362dc95bdf65aef27bf7a","size":17083,"data":"","first_seen":"2026-04-07T11:13:01.74205Z","last_seen":"2026-05-05T07:37:29.133653Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-CvghBqvW.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc689b0e01662eb341ef007ea366cd58","sha1":"6ee076baca173e74ff6b76126b45639bb37f2702","sha256":"e3df3523036a59f7b47ac1dfa95cbaf12d5c838abafad1078d3e3ec90531a97f","sha512":"78ff4bd8d4f632943d58b01bffacd103da0dcdc115157b25aa93e7f9e1dfee87671f2cc6ef9a700ef4d678a2a153ceded4c922415a976732b331e51115922a69","ssdeep":"6144:mHEOIqk8rui9oZ/izrQvIhH6AG18RjguSsRNWTROLtiRumPOE:lOIaQZ/i/QvuH6mRlWNOLdE","tlshash":"a6645b84b29570798fe654e5a0372101f231bc11b4cd8464f6ecdefb2ea98894767f3a","size":328725,"data":"","first_seen":"2026-04-28T19:21:23.078152Z","last_seen":"2026-04-28T19:21:23.078152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-DE8HP17O.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7731c61209914bf40cee3d279a5970bd","sha1":"51e766e53d49d775be5997f67f97c5ddcff6c760","sha256":"e272e8a45542829205995935dd5fd9680f6a19cba9d8f2eac8313501f512700f","sha512":"b48bbe7dd1f86d7192834789ff2e630cb8b7b0614096e9eb84964e6909a1ebb45f5d908736f098b34684ba29faf0f4d799ba1e1bd2fc4db38ec59ae0cf520916","ssdeep":"98304:KV2cslpM8ZC7q2Vy8w7etUwliHuCBG6eCuUQQFN6Os:KVjfy8w7etUPHuCBG6eCux","tlshash":"75e55cc4b2a6b06106c211e4646b124bf13dac656048c4e8f69cdef57fe994d82bff78","size":3282395,"data":"","first_seen":"2026-04-28T19:21:23.249155Z","last_seen":"2026-04-28T19:21:23.249155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/zoom-BtrIUIIq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09531583b696d266f6fb513fb67c5e6a","sha1":"dbbfac6b8e6b3c983091f8d75a1ff3ee63eeff7e","sha256":"a512f4bb38cbb05e09cce2aacc251cef91c1d5906c2d67faa54c2732ea3cc9fb","sha512":"ad023bbdc6ad73a7b176b88c783b653b88a12401f826ff0a10020790950854d69be61ade65bc03c1ccf8fef7e76960593902a0b39f5fab29f2b2cf246d50b3e4","ssdeep":"","tlshash":"be41a48d8fea54e580d95dc8a3d45e61022e8fa274228ddf735c19ee03726ec52e1b1e","size":2380,"data":"","first_seen":"2026-04-28T19:21:23.11724Z","last_seen":"2026-04-28T19:21:23.11724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useCustomService-B-tCr7bt.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02fc59d3eeded50bc62959ab92727e8","sha1":"c44130c715148d706533b18abaa971c76da7c8e0","sha256":"5015f972718c426e470ce532b49fe6380e5267d1bf831c65aeb6a7c71b237edc","sha512":"d469796c23979e1e298005f5b0495481172a7ec6c3baeec5f6bad0a69013b5340b7857d46c3da76dd0c82e6bc32477518336ffb6091db88e7df78b61af145071","ssdeep":"","tlshash":"16b01252ac4453f0936587c30f126f783220010c210453312985c6b131d3493a205c74","size":98,"data":"","first_seen":"2026-03-19T19:54:38.476553Z","last_seen":"2026-07-08T14:59:29.809133Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/10502.1585eb3721bb152abb7c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e66872887f9360184dfd846a9af7fa3b","sha1":"e007ee2f1c53646d4b219df0af912b1965bf3594","sha256":"546500d674f78223a36961d2847b83d46ae228bbc008b6800805df347e063db7","sha512":"6c77681f491bab4ef303d3bc31df9c6b8f9bb65624c550860300c2f3b7d4b0bed6c8f76d7cd8278e773450c19ed0a247072110663ae142418378e969a0f6c2e1","ssdeep":"768:PrvnaU3z3axr91U+Lle16t4QCht1hUnuIYIN12okJvb/9WcHwRKT6Z1n:raxB5S9tD5PCr","tlshash":"59e2f886b3f864b957e780dac8350103e32820106455847df7b8bdde6b5dd4cb6bab39","size":31746,"data":"","first_seen":"2026-04-15T14:27:01.584397Z","last_seen":"2026-04-29T07:45:38.563882Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/1-64b4dcd92aa76c6152ee.chunk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a67b3bbf4a5daf09c1f2d881667c525","sha1":"846f81876da9f06616111fc0d2da4383955f2aa0","sha256":"0094bd857d181aaa1f34b71095cfdca7e541f207623d497c0879d7842c2b8857","sha512":"f95fe474f27f085ff16df57d7fc574aebd3ac75586aa7bd65ad6d1ab822dc77738f7b9080d3f5149b34fe723b1e0488d7dc5d65148dc49a708cf802e2825b2f3","ssdeep":"96:5MsaR/jCkclWXocgDj4Hk7wV21mH3DuFMwRl4ucV:EPYcSEawE1KTu+uk","tlshash":"b0919668f1d37c1e5a4a24b0242f224d71726e89a5199d79eaf0c4e1b8609ddf03bf3d","size":4444,"data":"","first_seen":"2025-07-31T16:26:05.474951Z","last_seen":"2026-07-12T15:00:50.733375Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/32-e426f86cac8ab106fcce.chunk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8bccdc8c243fcb16663e861ba2b09ea","sha1":"b51f10cd5bbac5c3defedc3da3bb9f2ae011cd6e","sha256":"bebab25747854611e684df4b28181a2af59fe401769cac7033f1718b331626ad","sha512":"db20dda2ee9852a8b6b57727b550c515f2b8f2074c9acbf9932345d4bc6642113f75ed2e34a3e2f8ae729fa5884126f3b9be233cdb502263304d563ef1d62ce3","ssdeep":"384:iIc6CWt0SnpMkOe+FIul2+RaOyqCLR/IfgNRB4RceBtWVbMzP:fT+FbMGCqCLR/II/B4RceBtWVAzP","tlshash":"5262c884b0e2feba4a876011407f3502f2392b489479e0a4f7b1d8d56d7885d92aef3d","size":14662,"data":"","first_seen":"2025-07-31T16:26:05.38251Z","last_seen":"2026-07-12T15:00:50.653763Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/en-DU1UmOfw.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9021f483a554bca90a92a8868085f7a9","sha1":"dab6cd20f07bff107bccc2f37dd7e7ea8741c27f","sha256":"bd5ad8f8a3e3aa0a20703354cb041fdf3bb36dca6edf741d6774fc151bd88284","sha512":"2bc385d26e2c65b4c8fb11706b9ce6df694c400d90f36491184764e7ed088283405a4d012fa9fcb8652bf7efc6e341334b8f64f63d8f034a49c6b80c98666e21","ssdeep":"3072:yYj1coBiDpodF4TLtwnMxS+Dbcun/3pDNA4i0QjYQ+T:xHtdsbxS+H7REO","tlshash":"43d3c7a5b5cb999153c589802caf1ce1b6188d813d49acb7dcf8ac19fde4875c6b3f08","size":136537,"data":"","first_seen":"2026-04-28T19:21:23.12858Z","last_seen":"2026-04-28T19:21:23.12858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/CustomServiceButton.vue_vue_type_script_setup_true_lang-BVwY95Ct.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b9e7157b42c5ae53b706d4936fb32103","sha1":"ec1aaccac99f684374c6246a8f9098bf943cd34b","sha256":"a520078f89cccfca686e66970453ccde1a7e3646c12ffb40c61dd55041e3f462","sha512":"99172ea386fe4c3654f8d1b893af1368f28cfed192a273dcd00c6c60bec7e83ce395bfd88418b1422dd7f299bde88e28e47d20912c1b627aa2a823a9fa59999c","ssdeep":"","tlshash":"08e0610414417ff8c57b9a511b274a092126047c16581165d98ac56436f30d3ea2feb7","size":381,"data":"","first_seen":"2026-04-28T19:21:23.094136Z","last_seen":"2026-04-28T19:21:23.094136Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/compact-item-C3wgf_qA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"40071286fc81ffcb93a624216b25bc02","sha1":"a13bac4269a5f90f3322be41ea46f9cb37d98b97","sha256":"8132bc71af750e87d0842517a7faa9ef2f03d540118d28bb0c7b40f020d53541","sha512":"f2040dc08b3503e98711a2e45a8fade32d597613b0b97a42ce9a4f5b0c7481bb23bf8618a8e037cda3f9444e2bf0843ae0a6eb4bec3cca7653d725d73bd1df9b","ssdeep":"96:v7nc/E8wPUuhDVHB1jypNmoMms4PNm3zImM3tJK980xjnRJVlNK:znYe5Vn2RMms4Fm3cj3LAN9Z7K","tlshash":"1591c7cd7188fdb4651749e4496b19229f255102b87e42e0c8f2d7752ef036d5d3322f","size":4268,"data":"","first_seen":"2026-04-28T19:21:23.097798Z","last_seen":"2026-04-28T19:21:23.097798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hmac-yXOAIEY2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"83afcd976aa2802647cc5809a4a548c9","sha1":"56164838ccb6ed0a9a6a6e6b5d677da0abb3d80c","sha256":"d6a942f21e4c97411f98c178f05036c3677fa8e0b1d02a14b20fee49fab7f3a5","sha512":"c8f36519e5f653233178710b9c646690a03d4371ba5d6632f012e65b587b02e64d31e6e514b94593b772bb99cf08d4d82718132a0a0131e523601b823771fd8c","ssdeep":"","tlshash":"ad2101e0926085a0436990d61e108471e07080d7a943683cb2bddeddf425566e9bea3f","size":1354,"data":"","first_seen":"2026-04-28T19:21:23.135411Z","last_seen":"2026-04-28T19:21:23.135411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/secp256k1-BR5oHcvx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7f3d3600f9b1c440d34ee3275f204739","sha1":"5a46d1625824adbe6b0cfbbdc074dcb6d61e08f8","sha256":"e595c063a145084feb0d241a3adec6180b4ee8e87426ba8a86f42129abae11e1","sha512":"87f02e68c5bb36130cca42be257cae4186edc60d334bfd07ee0530d0d9c0f042994f49e66be33dd044f7a1cb9be706f3132a61516e5873d85fcbded8377a608c","ssdeep":"768:yM8AoeMUTPdT+QOSVP781Akg57J7zpxdjjGZC1ek8R3nYqYpm0ObGv4lNvx0jC7d:ndUSdg9kkh/zvLl","tlshash":"0cc2e98473d1747253ba28e001769502f5b4dca4f2dd4861e59c89eb3ef18ad8eb7e38","size":26641,"data":"","first_seen":"2026-04-28T19:21:23.15616Z","last_seen":"2026-04-28T19:21:23.15616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_medium_widget.e5942233783964f9bef2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"31a992ac6bfebd7b9f8c0e96736c852e","sha1":"f7af4aec6aa90ddfaf2821028f9d959eaeec6902","sha256":"bebcb7a33f128cf6a57a04baa96e5698bf4c178cb863b43cbdebccc6745efd10","sha512":"dbd3e2e1e33f1a304a45b44db53e7315e67912326153c546c80dbfb68880eb214dfdb86a0998762006ab9dfa6ceb6a28d907c9b1611c87a7a6c69499063df31c","ssdeep":"1536:01wXkjwT+K7GsW+9bPnQQgCjzVte7EDXWcuqtR3G6xkfsXZvNFvAzi44A4X4p5:01GtrW8znBpTdXxmJiXAGQ5","tlshash":"d4938dade73c99b779f01ea95c2a9c63633c20123d2187d982d7b36505a3ef4d267903","size":89647,"data":"","first_seen":"2026-04-28T13:49:55.973337Z","last_seen":"2026-04-29T04:31:34.495529Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/isObjectLike-BA6vMenc.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eef7f38148347759577237fd45bc116","sha1":"d100d186349ef93e27ee3134ccf91de119ee20ac","sha256":"0a3b57f8a17b2d9ff08cd9a8891c8f8c7b3531ef4c41b9085d77945bffc7a8ed","sha512":"25fdfa5135f7d7f5185e8331048569b0402f5b852b7fcf4dbf1ffc79dfda1e1bf355c0e4884db1ab2416b75945395319cbc55e5e480ae54e863156c71824b587","ssdeep":"","tlshash":"d10149d5b845f5b103365de0d29f2947f138b5bc41eff5a1e0b2c2e1a92a1289612f1b","size":775,"data":"","first_seen":"2026-04-28T19:21:23.102529Z","last_seen":"2026-04-28T19:21:23.102529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.7277.46b4379d59a93bfd7278.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"71e8113d69ebd28608e036cc48d36ee6","sha1":"3d7b55d9379e984cec7f210624566ae39375fc68","sha256":"c883784f9697c52953713d3f3ba35118e69cd1a5fff4000e46084d22a3973a71","sha512":"8b6c786cb0ddd0e4f62e7e7dc0d4c2484514295d200bcdb4382a74f1d0e04e2589b1a961a499c6a93277e80512df2661b47f2ed2602589e1ccad1098d64eac59","ssdeep":"96:Ycdd3tyTURzoP2ZDC9G3H4i0rR1i34xkDEzj/:Y03IYRseZ1H4i0rq34x2Ezj","tlshash":"4291db4bd1c001e96fb5e7183b5accd13ad0b0a04075e4ca57496f65c2d7ef4d8faa88","size":4347,"data":"","first_seen":"2026-03-11T12:55:07.279369Z","last_seen":"2026-05-05T07:37:29.078502Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/debounce-DnE9GlSA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2fffdba678d36300e74302cca0d00f2f","sha1":"00752829dc634cb5d28d264790ed6628bac23ed7","sha256":"87c378bc71efb9f8c816a0448f5f3407acb9939a4025ea2cc3a026e0742f123d","sha512":"d29f855d3d65bfa6df1e9e58fab846843b210819d13d1667cab6bf83e1a53a7cb641063d09ee6cd1156880d9b942e3f2a849498f1bb6e186706f5fd4a8a35352","ssdeep":"","tlshash":"a131e0dcb1cbf0d0235656f080bf9916f03938b1049c81c0f526e161be74869e2b7daa","size":1597,"data":"","first_seen":"2026-04-28T19:21:23.144432Z","last_seen":"2026-04-28T19:21:23.144432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/pickAttrs-daFEhGF8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b57557a6b1baa2fb404a94f519488a0","sha1":"1d9c956d40e6baf242656ff41ae36458f8f16fb2","sha256":"38d253338dd3df5b4c1472642f244b4096d1798ada21d0dbb589748048681c66","sha512":"ebd14671e7f23a4f32fc33729c40868f0a36fd41f28657fc3a842d217bafed7bbe8faf32f33b7700f1e069a7f120d520bec4c81d0f8f2f6be6b945a43ac681a2","ssdeep":"","tlshash":"27419653720921ab178703c361a72200e76da201330a8c193538369a73d95a6f57fe5e","size":2316,"data":"","first_seen":"2026-04-28T19:21:23.21166Z","last_seen":"2026-04-28T19:21:23.21166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/localBatchGatewayRequest-Kbzne3ii.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"24e8dd103ab9a5d042bb35eb5fdb6d45","sha1":"8084b6a0f0f87442ecfea88e4a800a3a24da9ccf","sha256":"bc94df981383e4d012bb62c4d3d91c92bbb5d6cb2164c96f814499971c714d16","sha512":"bfe16ce223b0faf34950f8cee5a788e5580ed2a38133218c77664b4591105c9efdc7eb058a771ca95d17434b7f0a4bb37a79c30480285d94a3e21906bd365e9d","ssdeep":"","tlshash":"6c314188b619ec7d856e2d30681fa484e4342806a42f8471d64f75f7df319c1ae6fe1c","size":1781,"data":"","first_seen":"2026-04-28T19:21:23.182554Z","last_seen":"2026-04-28T19:21:23.182554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/medium-widget-creator.494b1b7910cdf03d458d.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"037db0620627d74272aefc379e289a0e","sha1":"7e5c5e9e2898e4aacf88342e4e616bf44c239a94","sha256":"893a8351e943480c5a9bb7f5e1d5cc3ec5a286b98fcfe251332813ba6cad5a2e","sha512":"671009f112b5b30aadbb54e339bd2a473db937b004a27d5fd1919133d5ee95ab6d5f0c2e247190ebe773fdd55d2de0db69b9c1eee5c9fbab51b09d293bafa0c9","ssdeep":"3072:hZcrNwxf+t8k2U9xawx4BEVYTXdVw5uMcAVLPcju4ayOw+V:hZhWt52U9xawx4BDXdVPuLcjuZ","tlshash":"76042aa4f1d1b06263e340fe587b5003e3291941781a4ae8f678e9de3a5dc4a7276f7c","size":186172,"data":"","first_seen":"2026-04-23T10:22:42.49684Z","last_seen":"2026-04-29T04:31:34.449522Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"092189f78b14a0ec5c39cd1f1d80611f","sha1":"7940c54c695c880dafe11cc273c93920ed228471","sha256":"4a0e482cf6975d1ee7e9f3268c38d586cabce9d804393ef1fc67b6cbf476164b","sha512":"f6aaa6aa94685021233f31792febde51aa798c8fc3e3ffe3e3bab9137ad6e6cdc867c6f8b86329817ca09f76b55873ebdf3ca411efa20384cc1404e2f8c07c4d","ssdeep":"","tlshash":"f0112f0f1d9a106242e2092f6f5faa0c37675283680ad4203e1ec3102f50e5f45a6fef","size":958,"data":"","first_seen":"2026-04-28T19:21:23.250139Z","last_seen":"2026-04-28T19:21:23.250139Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D7erznEp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60048ff6dc26a6657fa8bb24dca4d769","sha1":"3aef89cc927b1fac5ed2ac378b30cd2421720cb1","sha256":"d71df4ac2973bf5aede888f1f15af1f1a28c13f9209de1ff2e42153342c8ff07","sha512":"bdfbcaa9493e8ba15da04422e223adcdcd1e25c8bb9bd458dbedaa048257b381622798d1ee42193cba991623a867dea0438d6e654c19cbae45e3667f9e259ff9","ssdeep":"","tlshash":"e6e0d88e456762fe94718c8f31c42ec6884fca7daa3b1590b92fc6110e06ac1b07a711","size":360,"data":"","first_seen":"2026-04-28T19:21:23.096852Z","last_seen":"2026-04-28T19:21:23.096852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/colors-CS7848yA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8f972ae6b2dae7e6a85da4c924a29f7a","sha1":"fe9495df617b591ec359ee328811ee4317055904","sha256":"52830e8958e45ccdbc300e62ca481ed59df06e5e45d357030eda66890ddc6028","sha512":"fc3df2bfb93824d0079b700b969ac6952bce230c5142924e8e37ee56e9b25e49f7d0df9fbf9bc008f93d736dd1cd2a5fc2ebfb3373d40e1c92a1b539601c67f7","ssdeep":"1536:scTHibs0CjKUblwMioHGCKkvG0FCePJGmKPRaJa6EFoV4kWZ/Nc:POUblxioHDJHf6gyc","tlshash":"bf33f8d47181b03283aa5161806f010bf339a904b44fd498f6aee5dd3db984aa37bf7d","size":52241,"data":"","first_seen":"2026-04-28T19:21:23.080683Z","last_seen":"2026-04-28T19:21:23.080683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"83954df63fbc229d40bd82aed11ef77c","sha1":"90d8755361b95f105b74eae29f323aabda74efba","sha256":"416cd66af811d26bd7ac52be7d526002ca3fadb872e1a41e31d8ab4511ea8c3c","sha512":"062589802c12cfeb2bc1ecd13a044becec73a93e78c78d510e11537749f74a74a87fe2016dc7d8ca4ffbf514a4119393e0e8c0601470bcce912ec7e669dfc167","ssdeep":"384:RMt9OfaOo+14bHUwmr6b5zgzS/rD9OrylkO+NCCCZ54EeN:RWAf/o+14bHU/45zgI+0CCZ5sN","tlshash":"bd727544a127144a23ab804728316103b33558946b06415cfa69aeffa77dbc7b1e3bfa","size":16176,"data":"","first_seen":"2026-01-16T13:19:18.465329Z","last_seen":"2026-05-05T08:09:20.583789Z","times_seen":3937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/55482.57ef1b6cbf22977fa29c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c01e80787ffec0a3beb96bba5a15479","sha1":"e6f3476cdb2a6fa27326789e65e39ee585fbea39","sha256":"8223e4125b61010598ca15da34c93cf3751ef63065a1bc1070257a4cc4e7bc81","sha512":"fd7748be7492952f9037c2f4f293f148ac5d84aebfa889495431426dcd4b14f5ae138d8b28ac1106ba2a126558f6ec3acf5f399effe032d6dc642c8c031ad2c3","ssdeep":"192:xxjobnZ3MfzZaIBV4tIcs3m/ad9xi9Sz5:LjorZGsZtIc27+ct","tlshash":"fef1b7e935c7b00d679a497428cfe604b2afb55ea84e4f41c05af1817c6993c9333fa9","size":7594,"data":"","first_seen":"2026-02-07T00:49:25.160393Z","last_seen":"2026-05-05T07:37:29.15341Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/eye-Dgk2fP9X.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"53e216064cf97b09616aa14eb3396d24","sha1":"b1224a9eece1f8ffd41298b301bb72adcea6a33d","sha256":"ed9d835ff4272945bd0b1f2f6d4bc88f803530288d34052ade10238602c524f4","sha512":"da088d7697d8b1aab1c49f75487eb05967e510d2db5b267ce049bed8cec608447fc6c051980cb63b5502300bead1f91faad5c4dd3b9eeee554cf81e0f99b0017","ssdeep":"","tlshash":"c631a8bd2242bbed6136ca623413762ad4701b75af795687fedb2244f3a24052dc286c","size":1578,"data":"","first_seen":"2025-09-07T17:41:21.984938Z","last_seen":"2026-08-10T18:16:57.05751Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/collect-BZdkYS3w.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a18bc1fbfba4a13347c267be02077a4","sha1":"62356b76ada9986f1caa6863015048cea9c7de5e","sha256":"126182b3f71c899c15420822b35dc3250aa363432f71c4f42af1b07312c0717a","sha512":"d9df215d39af0cb2f228375fa2ecc68ae0498a7c8e4dd2692e007bef939a8ff6246e4ab74cc8863dfe15c58abbef231cd398cbd119d05ebac15aff02e56326dc","ssdeep":"","tlshash":"0e31c001b270673d75ff70e4219a65e0e2165c68257490aabe19f6c1cfa8892ac19a3f","size":1485,"data":"","first_seen":"2026-04-28T19:21:23.21271Z","last_seen":"2026-04-28T19:21:23.21271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-KaM-Llqx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f51e468dd1f4523f19461b48200e6f2c","sha1":"2be0ba60ae1ed2628da555fcb17292f3c4606859","sha256":"fbd5fb9babc009d7c1cf2dfaba599956d189ee035f54a7aa4d6ada327183a7f5","sha512":"3673a2a470cd7c3bc582c29ed774f0d9d493abe07550a49e1c443b38b26a14a6a1a8ddbca1260abd8af2b26da16f987b39b3447cdf99305c9867d9f7e1770b6e","ssdeep":"384:JX0yQwPEyP60qIEv1cy8Q6hCJxRqubyN65JbsxAC2DhQeSIDZ4yNRRvk+wrZVGR:2LsEyP60qIEv1cfQ6hCJxRqYVC2DhlSU","tlshash":"2462eadab2c0e1bb016f8685c2230b195b2257a0e8d6fc90e9f7983a21d9d65071f75e","size":14592,"data":"","first_seen":"2026-04-28T19:21:23.199899Z","last_seen":"2026-04-28T19:21:23.199899Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hashMessage-B4Wm9Th7.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7871d108edabe44f5cecab64074b0792","sha1":"17e79875481040a78e17845d4166b63f3782077e","sha256":"75578aa62baf953402bdb4e15b9f2f0f2d32afb03b64d0f97b7754614cdb3c71","sha512":"2eb3887f01d7d8680985d41d17f074b9d9aa799c6953105fa5f592c90bf75e9d4ade963f9e162b381f3d8e18f299e5609674d6a4d139753f50dd75b28c361215","ssdeep":"96:NHl+/nhKCzC8VKABKEKA4p1pjOts19evXF4Vjjsufr4yfq4+6KSEZkF92:DQnhKCzC8VxFcjOtS90XFKvsuJH+J","tlshash":"5f9112cc75a1f1b82ecc05e8e0e76101e6e4ac11f07588a3f1ac65b735f292da579b2d","size":4306,"data":"","first_seen":"2026-04-28T19:21:23.146309Z","last_seen":"2026-04-28T19:21:23.146309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/70240.f1baabf7f78513318cd7.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9856bb6a8edbf8193e151827fd0b9ab2","sha1":"0170ca00ad43aa628d113dcee8bd1f9cf24b3bb7","sha256":"106423662eb5484ed0be66245a17e5c2e50c30847f06e0cfc13b10a6f0e10e48","sha512":"9bd7b0ca8d3e6ed8280a431d169aae34db86b8abdb2fc48a8ea13a09712c05bb242129ac04ccbb53caafe7cd3430778bcf181f65e9b3bdede0d4e63eab272f03","ssdeep":"384:gpB9qeqiwAv5A2XlUggtc6JPlrtRH/qhgvFqPzAAg0d6D/3qRAvOda7HCdKSAgA4:IB9nqiThA2uggtc6JPlrtRH/q2vFqPUW","tlshash":"cf92b324f382226505e791ed0c760913b63bb7963c83466db92c9ace675c918f372b3c","size":19960,"data":"","first_seen":"2026-04-23T10:22:42.439707Z","last_seen":"2026-05-05T07:37:29.12674Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/parseSignature-CXLIVmT8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2662d9bcf3eab650de4769184d92bf03","sha1":"8e4c107efc49cc22bbb95a25023f94f8c7e9b911","sha256":"b01bf138c15ee78a8606cbd5b6b0809c6c610bfbf56a6c115ba7340b255b3607","sha512":"a305847c01e660b45420a23451e7dad8385624aa6510e8b3170df1e4eb3b11819c74f4a18f3e45a264501a997634bf814c47f4214e644e128a408f2f39069ac3","ssdeep":"768:xX0nJ/CMiFHLup2cN7E9DATzWZzqXDm801aYes5+2IgxVpvRNiRkP1RqziCs7d1V:NAJcDsmJ1de0+1EVh0gMVtxq3+a/nv9L","tlshash":"f5333bc4b6b9b071938474d0906b6101e128b9d1f44d8091f2adde6b3ffa94cdaf2e1e","size":53562,"data":"","first_seen":"2026-04-28T19:21:23.088395Z","last_seen":"2026-04-28T19:21:23.088395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/52653.b6e0332c914a3e30ea56.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e36f230a63e1a9bcdbd81db22bf9a79e","sha1":"8a5bb3acf4350fb0072256616f77bb1a02fd9c4a","sha256":"cf452e7c6b0bb28eff6f75ae3ea679d03389d3e3b4ba5e8f2783bc40cf568e3c","sha512":"0caa6ec87a711d2b1244e30b45e99fa665e34813f01cb45298c4a0d61c6b84db618ca274100d0391ae4db6295f7b9b7bcaca1ece3eade948e471c73dce5508dd","ssdeep":"192:WIqc4iO9WvUkvL+FnTN3q/Kt2Jjfxi9nulrIjUeSlbSkDtHa:xGkUkTGnTNa/P9xKJjUeaSct6","tlshash":"0442d8b9b2677117c3a09097d4b69043732c259078498c74ba702dee39d8c96f5baf78","size":12136,"data":"","first_seen":"2026-04-07T11:13:01.690968Z","last_seen":"2026-05-05T08:09:20.493983Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/68539.7c91b0ec4eef2fc2bcba.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d86f7627113ed4696fe785ec14df2bf","sha1":"9149ede7a0beaa4effe57c384a7d8e7a9a6e7726","sha256":"e4e5ca00c9c8b88f9409e4250363607152b1e66ec98fd41bfe3344fb65c234ad","sha512":"7c14ee62fefa69a8a9a27b1487379e761f5e8010f6789152043b86d5b39b5d6ee4aca898086ae81234d1a436699268b5712c68c616df24cd80528e8ccf1709a4","ssdeep":"768:ocLjeXq+fR6P0OITZAFfTPrY1JuzUh3jx0LPiqqEGek/PPh3swuPMnuU2Kxb65XP:ZnIvJuzUhzyPqEGek/nWBMntb65XwzuL","tlshash":"b7e2faa2a9239c331fe51b9ed87b350291d84679e5823c68bef858dd0d8dac070f355e","size":31972,"data":"","first_seen":"2026-04-23T10:22:42.465814Z","last_seen":"2026-05-05T08:09:20.509956Z","times_seen":437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-WkERe-Ty.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4cc4bd73079313c46e6759c1b8efdc5c","sha1":"594b83350b4f66311b363cec48f7f66cef7cd09b","sha256":"30b55e5260297241b8ab6eab1d04812183febb7c022dd2e48d1267caf8d9f37d","sha512":"e6759aeeab9a8485f1bc6014d10a7f314806cfe7f00f5045cb38e387191a0efa5411bac3220a7af495ff84bcb2a685ed4ec4b847b50b1c5edb18b9c74c457bf4","ssdeep":"96:Ta3CW2sHi57JSEldQcz5Ci3Mc0HPcf5CkgPY2s8e0+5Cie4SD99t0:23CWtHiVJ5dXzkJc0cfkRPYt8e0+k+F","tlshash":"63c1b66fd1559bbc4b71308a34ab4504828e3b5bfcadd6c0f79828481264da9d572b3e","size":6110,"data":"","first_seen":"2026-04-28T19:21:23.14908Z","last_seen":"2026-04-28T19:21:23.14908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D_twvx-Q.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9580315d4b456e697486147362227cb7","sha1":"ae5d2268a99c14ed182befd86b1abd42671bc278","sha256":"d857eec607ee2c167c6e9cb22bd239e95c8593b6c96dfa07eac06f63e54e1f57","sha512":"5745da19b1434c8aa0990dd2b429ccb7b2e91359430dba8237104731688428e727738a6819ab5ed19f3f90972a2c7a9fd57bfc3cacd2499fd3885056a0dace24","ssdeep":"","tlshash":"8f214280b809ef3a15e348a110202054545a3f8d9ab495d060eb67b177e7c58eb0f72c","size":1336,"data":"","first_seen":"2026-04-28T19:21:23.079436Z","last_seen":"2026-04-28T19:21:23.079436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-id-C7LPS0AZ.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c5995049e4a316ed8b60472e0127eebf","sha1":"5f761c47265fd3444bf4a31ad362a857946d4c8f","sha256":"0f0ffd239f997d704273e6d76fd485d2bbfa8e81ece0f26556ddc8c676d76a1a","sha512":"24421ed663ee57558738196807c91eb3ed63ca51b48ce2d10bebcea1985eac5594d7ec8ba730774262f38035f608cd0cfb56f66c8da82edccf322c8a56677fa2","ssdeep":"","tlshash":"f7c08c49784860f426190dd4e22a066a822a781417aaa9a0f266472a19b126663baf04","size":152,"data":"","first_seen":"2026-04-28T19:21:23.075539Z","last_seen":"2026-04-28T19:21:23.075539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-y0Ok8amp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7c0d86e8a7e8543bf3f4434930a9fb80","sha1":"e1785ccf344653f4f5b9221fb5f53a5282d4c61b","sha256":"8e4282c154502dc52f4177ca7b2eaf65897d300ca048fcce4953fdb811fbfcf8","sha512":"e55e98866b284027cb98e29958b0cfc7cec2951536a85bd0a79466d7fd85efaa4f4b24e7d541e2106c09b61ddec62fcdf318b3a61c722474a658f5df41f17a68","ssdeep":"1536:BdIxKHehCLR8+sIooFwLs8UCGrkcd23Y5u+CnC9ZQvNJDkLx0:EVCLR8+sGHy1NSRK","tlshash":"30931aa8779478b142ffc9d2d0fb4a0561766b40b414c4e5e23e9c9a27a2e1c6163f3f","size":89074,"data":"","first_seen":"2026-04-28T19:21:23.158029Z","last_seen":"2026-04-28T19:21:23.158029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D-ctkCWj.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"681ccbe42ce35ac7c3a71451507b7f93","sha1":"b7b1e18f53851fc303034a3f84516bf6541cdb3f","sha256":"eb18152b859157b2a20753b278cc0e1d04577ecb547585bbe17c49385f54c036","sha512":"4b592f60e7ad198f11a6ec66c3d7ff42debb022ff77491458e1ab9bd3480c6c04c425fda1920b488391bd8c4497c6ca15468b638e79e99a022babd6534a1e36a","ssdeep":"6144:434Szb+VQurUKolflflflfl5123mlflflflfl9:4ocxuQKohhhhP123mhhhh7","tlshash":"fbc4738ab7841bfaf68518f94168960ba8b1e96d342521c4f7f557ab313d9f03c2c378","size":594828,"data":"","first_seen":"2026-04-28T19:21:23.081996Z","last_seen":"2026-04-28T19:21:23.081996Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"qevorinex.com/assets/index-D-ctkCWj.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07f08f55b1b20daac118fa5b19281437","sha1":"34342a0ef2a5e8f96a439ab9a48e8ebd4a8f9c9b","sha256":"e9c54f16851e435c385f04935153d752dad755fc1f135007d6fa506d29f9cb25","sha512":"1f9c4c743d0a85d6bce9efcba856a3ff7552d14d4bf4cf110f34603b9988f30911bd74cfae00a6aa49efce0c7304bafc3b83e64787f685544043103e94c02e3e","ssdeep":"96:tdVEwAlGIeIRMEhfiIxYQxLzX/EEMJ1fST/GFRunzfokVSa5Iz95+8Lr5ubvIdko:tPhhKJauBImVgXvWA","tlshash":"cae1edde89780efd05437d41994bafa729a83027fdece961bd8ccf4023c961216759a8","size":6961,"data":"","first_seen":"2026-04-28T19:21:23.251478Z","last_seen":"2026-04-28T19:21:23.251478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91550.d905f6e60b282987b3eb.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"21260fcdd0340fb36ee260ae7e429445","sha1":"e9308cad65d9e791d1c42375adff1b281b10ce21","sha256":"7a0bc3ec97e204e312c4bf7a12df68c0c2a199c2166b8b54d6c67a25adb66910","sha512":"b8a5070802ea78ab852c7bd1f7084673411d2e6d2b0c9df6ff5adffbd5e8a2c9ac1d9b25f0d0a74bdd9d0447a2785c14f8d5381aec8258b01b0e75209f08af2f","ssdeep":"384:tcwOev+zZoeDOR0zOlfHRFx0Src3/izW/x+B7SM96ktcXWp/iWRSlqtrGqj07sei:tcwOeMZXk0SlfHfx0Src3/izW/x+B7SU","tlshash":"5e72c7c9b5e1f08943e66ce0807f440bf13a6c68314ea0a8e3e9c4d66d7658e9177f79","size":16065,"data":"","first_seen":"2026-04-07T11:13:01.734765Z","last_seen":"2026-05-05T08:09:20.493452Z","times_seen":1012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a45b5caadd7b6c789025a16e762155e1","sha1":"2a677403beac55cc0464b662079c2cc9b68798c8","sha256":"df5b0b590dbff257005c179c1964245c5d6e6526220df491ba797f939da7c4c4","sha512":"e272538d748a2ecb8ecca9ca0c71813ebaa0fc0bba243cc5cce64f23c2f85e91155a2edb63216b1e23b5d6df071132402764380c78aa472c90b070d8a60e82e6","ssdeep":"384:0MctGYsTwpzhCEGowCsLg/JcJcHtmjajTgrl4/fYE3G:04ACZLL0YSP3G","tlshash":"8c822f67c84da32ad45add2abc7bb641fc2e071955b5292476ac882c00c7d53f30fabd","size":17781,"data":"","first_seen":"2026-04-28T13:49:56.044012Z","last_seen":"2026-04-29T04:31:34.685345Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"efdad7b848c5e81aa630efdd58a609e7","sha1":"4a7504401719425f23cdf686ddfdb5efa2130d8e","sha256":"d40f295dd5cbe42880cc12e101670212e9079e8d7028a5164fa8b58e15ddcbcf","sha512":"65c72465a87dcdd17f82b64251e8ef92f2d547484c32e788e5a848ba8954b91ca545206c906de3298721e78e97476d4490475b41ee06fb685d83c98d6429d652","ssdeep":"","tlshash":"cef0a2b95055e8b3007a0495e675d6d09317156aebd80da366904ac2120db7b51b2be1","size":587,"data":"","first_seen":"2025-10-15T10:32:17.029225Z","last_seen":"2026-05-20T20:22:55.79127Z","times_seen":7731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-AUZ_HxoV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d68e23f11410358f3802c98ab0403380","sha1":"c680ac5f36c96ecfea169651956f27a1709a4f4b","sha256":"179f567f655d157758b93cc4fc31da876cbdfb71fdf070fa500b4e2b067015f8","sha512":"403f43aecb23100c2071a3bf6567e05553d251ac2aa26bcd4eeb5fad2cba08f6d043b51b5a8b4928e9c8a55f10105a1cf50a85c1f57701fd000df21a4260952b","ssdeep":"","tlshash":"baf0e10aec60faf9a98f0c541d320128012a17ad7971d4e195dbc65472102f1eb6e204","size":577,"data":"","first_seen":"2026-04-28T19:21:23.116342Z","last_seen":"2026-04-28T19:21:23.116342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/SpectrumVisualization.vue_vue_type_script_setup_true_lang-CO6w7rVC.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7188dc761b294ba0a33b9a42821cd2b8","sha1":"d4fd8ac3f1e9586882aec6a5f36cf461b8c0474e","sha256":"5d41bf23b5dbcbbf76bb1077b16db96026ca92c20209b3a3a3c6a293eb7b3e6c","sha512":"3d9866771f7be1f304cd06950f07b1de0ea1a1766a00e17fb7fe49a157a89bf6334e9471647cd824ca371632709c97efa03ce9f2269d643c8b87fd959b05c907","ssdeep":"","tlshash":"2f7194fc0608ba9fd5624d475358790ad40e53ee9f97ac80d7ae812dc52204dbeacb3c","size":3632,"data":"","first_seen":"2026-04-28T19:21:23.153298Z","last_seen":"2026-04-28T19:21:23.153298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B1xPd2rd.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"656b64a6aab7ff6c3f51e3d8def15dcc","sha1":"560748911745394f29874d7afb365f628eca5adf","sha256":"8661bf9292fcfe18a2f35802aadb1ef0c481ee2464dd9f0c5c7550f1203c700e","sha512":"f09aa3f03fff2be28ac5259e6390fabab04e2489ba4a4149239593ea1cd4635394ddc13de07cf071886db78fd13ca975e24cc1e5ac468f2572293771a69ea92c","ssdeep":"","tlshash":"4c31122e5d59673266e7b81132860420030606e8bda889d03fbd1f1e8d96cc3767f90a","size":1499,"data":"","first_seen":"2026-04-28T19:21:23.154174Z","last_seen":"2026-04-28T19:21:23.154174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-udjr8jGi.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c19cf492a189409d23bd6b8e1750f1f","sha1":"ad23b51ffd12e8c5244ab3e403279b6242e41714","sha256":"e189f2b362d691bb91d4191473e1b56fc45ae5255365dd27e073fcaba06dc81c","sha512":"0ceb0cd124b62bc649bae600fa1b1f4e4292fcf4a55c610b6abe525926b027feef1b75f0585740cdb7b7b95007120a7b6fca191d79bf83de0ae093a74d492902","ssdeep":"","tlshash":"d431ca4f2c55b776abb29c2371861d5544178b7cfebb3c3056a4ed62182f08410be26a","size":1516,"data":"","first_seen":"2026-04-28T19:21:23.091006Z","last_seen":"2026-04-28T19:21:23.091006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/sdk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de56740c85f773b4723e598fd84cf835","sha1":"8878a6f1aa74add0f08ce6f9111a6bb04b0447f0","sha256":"3924a1a242ade9dbec1c64af8f9076f0a0096eea08d82f483c91c9d8e1c0bf2c","sha512":"eb3a7990d22343184275f91454a580ca2cd8a3a5d7536a343dacdbd09a69f9fcd4630a1da4823a65224a7500dafd90b6eeefbbee56fc0a46dc0b544bd96288d4","ssdeep":"1536:KObC2TkGck0H0m030D01wryf5kvQv67W0MgifpMjNEjNP000mf4fgXa0Vkx4r1Nr:7dck0H0m030D01wryf5kIy7W0UpMjNEZ","tlshash":"6083c7c9f2d2b0e503e76ae501af660eb27a9d54b40a95d0d761e5d0a8bc98f4037f3c","size":88356,"data":"","first_seen":"2025-07-31T16:26:05.394936Z","last_seen":"2026-07-12T15:00:50.604669Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-v5iI-2eJ.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c61f13f9fc712a2247d628ee85b32c17","sha1":"05cc8f4bcb78de1423b4b2e65ddb9f595716278b","sha256":"b1a10be0d39de65408751a9bf292af5233937887e1837b058ac9347b886b5b4c","sha512":"6dbb11e3929b0c5f2a3bb8397b9bffd4a8f2be1c63f3185ef995f5d93f857e1ab675ea8fcea188d1f50684784148c5122100423cd1ecaafd4192f77c53a54609","ssdeep":"192:YcXziZkxrOAyv54CoY9iax03kbILzMyc1iSecoHVo6WcdHYMb+uh+u4Heyz3VdDS:YcZM4CoYvx/igiSeHVoJcdHpb/hYekxU","tlshash":"fd0293e472af85f462c41d8c78231a118014946ce41dd0b9bfae5dfad69e7818ecffa1","size":8822,"data":"","first_seen":"2026-04-28T19:21:23.245212Z","last_seen":"2026-04-28T19:21:23.245212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useApp-GM78SUN8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d3858f5d0612a6d33242c04739ce0810","sha1":"8c19198885a5ae2716d7463fcfd862d97f6d97cb","sha256":"33b9d16a873e808c9270e1626b1f63d48a04669c3f288daf2e9fbbc99aee439a","sha512":"51963573b6606af941ae6c46d41365c3fe2b74ca3835c468fa91cd5e34ce26c8ac8d82fe0aecaf0bbad2e672ce3d61c14c434d391a45f16e68746824c1b0f5ab","ssdeep":"","tlshash":"22b02b0e248071b4e3080cc8622104c20314451437b147d0c02e431ab048499f229b02","size":129,"data":"","first_seen":"2026-04-28T19:21:23.141114Z","last_seen":"2026-04-28T19:21:23.141114Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-symbol-overview.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e23f7559fcf4bf82e73726f0218e4e5","sha1":"7f5fcdc8b1382b7806ceafea8e65d718d224d4e0","sha256":"5d77a55f4f0fdc7be5f02c21a58b4099b14948afcf7ab4af9f599286ccc6fe1c","sha512":"43aa7a8c6453da7bb1492c1034e79e1ffa10a080c1f2918a5eea47e9cb5c20bb56615d8abb7cf39f477ae6b2330a55e263f755ea7988b477afd065a19e76cb5b","ssdeep":"384:vkXguCWoofYkFdj901N92Mt7bc94p6WSVPJM0+bx:8XZl0f92Mt7bc94p6Wym0+bx","tlshash":"ca52d99af660dcbd51d985cba07a2721b61e3944f203aca4f5acd4c514adccca131fbe","size":13635,"data":"","first_seen":"2026-02-07T00:49:25.178853Z","last_seen":"2026-05-05T07:37:29.101698Z","times_seen":973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7724d73c4f89398e436684d9824f9c87","sha1":"4f9038ca3fbd12b5780f0ac9b28739438a775058","sha256":"fed1315451fa00fb0790ecd966b344cd5f0d395202f967102b5ed4c90eeb1937","sha512":"6bfd2d4c4367f8636bcd98fe16ff050e9461b06982633bbdadf22bedd23c5c9d51ea9b602a6806cc46abe1435016d15f238f8e81564e7d01f9702f6e91830772","ssdeep":"","tlshash":"f511960a0175002a7ae041a4b6362ef5352d3add4e43caec5b857c0936b3b728d20bfd","size":1028,"data":"","first_seen":"2026-03-19T12:03:24.606215Z","last_seen":"2026-06-07T06:06:22.855112Z","times_seen":1182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2336.769b8281bc49972387e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bfc76782e679fb9b16195a690bc706f","sha1":"abb5759ea460ff8908556a735f9fc2978915537b","sha256":"5cc409510427950a0a3b158b510235e984243f6a56bffc8792d68a1220206bfe","sha512":"af12e690197808af9244fe11ae3acfc349a805ada9f64405cab098f2f3e1997610dd92ba1eccd17d03b015613c3d6aed3118afadceca579cf196bd6b9dfcab73","ssdeep":"192:2WArDmcu8VfxJQjkgarjQBUq+6RR7ANO7o8qE2F:L89vQjkgarjQ2qNRR7ANOk8qE2F","tlshash":"79224254bb93f1a211da75da483b040af23a289c262430a47391c8dd4d7da5a72bfb3d","size":10546,"data":"","first_seen":"2026-04-07T11:13:01.644591Z","last_seen":"2026-05-05T08:08:30.150538Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76133.3064908a6d7305ba61a9.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e33116d33238d719342fbabd86ffca3","sha1":"6e93f841a95eec8cc781008e03c7953e404f5481","sha256":"0237a34002ba43acc2bf41c9dc9532eba6a9d7c37b3a4580f71c6c1d5347ad32","sha512":"25a0cddb3f4b1fc08da410c1261af3c70f19f037ab0346069affbd17a33a821ec41955e38a05d7c3d22933d8c1aa86e504c7b43bcd0bc87296c2e1ed7adbff32","ssdeep":"768:1LY8jn/pG/tiHfepFKvq3Mu3cbSZuYsg6RnnJv7dSwg6NBpmi642UOeIz9XXBRlx:1LY8jnhG/tiHfe93QVnnJv7dSK7MTUlU","tlshash":"02e2a642e242606743f381ed0c354503a338abc678464dacb6a98def756cd4cb5bab7d","size":31654,"data":"","first_seen":"2026-04-23T10:22:42.529241Z","last_seen":"2026-04-29T07:45:38.594224Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/95706.06bfe84ebfb10f82ab74.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b3fd703ddf4b767220ada2c0ca0eab3","sha1":"4f6a75ab2c1d1d32eee475dadb376608cd63f9cc","sha256":"4ae110acc1a29bf097a8dbbc1e6059cb98b0e0f6bc26f4488b147ecccc1bc90e","sha512":"d012e7440b086b7c01cdd0655957f0cccc96590b529517d56f5a4d4d7167220d0fb625e313f3df2d5162d5a2eb65a6b66243018d3d1a72f39aefcd1eb5349de8","ssdeep":"384:dzpldI5pPatuo1abfvqDXGCE+v19S/CMPzOYjcPyF8G+UswCBzyiOM5eWPIbTyNR:dzpntuo1abfvwXFE+3SqMPzOK8vG+Us1","tlshash":"1fa2d8c571d2b0e2538b01f681bb0047f2bc6859744b86a4e168acd73d678ad73a7e6c","size":23129,"data":"","first_seen":"2026-04-23T10:22:42.502728Z","last_seen":"2026-04-29T04:31:34.512166Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/time-frame-view-renderer.cb932d32cf206ea62e41.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0d65afc83768b61b2c99b64a1cffc1","sha1":"4ed7ce4e37d786c0b025d644bc5054abcb33a87c","sha256":"0bcedea3705f8cabb510e103ef9f659a50faf10eca63130ffd4cb7c7ec6ae965","sha512":"66cf523847cff6e0ad785ef7e62999fcf841bd667b8813102a79d2924a6ed370515b71ef40b53a08d0ff56e168667570632a39487328c5fb366c0da52ebffaa1","ssdeep":"768:NXX3Udpgb6U/PLby/02ktrksvpagY1t7UxYhUu3QVg:9MktG77gZC","tlshash":"5cc2f9957160f0f462e705d9806f048bf63a3868744b89a9f2a4eddc76e854cb037b7e","size":26266,"data":"","first_seen":"2026-04-15T14:27:01.634758Z","last_seen":"2026-04-29T07:45:38.601781Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/financial-zPnx9bJV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"417c3560b9a06e8f35b782d8953fe502","sha1":"cc5eda3ee66b45197dae37c2f78e336e2f3cbade","sha256":"8d20ced9a95e9292c882b55287bbfd11dd50e5530ff195a67971b7729d3301e0","sha512":"b2085728eae444fb7c30c9cb41b272857a2c4439bee0103235a87ffd4b6da0b12556bb35422f9845ef5b2672417fa3cf9130b9ffaf527b9a7b86763698be4529","ssdeep":"","tlshash":"2dd0121a4b9413eed3ba7d4651d2cc26402b4c79bea355f0457a46370295251b29db04","size":277,"data":"","first_seen":"2026-04-28T19:21:23.137007Z","last_seen":"2026-04-28T19:21:23.137007Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/40260.2ae715334e6e29ae2cec.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ad1b8b9c3af50e9fb7005ee06099074","sha1":"fa5eba1c946d5dfe03b00964a036177536c0b9af","sha256":"5f0e9cc7021f310b294712e6dd5a0222d9454e3a396165c230ea7e8f9778662b","sha512":"1bfff4216517dd81c8c55ffa9e77a99372338ba26eaa525a3e25bfb816cfb2d458f070fc4022546d2a6f84f2ea896e03a3d94979fd045691e7256208b0ee1f82","ssdeep":"1536:04ecrc2hMNlbPWqfxN+fUE44ld4e44IJmuJY7+fHfvWr05KNyhLcSbWd4+o:YCxdswjaWyn","tlshash":"20d345b217f406f473b80d5293f77e591b3c74a359882c52d2a4d9a0dd40fc2a96ba3e","size":138371,"data":"","first_seen":"2026-04-07T11:13:01.812743Z","last_seen":"2026-05-05T07:37:29.095781Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61863.0d8f4adefa29ba2925e5.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e81e01e073f974a0b912981ff90632f","sha1":"f4b1c0e9a1e21b1393c8995585dd370e1220de3d","sha256":"965492ef0df8d2ab82a480eb3c9952a1a73bef80dafb8fb77495fc2930649e6c","sha512":"ca661e3ec6584d936c717f58463263896bd27eec09143d95730121f16db2769c6487eab93a66652ede732df9b5bc61a12a6cf12ba683f8ff3894bfafff32c483","ssdeep":"3072:769GrBTxaeLM8GO2HTxvAc8wtMcYRsCRgTwfVxwsbSOnecjBi4z:7yGrhxaf8GO0REwtMcYRsCRgTwfVxws5","tlshash":"bd04d69132a6f02613e1c5e618750402f31a7889794b85acf5bdacd73c9ac4e72bdf78","size":174727,"data":"","first_seen":"2026-03-27T11:38:57.878612Z","last_seen":"2026-05-05T07:37:29.007836Z","times_seen":688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/32387.b74023d149900e240d19.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3e0ff3394a6b3a081742c8e7f220ca1","sha1":"86d92ebcfa54ffbbf8d1491bd45ab0131830a03d","sha256":"08cf3608473c086a17eb67b87dfeeb2e125e2405538f20bf89fc7148f7769b4b","sha512":"8e007d9807242757db2b10b00143547eedaedc2525eb682cbae6f964b6d4471a98152b2713788719fe20b29742678d92a8cd1fdcc703b2881e3ddb608af2d455","ssdeep":"1536:YvqY4wv/eXX5nEIk5HPukSjX31GLks69y3tvM3O+jf3AdG3v:YyK2U6GvM3O0n3v","tlshash":"05d308e83996f6516ab7026700ef1817733c1a1b280c4960a615fd8e75b842fb17bfdd","size":132604,"data":"","first_seen":"2026-01-31T03:55:12.8802Z","last_seen":"2026-05-05T08:08:29.947184Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/motion-BeBk3o5Y.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"541fd24e797817ee1f8f4388bcba539e","sha1":"74e522c9eccba3da7cf8e8e4444b20dc05ecf8ee","sha256":"da520ec42819ee501a89e3cfc9e20a8d4e58d808c8352c350de7b8e494af2938","sha512":"f9fd332a52dd3ce214e8c6b201612f101975aa83654061bdc00577ffe6ad814f85d0e84c9e764ed43865708e860571c0ac6d75c23951b077b698a15041a8d467","ssdeep":"96:wSLaNIe1GgLcIeW0FMerm8hAYjWTx/mXKMexNl3DyV2FUYn2VmdfJHBXXm8Od1HY:wSYigQfLrxhAwWF/mxGDyV2FUVCJSxtu","tlshash":"e3c1f8dcb38878f287eb89abe037c315763121147419c8e0a06e7e3e6750da35533e66","size":5698,"data":"","first_seen":"2026-04-28T19:21:23.068543Z","last_seen":"2026-04-28T19:21:23.068543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip6-B60WAgX3.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37b1b94f7299f5780c82d2f678b8074b","sha1":"7d2fcaaab2211062575f7a49e32d570b8f815743","sha256":"6f667df5dbb914c46f8e793d627499a97cd487e1d0d81f727f75fbd81f98a55d","sha512":"299f11af30f7b2178e49d041e61847c69f7cd3eb43f4c2b352eb8e60dc462bcd14fa24d4675f096cacea8abe8c328c8b2cb73a6b3370604caa93443acce2507e","ssdeep":"","tlshash":"d3d0c739447844600436754445a3ac93d11ce386afb4c37a9032e44ff65fccb505bc37","size":237,"data":"","first_seen":"2025-12-12T21:48:41.863434Z","last_seen":"2026-07-21T11:23:30.530029Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_medium_widget.d86033b71ea9aa8996a7.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e6550810bf918c40702643ce09ebf9e","sha1":"baad8e675e37d1be41ac151ec94e679807eb052a","sha256":"2b63e7afcabca703c8cee746865012f395a9ee811de2b3506e5e082360390dc7","sha512":"84a85a97cb6a9e4cdf6fbaf261284d2b1c30a12f38a17f6923b9648ae7891448e16eca22cdcf7478fd95944f4ca571eef6fb5f13ef8c6a70ee236295244fc6ed","ssdeep":"","tlshash":"c6f0dc000118f0e672ce38c9f2d369920d011290b21bebdf8d88cd0540aa6d5fbceafd","size":531,"data":"","first_seen":"2026-04-23T10:22:42.554036Z","last_seen":"2026-04-29T04:31:34.471044Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/29990.58d1733d1b27cc1c08e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a77285c02ec824e43fe88bdbf734d6a","sha1":"9f4d66b4428428c6814e1630e03b771a079a113d","sha256":"8d98fefa4f3489d5193aa5bf17da99fdaf67bb280b29df39cb3d8c7018fc9b94","sha512":"47e8e8a874fbd77eff71a180c747a1f088ab53913a44130593cb74eed5e0fc97b7a609c5f6f78f904ada42da8b1ea44a5d606e9d100dd5c01938f69429936113","ssdeep":"768:eiEjxRvcsIj/XWmSVq4IK6+dNTQdT39G3fmbv2TzoJZemIwxK3yPkhBGPV:yyj/XWZVwFbMzoJZemIwxK3yP7","tlshash":"6be2f926592eeaf2defa41d614775441cafc01173845106876bcceec134dbada222efe","size":33102,"data":"","first_seen":"2026-04-10T11:01:44.659456Z","last_seen":"2026-04-30T09:21:24.274309Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/27509.859ec4d2364de631a2bf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ebe02f11766655e0da856772623334","sha1":"5e3e168c58e2dc04abdebef2c0191b3e30bbe83b","sha256":"784407da0b265498b3e9edda8c6aad5d154b5752ee7f19019d8a33f7f103cacd","sha512":"e5ff2fc6914335afa913310827e15d6abf29b263e58098f27fe116f1b413132e3ed12fce4277fa36c1c5d3f950e9b2023c8fe22e8a6a1f5d0ca311ffa9f61df6","ssdeep":"768:vvep6SHPhMc3edVuniDmsj0Ew09fAggyAKJV8LBmcl/thLm45ypjuqkU8b8DNMFH:vBSvJcVuKXR20VDcYCqGZ","tlshash":"a5f2faca31d6f05573e990eb84ba1083d23d68857c48406cb61cbcce791d96a73a7f7a","size":36336,"data":"","first_seen":"2026-04-23T10:22:42.447856Z","last_seen":"2026-04-29T04:31:34.48618Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-new-data-impl.37bb76b8623214e531b8.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"71fb2f2a628522d653df71d6d515d35f","sha1":"5c6e136e8869af648da586518a1042a170ee74d1","sha256":"bfda92ec38ee62992f4a941af73dd3ee9c9c631f52a20ffc26b6a279ed9cc84a","sha512":"4ea0aa96aa7b71b59b9899864787bc5f4bd3d2cba2c53177ea5c993becdfa823b2aadb91a015feec00c19f05f1186df9db7f5686da3f253564373053ce6f4d1f","ssdeep":"96:psIzPbXCm2bpHXHbgpiJvIoODRrnfnXk096vY9yPJ:uQXCmuRLgpiJv+DRrcm9o","tlshash":"9f919686e501d69c175b8de4dc2f21a0520f31da794ad3e4e926db3261226e4ec37e1c","size":4239,"data":"","first_seen":"2026-04-15T14:27:01.633037Z","last_seen":"2026-04-29T04:31:34.483217Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"507762f882c62fe4cfc7f83478b19d41","sha1":"aa284c5342fe4a52ab4aab9d2f3c67696c9cddad","sha256":"77d4573a9a4ac4c85c891f0311f6d0e34c52595b02aa54a280efbf374c18adad","sha512":"097f93a1acc7174cfb17bfffc763ae16f33f6be956ecb05eb0b67b23c67df0a69fb05290de684b5ad8b3fc61cdcf69f4737ec0821ca7e41433139f417a1d252c","ssdeep":"","tlshash":"8a2122f1a02264760ad705d822f6c7da3f333a95f1c72851887cc54621a6dc614b7eed","size":1442,"data":"","first_seen":"2025-07-09T16:57:52.353567Z","last_seen":"2026-06-07T07:20:53.969354Z","times_seen":9194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"16d3eb6aa41e68a8291f8cd28fbe3e5c","sha1":"a9212556eae3b9b5afe5264ff921069b0638bc0e","sha256":"cc59d4baf992e08abf84fe478990207a0135d8022e20b8a2d05a3003e34fc053","sha512":"cf4e3e2a6475833601f3d149e68907f28d5c8a8a19098468efcbfcf45f3756996f24c2188231b205abf0243caab0e07eaa2490c2ff8b712cfb87c5c019f3076d","ssdeep":"","tlshash":"aad0a754212b612234dc3054da2ee6d1f5151a922fd310ebd7993018b665893e9547ee","size":248,"data":"","first_seen":"2025-01-15T04:31:23.610495Z","last_seen":"2026-06-07T07:20:53.996054Z","times_seen":9715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/82484.0774d72716e6b07fab9b.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8b336cb1e4c2d0d3fa1a38ddce1adf7","sha1":"aead262c50ea46349c31d5979dee19373d1a4e54","sha256":"0b9dad3c52b8b0d5a60f28b97bee1e94883f8d7d069ab5a06f8b83de12ff278d","sha512":"3f60c8077d8fb6e3cd8b85352385bdebc0d3671734f74344ada795ed169c9da65a7be76e11a6e821394bb1be7fb72072f67a0dbbbedebb5ab0a263919900e765","ssdeep":"384:NEPCRWZMRohlJl7tg+QRS6DdUs+JrmSgCWs9pu3TsrAkrRQkNrJRQ6Rql6cfvnZC:NEPCoZMqhl37tg+Q9DdUs+JrmSgCWs91","tlshash":"cd62ed8279c2f4b967915c80946f0445f11d4d2cb04eb8f8e3e6d8c6dabb18fe426b76","size":15718,"data":"","first_seen":"2026-04-07T11:13:01.721375Z","last_seen":"2026-05-05T08:09:20.5451Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/widget-6c7c091a5c491401e722.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92be4ba7247b57f4845cbf3d64747a90","sha1":"0a4812cc99106c985e354354a084261450dd7761","sha256":"0b38d63809b8854d4a50bad1a3d8b63d2b307e151684c0a80aa779fc11bef5c4","sha512":"44ffaf42dd235d8bbf497c199778f6cf0b8e447210dc1d7062483a96e92052ac83c0cf61b5309714702483cd15d93d71cc5350c3e57d3a6b340525f623b53b9a","ssdeep":"12288:jp3GQAxMQAh5ocCM/SfyxOxEvEh6qa+2n07WrFwPDKtP9QzBmgMnWDkBf9:jo7G/5oc0mxqkBf9","tlshash":"43052ad9b1d2b07603e320a5887f160ef2ba99586009d491f6b9e4d5bcb854ee077f3c","size":804891,"data":"","first_seen":"2025-07-31T16:26:05.4453Z","last_seen":"2026-05-07T21:42:28.554354Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B0bjfhc2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3a674058a2b8ed2e16957f28e58ae01","sha1":"f7c253108ff6a1e3103b0d62c9df8441b9191b47","sha256":"bc1cac2feed9b67271112178f2c52c1b3c66dd384e51a24fda3b8fca4238c43a","sha512":"02ae007ac0672a45d16ffebb3c7384b9189ee6731fed056bbd0817863877ebf664d0c365a2028c9140dee976bf1bc8e88c47a82c3a500949d98a075c225966bc","ssdeep":"","tlshash":"c6d02baa2c15b0fb4345555005ec4536425f5180375756b0c1b6234601932ded0599de","size":282,"data":"","first_seen":"2025-09-07T17:41:22.070776Z","last_seen":"2026-08-10T18:16:57.046519Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qevorinex.com/assets/motion-BeBk3o5Y.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/motion-BeBk3o5Y.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-1642\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8TuO70ZWEZiiAGD3vnD9qEaT3QeaAgP7og6OwjVKpdeGB3BKguJ%2Bzf1oelMxMOYDK87N%2BUo61YOqeWXzBIjLEF0DtHDEZNzaOYTwVZxJAgqtnJgszlit%2FXZvQahX9%2B4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0af335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2734)","md5":"541fd24e797817ee1f8f4388bcba539e","sha1":"74e522c9eccba3da7cf8e8e4444b20dc05ecf8ee","sha256":"da520ec42819ee501a89e3cfc9e20a8d4e58d808c8352c350de7b8e494af2938","sha512":"f9fd332a52dd3ce214e8c6b201612f101975aa83654061bdc00577ffe6ad814f85d0e84c9e764ed43865708e860571c0ac6d75c23951b077b698a15041a8d467","ssdeep":"96:wSLaNIe1GgLcIeW0FMerm8hAYjWTx/mXKMexNl3DyV2FUYn2VmdfJHBXXm8Od1HY:wSYigQfLrxhAwWF/mxGDyV2FUVCJSxtu","tlshash":"e3c1f8dcb38878f287eb89abe037c315763121147419c8e0a06e7e3e6750da35533e66","first_seen":"2026-04-28T19:21:23.068543Z","last_seen":"2026-04-28T19:21:23.068543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip6-B60WAgX3.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/vip6-B60WAgX3.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqO2UCLxMYFn%2BErr6AMt4RF3A9Aa%2FmVDtp05k9zlftNm%2BseUGxIboI9b1C7lc3EHU6%2FhcgLKpeEOs8kN5Ld5drUb7aFCV09PIpbLGdth%2F7UBzf4b65lsBgI4Jy0Dfutq\"}]}\r\ncf-ray: 9f386c6e0af635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"37b1b94f7299f5780c82d2f678b8074b","sha1":"7d2fcaaab2211062575f7a49e32d570b8f815743","sha256":"6f667df5dbb914c46f8e793d627499a97cd487e1d0d81f727f75fbd81f98a55d","sha512":"299f11af30f7b2178e49d041e61847c69f7cd3eb43f4c2b352eb8e60dc462bcd14fa24d4675f096cacea8abe8c328c8b2cb73a6b3370604caa93443acce2507e","ssdeep":"","tlshash":"d3d0c739447844600436754445a3ac93d11ce386afb4c37a9032e44ff65fccb505bc37","first_seen":"2025-12-12T21:48:41.863434Z","last_seen":"2026-07-21T11:23:30.530029Z","times_seen":9,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B0bjfhc2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-B0bjfhc2.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-11a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQiradGVqbBYG83Qsp47eZOClaJH686R0RrZs37ij1UPVac9I6tZNMkmHrXqC6tTscKb5CaMUayW8Euet8%2BHbJVDMWpv9isahD0LQHK821tqqzDkvw20iJO5Fx6ezWgA\"}]}\r\ncf-ray: 9f386c6ffb6535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f3a674058a2b8ed2e16957f28e58ae01","sha1":"f7c253108ff6a1e3103b0d62c9df8441b9191b47","sha256":"bc1cac2feed9b67271112178f2c52c1b3c66dd384e51a24fda3b8fca4238c43a","sha512":"02ae007ac0672a45d16ffebb3c7384b9189ee6731fed056bbd0817863877ebf664d0c365a2028c9140dee976bf1bc8e88c47a82c3a500949d98a075c225966bc","ssdeep":"","tlshash":"c6d02baa2c15b0fb4345555005ec4536425f5180375756b0c1b6234601932ded0599de","first_seen":"2025-09-07T17:41:22.070776Z","last_seen":"2026-08-10T18:16:57.046519Z","times_seen":31,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.08cc4e1e104734ddeb6ddf90441c466b8.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08cc4e1e104734ddeb6ddf90441c466b8.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2093\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10874CE63A838324CE3C2\r\nAccept-Ranges: bytes\r\nETag: \"59A39E74706B1F8397161669B902B26B\"\r\nLast-Modified: Wed, 23 Jul 2025 12:39:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10256441597505335718\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: WaOedHBrH4OXFhZpuQKyaw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2093,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"59a39e74706b1f8397161669b902b26b","sha1":"d34455b3d57dc89fb4fed96be0d56b602897ed4a","sha256":"1e16752c17518a239ff8ce8dcd001671d1cf210beb17822a7cc51af4564ce2ee","sha512":"295123dff604e56b0ac23c23166d7e3b139fa9be5e6acbbd40466ef2f37248142ac9f5a8521df4d1533f120ef13fda5f447f149901d047671b8a0207bd21dc91","ssdeep":"","tlshash":"994118db6a103c2d8fee4b73fc2a0fe64883417ce56090466a19b0b7244436379cc50e","first_seen":"2023-06-13T13:09:47Z","last_seen":"2026-08-10T18:16:57.020499Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2047,"timings":{"blocked":883,"dns":36,"connect":278,"send":0,"wait":280,"receive":1,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0cea1645c4e1748bda29fa3b067daa24f.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0cea1645c4e1748bda29fa3b067daa24f.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877794D1038348E572C\r\nAccept-Ranges: bytes\r\nETag: \"7CF1E84029B517FE9A2CEDA7A774A325\"\r\nLast-Modified: Mon, 28 Jul 2025 10:40:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3365694140612275276\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fPHoQCm1F/6aLO2np3SjJQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"7cf1e84029b517fe9a2ceda7a774a325","sha1":"a987deea4ba58f400bfc64ce8d16dc4d59f95775","sha256":"e15eac0824c92a20b8ab4a8bd9d0bfa8b0642bf0c4c5a49a39ec1768112ded87","sha512":"ac15a69d1f9daa3e010cdd8cc662a09bf51a4b6b667e7a1e0b4e62fb391caaeb320dc31dcd4b0f1e5db5798e9ba6492dee0b3456ad1b74ffd44d5f32ad4ffbb6","ssdeep":"","tlshash":"9021eab2bff525d3c5f09676531e0508f88a7cd02089e560fc116b7ee167845c5431c9","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T18:16:56.977554Z","times_seen":135,"resource_available":false,"data":null}},"time_used":3185,"timings":{"blocked":2899,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/68539.7c91b0ec4eef2fc2bcba.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/68539.7c91b0ec4eef2fc2bcba.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb86-7ce4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:14 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b06b2b5f46dc9ef4669bffd404ed1661\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31972,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13339)","md5":"1d86f7627113ed4696fe785ec14df2bf","sha1":"9149ede7a0beaa4effe57c384a7d8e7a9a6e7726","sha256":"e4e5ca00c9c8b88f9409e4250363607152b1e66ec98fd41bfe3344fb65c234ad","sha512":"7c14ee62fefa69a8a9a27b1487379e761f5e8010f6789152043b86d5b39b5d6ee4aca898086ae81234d1a436699268b5712c68c616df24cd80528e8ccf1709a4","ssdeep":"768:ocLjeXq+fR6P0OITZAFfTPrY1JuzUh3jx0LPiqqEGek/PPh3swuPMnuU2Kxb65XP:ZnIvJuzUhzyPqEGek/nWBMntb65XwzuL","tlshash":"b7e2faa2a9239c331fe51b9ed87b350291d84679e5823c68bef858dd0d8dac070f355e","first_seen":"2026-04-23T10:22:42.465814Z","last_seen":"2026-05-05T08:09:20.509956Z","times_seen":437,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/82484.0774d72716e6b07fab9b.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/82484.0774d72716e6b07fab9b.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0a-3d66\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:50 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:28:52\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b3e4f8b67c41d2db760d83781f6ad731\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15718,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"d8b336cb1e4c2d0d3fa1a38ddce1adf7","sha1":"aead262c50ea46349c31d5979dee19373d1a4e54","sha256":"0b9dad3c52b8b0d5a60f28b97bee1e94883f8d7d069ab5a06f8b83de12ff278d","sha512":"3f60c8077d8fb6e3cd8b85352385bdebc0d3671734f74344ada795ed169c9da65a7be76e11a6e821394bb1be7fb72072f67a0dbbbedebb5ab0a263919900e765","ssdeep":"384:NEPCRWZMRohlJl7tg+QRS6DdUs+JrmSgCWs9pu3TsrAkrRQkNrJRQ6Rql6cfvnZC:NEPCoZMqhl37tg+Q9DdUs+JrmSgCWs91","tlshash":"cd62ed8279c2f4b967915c80946f0445f11d4d2cb04eb8f8e3e6d8c6dabb18fe426b76","first_seen":"2026-04-07T11:13:01.721375Z","last_seen":"2026-05-05T08:09:20.5451Z","times_seen":1079,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-id-C7LPS0AZ.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/use-id-C7LPS0AZ.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-98\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJiy6T2UmsOyyZg%2BPWQtzpuLS%2B%2FWBEtb9BCp68S0bww02SlTXBVlC1vNQprdd1wwJItUPwc7MWThr9C%2F7m7d%2B6zRFckxjuznML7Tt75gi%2BgBhCFwLtiPvBAvw3CQ19Dm\"}]}\r\ncf-ray: 9f386c701b7235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c5995049e4a316ed8b60472e0127eebf","sha1":"5f761c47265fd3444bf4a31ad362a857946d4c8f","sha256":"0f0ffd239f997d704273e6d76fd485d2bbfa8e81ece0f26556ddc8c676d76a1a","sha512":"24421ed663ee57558738196807c91eb3ed63ca51b48ce2d10bebcea1985eac5594d7ec8ba730774262f38035f608cd0cfb56f66c8da82edccf322c8a56677fa2","ssdeep":"","tlshash":"f7c08c49784860f426190dd4e22a066a822a781417aaa9a0f266472a19b126663baf04","first_seen":"2026-04-28T19:21:23.075539Z","last_seen":"2026-04-28T19:21:23.075539Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGbj8ZkKKTOgKho015OsO%2FNnNqDy55zYO4rYyyq1%2BuoUcuoGVH32VAO%2BQtAf9r9UmjPwJ%2BlZqLgLA7cDk7ERtiBJOhsWLxEW3KJHXeZ%2B9dQyVqqyfq%2BLfIZmSmTPvQ0A5wV%2FBwyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78cb4fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"55605e2e5c4d9ebee4136f47a5986e5a","sha1":"ed92fa6e5c8e6c9fbbc7d66046165c243c3e615f","sha256":"ec2990f9315cd764277e04bfcd8a1a82a814c7555d6b5e1151d1d1aa506b9f8b","sha512":"b19fabf942ac9c603d8e197b005a28a50a14ec3bd8998e90d75efe463f50812884e4c3eec73424ff82d40c72d042eed417334fd2c3884f0ca04d6aa58f5fbb0f","ssdeep":"","tlshash":"c3f0970e053cdf7a180240c722ccbdcc622e2687c660cd388a5bcf2c82f16ba1b2bd04","first_seen":"2026-04-28T19:21:23.077129Z","last_seen":"2026-04-28T19:21:23.077129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-CvghBqvW.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-CvghBqvW.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-50415\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49xmqsacKzCexOVLJAUe9o26WsO%2Ffewnww5Yiaeh30fwFnulj94GA9IagYCYRGIjkUb7LKIzh8fw3dtiKKBTdgrtDoLDrBUIdXSJ4J0525l5RowC3WqI2A%2FX%2BCExKH1S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78ccc635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc689b0e01662eb341ef007ea366cd58","sha1":"6ee076baca173e74ff6b76126b45639bb37f2702","sha256":"e3df3523036a59f7b47ac1dfa95cbaf12d5c838abafad1078d3e3ec90531a97f","sha512":"78ff4bd8d4f632943d58b01bffacd103da0dcdc115157b25aa93e7f9e1dfee87671f2cc6ef9a700ef4d678a2a153ceded4c922415a976732b331e51115922a69","ssdeep":"6144:mHEOIqk8rui9oZ/izrQvIhH6AG18RjguSsRNWTROLtiRumPOE:lOIaQZ/i/QvuH6mRlWNOLdE","tlshash":"a6645b84b29570798fe654e5a0372101f231bc11b4cd8464f6ecdefb2ea98894767f3a","first_seen":"2026-04-28T19:21:23.078152Z","last_seen":"2026-04-28T19:21:23.078152Z","times_seen":1,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D_twvx-Q.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D_twvx-Q.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-538\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2%2FeSpwEiQ1rIcy2%2BVrqZvBWxflHitJeGrqJqnG4jP90kyj7ccvxCm7NUWCw%2BGGOlLg7yw%2B0zIphaHqmbbEZcvnnyQAOqvVVXyH3SCWFXRAxSiCV2hkP3bt%2Fr%2BsgSiAt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0aeb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1335)","md5":"9580315d4b456e697486147362227cb7","sha1":"ae5d2268a99c14ed182befd86b1abd42671bc278","sha256":"d857eec607ee2c167c6e9cb22bd239e95c8593b6c96dfa07eac06f63e54e1f57","sha512":"5745da19b1434c8aa0990dd2b429ccb7b2e91359430dba8237104731688428e727738a6819ab5ed19f3f90972a2c7a9fd57bfc3cacd2499fd3885056a0dace24","ssdeep":"","tlshash":"8f214280b809ef3a15e348a110202054545a3f8d9ab495d060eb67b177e7c58eb0f72c","first_seen":"2026-04-28T19:21:23.079436Z","last_seen":"2026-04-28T19:21:23.079436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/colors-CS7848yA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/colors-CS7848yA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-cc11\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAukwfat7B06nC06DXCoPyHdPWTBv4%2B4QR512cPxgnGBUuvQlm%2F%2FDAhH4tZ4nQKA4a6NVy8a12a2vGagPoPqUKkdQWBL41Dbo9ZWfKMlfq7xEsKACPMFbHALmZ2O8FfU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0aef35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52240)","md5":"8f972ae6b2dae7e6a85da4c924a29f7a","sha1":"fe9495df617b591ec359ee328811ee4317055904","sha256":"52830e8958e45ccdbc300e62ca481ed59df06e5e45d357030eda66890ddc6028","sha512":"fc3df2bfb93824d0079b700b969ac6952bce230c5142924e8e37ee56e9b25e49f7d0df9fbf9bc008f93d736dd1cd2a5fc2ebfb3373d40e1c92a1b539601c67f7","ssdeep":"1536:scTHibs0CjKUblwMioHGCKkvG0FCePJGmKPRaJa6EFoV4kWZ/Nc:POUblxioHDJHf6gyc","tlshash":"bf33f8d47181b03283aa5161806f010bf339a904b44fd498f6aee5dd3db984aa37bf7d","first_seen":"2026-04-28T19:21:23.080683Z","last_seen":"2026-04-28T19:21:23.080683Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D-ctkCWj.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D-ctkCWj.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-DE8HP17O.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-9138c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQmmR8PCc3RUmkQLkRHk6Yc3vbQs5fFZwSKdaHuV1jsESKrD61RB66iMnu%2B9s9EmqF7Fm0MffI3vdZHYUmhKNjoMsCHGMUF%2BfI%2B7S7pUw9g5Ae%2F5VLohL7D%2FzvmoAtH%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6ecb1435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"681ccbe42ce35ac7c3a71451507b7f93","sha1":"b7b1e18f53851fc303034a3f84516bf6541cdb3f","sha256":"eb18152b859157b2a20753b278cc0e1d04577ecb547585bbe17c49385f54c036","sha512":"4b592f60e7ad198f11a6ec66c3d7ff42debb022ff77491458e1ab9bd3480c6c04c425fda1920b488391bd8c4497c6ca15468b638e79e99a022babd6534a1e36a","ssdeep":"6144:434Szb+VQurUKolflflflfl5123mlflflflfl9:4ocxuQKohhhhP123mhhhh7","tlshash":"fbc4738ab7841bfaf68518f94168960ba8b1e96d342521c4f7f557ab313d9f03c2c378","first_seen":"2026-04-28T19:21:23.081996Z","last_seen":"2026-04-28T19:21:23.081996Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"qevorinex.com/assets/index-D-ctkCWj.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.094e8df95004949e9a235713feee1742f.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.094e8df95004949e9a235713feee1742f.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6247\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108757CD23C373784BF70\r\nAccept-Ranges: bytes\r\nETag: \"0852D77F755ABB1CC2E590C2630D8064\"\r\nLast-Modified: Mon, 17 Feb 2025 14:19:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14660025853636177743\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CFLXf3VauxzC5ZDCYw2AZA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 190, 8-bit/color RGBA, non-interlaced","md5":"0852d77f755abb1cc2e590c2630d8064","sha1":"447b318382ee30f3512ef0ff97b15f3153454503","sha256":"6212dec828f374c06bb31c46c8dce2f86b3679979c0b92c9db3f1bca6e322708","sha512":"555f6348fd5057e3f08344b972ff204c8233886ae8f33833ad65d0807209bc5fe28714313a5e845724e5081a4058cf5393a1114e39095fe8ce090b1a42b4d615","ssdeep":"96:J70027Mj54KrLSYq82K1xI2G9h7WTqlQRrAe4UowLB89ak/Lt096C:J727Mj5mY12K1fG91WGlQRcelGN/Or","tlshash":"00d19ea3aef56887216207d01854dcd56f176cb90a3226e9d8dc41c819bf989d8c10d7","first_seen":"2025-12-12T21:48:41.92543Z","last_seen":"2026-07-21T11:23:30.593049Z","times_seen":5,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D-ctkCWj.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D-ctkCWj.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-9138c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8ibtswINGgXP638jGU55li%2FWwKtU8mAUfgCLVW1C6OmYo2X11ZunrAO9jfk8HjopjTxH7UEpRTp7Ei6voeoUBMgnZAD18UbV1PVrwyYFGbyILg8OfW%2BF96NPXJcDs8V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6dfae335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"681ccbe42ce35ac7c3a71451507b7f93","sha1":"b7b1e18f53851fc303034a3f84516bf6541cdb3f","sha256":"eb18152b859157b2a20753b278cc0e1d04577ecb547585bbe17c49385f54c036","sha512":"4b592f60e7ad198f11a6ec66c3d7ff42debb022ff77491458e1ab9bd3480c6c04c425fda1920b488391bd8c4497c6ca15468b638e79e99a022babd6534a1e36a","ssdeep":"6144:434Szb+VQurUKolflflflfl5123mlflflflfl9:4ocxuQKohhhhP123mhhhh7","tlshash":"fbc4738ab7841bfaf68518f94168960ba8b1e96d342521c4f7f557ab313d9f03c2c378","first_seen":"2026-04-28T19:21:23.081996Z","last_seen":"2026-04-28T19:21:23.081996Z","times_seen":1,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-28","alert":"Hunting_JS_WebAssembly","trigger":"qevorinex.com/assets/index-D-ctkCWj.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/eye-Dgk2fP9X.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/eye-Dgk2fP9X.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-62a\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5cogTxCD%2BH6Sx0LX8KnR9qFklq0Brf7OZyhgoTgwgexL2msHDxTbq8hjFSPnNB%2FBEhITBjgM3IaQ0CnewhHFIlcrJ9w4SvTbQXCFqT%2Box8qsGrunTWjXZKz7c%2BFe9HW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e3b0235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1578,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1577)","md5":"53e216064cf97b09616aa14eb3396d24","sha1":"b1224a9eece1f8ffd41298b301bb72adcea6a33d","sha256":"ed9d835ff4272945bd0b1f2f6d4bc88f803530288d34052ade10238602c524f4","sha512":"da088d7697d8b1aab1c49f75487eb05967e510d2db5b267ce049bed8cec608447fc6c051980cb63b5502300bead1f91faad5c4dd3b9eeee554cf81e0f99b0017","ssdeep":"","tlshash":"c631a8bd2242bbed6136ca623413762ad4701b75af795687fedb2244f3a24052dc286c","first_seen":"2025-09-07T17:41:21.984938Z","last_seen":"2026-08-10T18:16:57.05751Z","times_seen":32,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0843e16ac5a3043edbe00ad20e3d9d875.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0843e16ac5a3043edbe00ad20e3d9d875.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1218\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108757CD23C373788C070\r\nAccept-Ranges: bytes\r\nETag: \"D34183DB66626408066857B67F7900D4\"\r\nLast-Modified: Mon, 28 Jul 2025 10:26:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5782617094063956613\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 00GD22ZiZAgGaFe2f3kA1A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:03.634777Z","times_seen":305,"resource_available":false,"data":null}},"time_used":1914,"timings":{"blocked":1636,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:20.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/\r\nOrigin: https://qevorinex.onlinesupportcustomerservice.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9f386c78beb749c5-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-08-10T11:32:50.303112Z","times_seen":78336,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":18,"dns":2,"connect":1,"send":0,"wait":37,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/financial/list?pageSize=6\u0026pageNum=1","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"POST /api/financial/list?pageSize=6\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtHyj%2F5U7oV%2BLwuVABgP%2BE1im1RhEsFlY%2FR%2Fh%2FXzC0y0WN9imPLkFV54KlBQ%2FJBB14IG5c4B9CXL%2B4CeZF8bScsG1gM2CrI%2BD7g1pXJ63o2wkREu%2F4xjJvkdS6FPyPxsMhU%2FKqOa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c794c5fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2858,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e44b13779bfceaf51b5b20448ae184bf","sha1":"1601631f7c2045d22b079867bdaeb04a0b8eec39","sha256":"1de33be369784b5d05b7b81e69cdd34baa8f3527c26c7bc954bc20d4fe3d5a5b","sha512":"6b7208c79fd93db34ba2f84e55455f65b75adb973139c86f2afdef794e3be1dbe2e38623bd5fcd4799f540a2e86ff055f6ae6516eb14993c2e93699a483b1be8","ssdeep":"","tlshash":"165103d1722e88e5c5e11492faaf78d6959c324f4dc08e5495cf8e6d8d688734c0a70e","first_seen":"2026-04-28T19:21:23.087029Z","last_seen":"2026-04-28T19:21:23.087029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/parseSignature-CXLIVmT8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/parseSignature-CXLIVmT8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-d13a\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nma%2BELPZvUrmHh8okvJ0qnWcLW9Y76A0rq7kd2WX53hKOaVbUZsB4RBAWBZ%2FXAoSh965kVOR%2BxNQFg%2BDLNlhqzdUMWL88OqUq0m4o4995PgAOpbGtzfn%2B5OtcSnfBBZm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7aed1535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39564)","md5":"2662d9bcf3eab650de4769184d92bf03","sha1":"8e4c107efc49cc22bbb95a25023f94f8c7e9b911","sha256":"b01bf138c15ee78a8606cbd5b6b0809c6c610bfbf56a6c115ba7340b255b3607","sha512":"a305847c01e660b45420a23451e7dad8385624aa6510e8b3170df1e4eb3b11819c74f4a18f3e45a264501a997634bf814c47f4214e644e128a408f2f39069ac3","ssdeep":"768:xX0nJ/CMiFHLup2cN7E9DATzWZzqXDm801aYes5+2IgxVpvRNiRkP1RqziCs7d1V:NAJcDsmJ1de0+1EVh0gMVtxq3+a/nv9L","tlshash":"f5333bc4b6b9b071938474d0906b6101e128b9d1f44d8091f2adde6b3ffa94cdaf2e1e","first_seen":"2026-04-28T19:21:23.088395Z","last_seen":"2026-04-28T19:21:23.088395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/17801.15c5c25d27a56a0df772.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/17801.15c5c25d27a56a0df772.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e5c53c-19360\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 20 Apr 2026 06:18:36 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/20/2026 10:38:12\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 723237b680c478488df1537f1d554958\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":103264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ae28448cb02ee3491028f82c9e212b5","sha1":"840f868063e33818424634685f83f5dc9c54fd85","sha256":"6d8af262e85da3952f96074c40841361fe81de28292a6654a4b6a5c8c0d9a1b6","sha512":"615657ad93d0166da77c83a566e60f1d4002b7a4a1c811227c935f2a4ea91b16e01893aba5c708e2a1b40c39c6e773c08d99e62560bcc1c8df301a3b9f1b3821","ssdeep":"768:ywlwokCcAfM0x/2bcVtmUK6ogvY0FGhgiU4vWQs/WQ2das9:oIVtmUK6ouY0FGhgi1vjs/WQ2day","tlshash":"dea335bcf95192bb5e9b587f4398f6697648f943fd066f86bf00c00020c6ee710e5a5a","first_seen":"2026-04-20T12:30:34.890238Z","last_seen":"2026-08-11T04:48:35.748314Z","times_seen":6415,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2336.769b8281bc49972387e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/2336.769b8281bc49972387e6.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0a-2932\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:50 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bf74bd28c13dd2bff8a3fc39b79d1b2c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10546,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3065)","md5":"1bfc76782e679fb9b16195a690bc706f","sha1":"abb5759ea460ff8908556a735f9fc2978915537b","sha256":"5cc409510427950a0a3b158b510235e984243f6a56bffc8792d68a1220206bfe","sha512":"af12e690197808af9244fe11ae3acfc349a805ada9f64405cab098f2f3e1997610dd92ba1eccd17d03b015613c3d6aed3118afadceca579cf196bd6b9dfcab73","ssdeep":"192:2WArDmcu8VfxJQjkgarjQBUq+6RR7ANO7o8qE2F:L89vQjkgarjQ2qNRR7ANOk8qE2F","tlshash":"79224254bb93f1a211da75da483b040af23a289c262430a47391c8dd4d7da5a72bfb3d","first_seen":"2026-04-07T11:13:01.644591Z","last_seen":"2026-05-05T08:08:30.150538Z","times_seen":581,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-udjr8jGi.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-udjr8jGi.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5ec\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFJDbkFPO2Ku63lu32RpmhkrrVMr%2FLbh3a3xeDPZPmuK3%2BpmJN7b1JPBVTcuKbWdP9okf5vobfsYjV3C%2BGosps%2FeSzFYhNor7iqZ98pWEWPjQE2ezsbvJz%2Bq%2B88MlpLR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6dfae735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1515)","md5":"9c19cf492a189409d23bd6b8e1750f1f","sha1":"ad23b51ffd12e8c5244ab3e403279b6242e41714","sha256":"e189f2b362d691bb91d4191473e1b56fc45ae5255365dd27e073fcaba06dc81c","sha512":"0ceb0cd124b62bc649bae600fa1b1f4e4292fcf4a55c610b6abe525926b027feef1b75f0585740cdb7b7b95007120a7b6fca191d79bf83de0ae093a74d492902","ssdeep":"","tlshash":"d431ca4f2c55b776abb29c2371861d5544178b7cfebb3c3056a4ed62182f08410be26a","first_seen":"2026-04-28T19:21:23.091006Z","last_seen":"2026-04-28T19:21:23.091006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.000c75f8edd0a4ae888b2200cb6f0ac8a.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.000c75f8edd0a4ae888b2200cb6f0ac8a.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2522\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108767CD23C373772C170\r\nAccept-Ranges: bytes\r\nETag: \"7FC81E0767BD186634CB67865E4F338D\"\r\nLast-Modified: Mon, 28 Jul 2025 10:27:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15533327414700587207\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: f8geB2e9GGY0y2eGXk8zjQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7fc81e0767bd186634cb67865e4f338d","sha1":"8368f2aef485e97eb32ec2170e2c4670b123c75f","sha256":"03f146f5adaba0d00564b1f3559d7a987356844a0969d7c901c7745d36f43039","sha512":"8699d8a576c60fb5429fd032e10778cfd12e20b15086c5894ca86bbeac766ef640994a2a73a8a0cc8d9df1b8e6d51274f95b3a8bcee2512171cc741594e89ae2","ssdeep":"","tlshash":"4d514cf41472b7f5195a6f536c90e75cfe890cad1030c1a27b930b702e6e995ace291d","first_seen":"2024-10-18T13:48:19.627179Z","last_seen":"2026-08-10T19:18:03.587943Z","times_seen":115,"resource_available":false,"data":null}},"time_used":2187,"timings":{"blocked":1909,"dns":0,"connect":0,"send":0,"wait":277,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T19:20:17.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwZiFkdV%2B%2FU%2FrpUmlCZkVcXqEW4g1jMJV4FlAvHlSWik5a58PLDHrj4ifoWtxRW4cLvTc34hoT3%2F%2FrUmLza1aIkPMkEQSXO%2F%2BN5kNN6k%2B9bBaomokJjgOHNAneDNUWLI\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f386c660ce75687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4709,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, CR, LF line terminators","md5":"2ef36587ef4a3454be7f277af0c66283","sha1":"65e0c19233cd036c60a09dedffe0f205036271d0","sha256":"85e9e85aef1f066e662d5b796a6afcfa8feb18497289aa9a54fe895bce609bd2","sha512":"74c58166e43c34ac5a21b1492f2efb202929532e11f3b9aab2bda21039a8f8d71f4ff00e5e97b2606fbb7a18b553d6b2f07e3f5b44f6f4ee16f6dd73149cb23b","ssdeep":"96:vusMbHAyLcyDvw81A3JuGLM6ZpUxoy4WofNK3pNKSNKXN2SRnqo:gjA2cn8q3JuGL5ZpUxoy4WD3GdgSR1","tlshash":"7ca15386a8c20018e1734b391fda7a05f767c1139a07cd743ddea21aafa1d9909e37dd","first_seen":"2026-04-28T19:21:23.092729Z","last_seen":"2026-04-28T19:21:23.092729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":44,"dns":31,"connect":1,"send":0,"wait":114,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/CustomServiceButton.vue_vue_type_script_setup_true_lang-BVwY95Ct.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/CustomServiceButton.vue_vue_type_script_setup_true_lang-BVwY95Ct.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-17d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AX1kXod7SATRw4l4U1b3d%2Ffg2G6eFykQU%2BHEoA%2FrOHgwBFD56OBCEIYEKFoVnQgNPEzANHCjZV0LlZUxsYu2Yrasp7dPN9RGpdQz6noHnpnOppkmx7pqhTSa3aafND8\"}]}\r\ncf-ray: 9f386c6ffb6835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (380)","md5":"b9e7157b42c5ae53b706d4936fb32103","sha1":"ec1aaccac99f684374c6246a8f9098bf943cd34b","sha256":"a520078f89cccfca686e66970453ccde1a7e3646c12ffb40c61dd55041e3f462","sha512":"99172ea386fe4c3654f8d1b893af1368f28cfed192a273dcd00c6c60bec7e83ce395bfd88418b1422dd7f299bde88e28e47d20912c1b627aa2a823a9fa59999c","ssdeep":"","tlshash":"08e0610414417ff8c57b9a511b274a092126047c16581165d98ac56436f30d3ea2feb7","first_seen":"2026-04-28T19:21:23.094136Z","last_seen":"2026-04-28T19:21:23.094136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-tab-status-DB450rZV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/use-tab-status-DB450rZV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-60\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJ2m9OY4XYN%2FhtuFEAd2r%2FrFjA3AKFh88d0cWjGW5nKqGHTsSrwl6vcWVS%2Fud%2BBdNGnPkluL93jgqqx9xA2rBFb4Tj3P59QBWXjwIZ8Ip191V9B03siaHY8uK20KySRI\"}]}\r\ncf-ray: 9f386c701b7335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"968ee546d512c045a407210af6560212","sha1":"5447f7eb06cf6b9b01adee73a843661bd16fe424","sha256":"828c0d820decf1eb95a259d16388ee8ec29d7eb63d5d7dade7f61eff9fcb2510","sha512":"1b239b70f9775c3ed1e47402ac3abb421d4be99ed093a842145c5b93c5660acf3ee8f9909ab8ca7c72897583990241712e570a7fa8606c8cb050854be504b8b1","ssdeep":"","tlshash":"d6b0120f0c0070b9040a0dcc231c18324321985d2bf25ad09215cb141b511caf10da02","first_seen":"2026-04-28T19:21:23.095444Z","last_seen":"2026-04-28T19:21:23.095444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/widget-6c7c091a5c491401e722.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:20.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/js/widget-6c7c091a5c491401e722.js HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 189189\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=14400\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\nage: 7213511\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8apa5B%2BJLJhBMFsj7osOlAIsdAXzKew2tjlgAdwL1CW7NzNTZe%2F2l6za3vQRrlk%2BGzcOo6MHs2H1GwYC7rxIZxaVsH6QY%2FXHiNrXD4b3Khfs2jleIa%2FDfBFoFWxsXG5\"}]}\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:21 GMT\r\nx-cache: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c789953b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"92be4ba7247b57f4845cbf3d64747a90","sha1":"0a4812cc99106c985e354354a084261450dd7761","sha256":"0b38d63809b8854d4a50bad1a3d8b63d2b307e151684c0a80aa779fc11bef5c4","sha512":"44ffaf42dd235d8bbf497c199778f6cf0b8e447210dc1d7062483a96e92052ac83c0cf61b5309714702483cd15d93d71cc5350c3e57d3a6b340525f623b53b9a","ssdeep":"12288:jp3GQAxMQAh5ocCM/SfyxOxEvEh6qa+2n07WrFwPDKtP9QzBmgMnWDkBf9:jo7G/5oc0mxqkBf9","tlshash":"43052ad9b1d2b07603e320a5887f160ef2ba99586009d491f6b9e4d5bcb854ee077f3c","first_seen":"2025-07-31T16:26:05.4453Z","last_seen":"2026-05-07T21:42:28.554354Z","times_seen":48,"resource_available":true,"data":null}},"time_used":1805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D7erznEp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D7erznEp.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-168\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vw8M5sJj9leo1UnoeydSzVW33sW9Wf0UgQsYz2fld%2F6%2BOvEbYdDxZmh0WC0IfKY1ZzsuIsXIqzMhToXRyZi4VcZoxFg5Nb%2B0xR1qy9o4isGQb2Hzuj6Q8Lfu5Gv3OeGl\"}]}\r\ncf-ray: 9f386c6fab4735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (359)","md5":"60048ff6dc26a6657fa8bb24dca4d769","sha1":"3aef89cc927b1fac5ed2ac378b30cd2421720cb1","sha256":"d71df4ac2973bf5aede888f1f15af1f1a28c13f9209de1ff2e42153342c8ff07","sha512":"bdfbcaa9493e8ba15da04422e223adcdcd1e25c8bb9bd458dbedaa048257b381622798d1ee42193cba991623a867dea0438d6e654c19cbae45e3667f9e259ff9","ssdeep":"","tlshash":"e6e0d88e456762fe94718c8f31c42ec6884fca7daa3b1590b92fc6110e06ac1b07a711","first_seen":"2026-04-28T19:21:23.096852Z","last_seen":"2026-04-28T19:21:23.096852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/compact-item-C3wgf_qA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/compact-item-C3wgf_qA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-10ac\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVzGSI3oxlKP54DodyNVice6nuZpHInZ5JuJFHazYAhE9zu6MK0uOWD8S%2B1lOAb782DeyKkDMDkURa%2BZaOUlCUt9z10FeWZTMxEOkcwJKWKcRzOXSO7GXu8OmRv4CTsn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c700b6f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4267)","md5":"40071286fc81ffcb93a624216b25bc02","sha1":"a13bac4269a5f90f3322be41ea46f9cb37d98b97","sha256":"8132bc71af750e87d0842517a7faa9ef2f03d540118d28bb0c7b40f020d53541","sha512":"f2040dc08b3503e98711a2e45a8fade32d597613b0b97a42ce9a4f5b0c7481bb23bf8618a8e037cda3f9444e2bf0843ae0a6eb4bec3cca7653d725d73bd1df9b","ssdeep":"96:v7nc/E8wPUuhDVHB1jypNmoMms4PNm3zImM3tJK980xjnRJVlNK:znYe5Vn2RMms4Fm3cj3LAN9Z7K","tlshash":"1591c7cd7188fdb4651749e4496b19229f255102b87e42e0c8f2d7752ef036d5d3322f","first_seen":"2026-04-28T19:21:23.097798Z","last_seen":"2026-04-28T19:21:23.097798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/home-banner-2-BQGyoEtY.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/home-banner-2-BQGyoEtY.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-28a4d\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Ib3OKhF6F8fPeupsQS%2BMz9vpFpguDKz027ez0jrO76TxbeA6Fw3XJlBxuIZxnHD6UxsjQZS3CPHi%2BNkZEf0UEjAJtpxf78ytBNucFMZZlxFdGY%2F2VsJGoje4PcG9Ssk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c73bbd735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166477,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit colormap, non-interlaced","md5":"067085dcea41862b191137b9fcbccf49","sha1":"463f773e71ff4260c53506173481b26b4b6064ff","sha256":"5ef3de69bec0f5a9be0359e7b963040092abe69c635a5da310e72babbb761a31","sha512":"67c52308528a88e33e27e0267eb7c3b36db0894c0a66f168b8115e0aba5453bef604789d67ee4daf0b604fe54f4f286246122852b7a2d4672fc49de9aed74705","ssdeep":"3072:txkIbrVd9NQ7l9xL7ia+se08a64duiZJFID4H5jOgPDlexNxT:DkWVd9NQRya+sf6UZJ+D4H5jts3T","tlshash":"39f323c970ed56055bcda642b8aeed4b0de2a74ecca6637988704813b6583233715ff3","first_seen":"2025-09-07T17:41:22.020994Z","last_seen":"2026-08-10T18:16:56.900122Z","times_seen":27,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.09c1b57c5b7f6443da080ba0406ae383a.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09c1b57c5b7f6443da080ba0406ae383a.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1138\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108774C8B373336F4974E\r\nAccept-Ranges: bytes\r\nETag: \"DC8028334483D62168CCE676152BBDBA\"\r\nLast-Modified: Mon, 28 Jul 2025 10:38:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16329795837139389078\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 3IAoM0SD1iFozOZ2FSu9ug==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"dc8028334483d62168cce676152bbdba","sha1":"d1ad610c08b7faf4dc65b64c333c06b24d05437e","sha256":"39a4a4259950ab0a3eed934dfdd0a1ba864de68ca48bc4cffea6fd10dbd060f4","sha512":"f9f2d91a30fd8f0a96c62edb79ba9673ca2f34979ee1e637f966c9d21c7d5c56c87c5beda04d39461addd4a66ef7f4a60c56c3531cd00fed6432cf0244c7fb25","ssdeep":"","tlshash":"8d21967a805276b8e42579d9cbd5d2586f349171050db9085888986848e1a73134afb2","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-10T18:16:57.027956Z","times_seen":70,"resource_available":false,"data":null}},"time_used":2950,"timings":{"blocked":2651,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/48607.f298843ff396b4b7b4c7.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/48607.f298843ff396b4b7b4c7.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-c55e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8922712b9e48eeae0fc2d16ed65e2dbc\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50526), with no line terminators","md5":"81484f39badcbab944a690390f1a56a0","sha1":"f2a6d53dba2e9ea218491cc8b4ece112736342c7","sha256":"8dbaf57d7dc5992d04239573317e81892d87f2df759244491518755dedd9e65c","sha512":"999d8d68cfb53d59189a17acb1e62acbc2412527845ff7ae7b2ea174b9c2277a3c4aa6f84177f6b4fb4bcfea5a37280bd1e6da1fe91e7bffe3c654bcd583ed93","ssdeep":"768:Nqs11or81KG/BGeM8U4cg29ggeQavl1U4Vgywlbsmf5nPC4V3S6/VMGnXFZHvi4f:NZJgFXdvxCLcxz696SxpoH","tlshash":"a63365eaa7c0e67a7f6763694319f1e9b398adbdf8223fc7f554414400c39e31046a26","first_seen":"2026-04-06T11:00:06.751694Z","last_seen":"2026-05-15T10:22:28.58302Z","times_seen":873,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/70240.f1baabf7f78513318cd7.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/70240.f1baabf7f78513318cd7.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb82-4df8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:57\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 93ecdd748a9982319e1d8f09caf7be40\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3065)","md5":"9856bb6a8edbf8193e151827fd0b9ab2","sha1":"0170ca00ad43aa628d113dcee8bd1f9cf24b3bb7","sha256":"106423662eb5484ed0be66245a17e5c2e50c30847f06e0cfc13b10a6f0e10e48","sha512":"9bd7b0ca8d3e6ed8280a431d169aae34db86b8abdb2fc48a8ea13a09712c05bb242129ac04ccbb53caafe7cd3430778bcf181f65e9b3bdede0d4e63eab272f03","ssdeep":"384:gpB9qeqiwAv5A2XlUggtc6JPlrtRH/qhgvFqPzAAg0d6D/3qRAvOda7HCdKSAgA4:IB9nqiThA2uggtc6JPlrtRH/q2vFqPUW","tlshash":"cf92b324f382226505e791ed0c760913b63bb7963c83466db92c9ace675c918f372b3c","first_seen":"2026-04-23T10:22:42.439707Z","last_seen":"2026-05-05T07:37:29.12674Z","times_seen":141,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/10502.1585eb3721bb152abb7c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/10502.1585eb3721bb152abb7c.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-7c02\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:30:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b54569be536b308819a1cea3549b9c36\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"e66872887f9360184dfd846a9af7fa3b","sha1":"e007ee2f1c53646d4b219df0af912b1965bf3594","sha256":"546500d674f78223a36961d2847b83d46ae228bbc008b6800805df347e063db7","sha512":"6c77681f491bab4ef303d3bc31df9c6b8f9bb65624c550860300c2f3b7d4b0bed6c8f76d7cd8278e773450c19ed0a247072110663ae142418378e969a0f6c2e1","ssdeep":"768:PrvnaU3z3axr91U+Lle16t4QCht1hUnuIYIN12okJvb/9WcHwRKT6Z1n:raxB5S9tD5PCr","tlshash":"59e2f886b3f864b957e780dac8350103e32820106455847df7b8bdde6b5dd4cb6bab39","first_seen":"2026-04-15T14:27:01.584397Z","last_seen":"2026-04-29T07:45:38.563882Z","times_seen":221,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAFP5mYeAokiSmg5smouI5s%2FZQ32P31bz4Y5%2Bqb4NReZYz1STivzV71fKzK1jBogGiiNNBl2FcCpZVfzq%2BVzTYMwPFMliVDYT7QvLMm6GeKGH%2FElkL3sTQNUT1cHEfOw\"}]}\r\ncf-ray: 9f386c7c1d6c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76459.d985eebe67397f02fa64.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:22.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/76459.d985eebe67397f02fa64.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-a09\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:35:49\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 38494d90202d51be35f0cef42f7b7752\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2569,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2569), with no line terminators","md5":"22126b9394d1360c4997f7a00d124da8","sha1":"eacb9fa4d3287a221162d350a018742a7417bd3b","sha256":"7166000f17bb6960fff8511f10833c8b4a7576dc8964292c0e97ade782b584fd","sha512":"bc54f49cd0df79fa96a1e8e1ec66de535e21ad5fc0b796158b2ce9ba3a5d5295b5376c032856b9d5c3b851849100211cda4b6f17c7b4e05b5f725a68d4923947","ssdeep":"","tlshash":"9a51baade704cb2cc847f666078c668c21d4f002a698d878e590992be3ce3e5dd3c54b","first_seen":"2026-04-15T14:27:01.630221Z","last_seen":"2026-08-10T18:18:31.262772Z","times_seen":743,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/isObjectLike-BA6vMenc.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/isObjectLike-BA6vMenc.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-307\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BOZoP71YqFXiZOVAvVbQfTXxJyjivz7ufKWMgvXTok7Dgax%2B6OlwBlYMqjhHlHiufxRCO%2FaRH%2F0TRwJ0AG0kiJyA7WLQbhNUyVMjaI3PhkFuMmkNwdBIfiKNBrfnwvE\"}]}\r\ncf-ray: 9f386c700b6e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (774)","md5":"6eef7f38148347759577237fd45bc116","sha1":"d100d186349ef93e27ee3134ccf91de119ee20ac","sha256":"0a3b57f8a17b2d9ff08cd9a8891c8f8c7b3531ef4c41b9085d77945bffc7a8ed","sha512":"25fdfa5135f7d7f5185e8331048569b0402f5b852b7fcf4dbf1ffc79dfda1e1bf355c0e4884db1ab2416b75945395319cbc55e5e480ae54e863156c71824b587","ssdeep":"","tlshash":"d10149d5b845f5b103365de0d29f2947f138b5bc41eff5a1e0b2c2e1a92a1289612f1b","first_seen":"2026-04-28T19:21:23.102529Z","last_seen":"2026-04-28T19:21:23.102529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.020fd0ea0ffe349618b04a542794991ae.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.020fd0ea0ffe349618b04a542794991ae.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5825\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10874AB6732373369CCF2\r\nAccept-Ranges: bytes\r\nETag: \"775FE70CBDBEE8E90182F3B162411DA4\"\r\nLast-Modified: Fri, 01 Aug 2025 13:06:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14915663620973214651\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: d1/nDL2+6OkBgvOxYkEdpA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"775fe70cbdbee8e90182f3b162411da4","sha1":"d77b83877707fa63001750652f687cd88785d841","sha256":"e117e87873a93e0fc52a64df10bbd4ea5db5e68979ddf001f96fb8887f727047","sha512":"9a7da83558373fdb53877d35a61b018fe67fd5efbba51c8175c94644c1c46189d2cb0a2e47901e36ab7070d9304b76ff4cdd73d936221fbf421ab2a5457606f6","ssdeep":"96:ciaNLUb644Ub2cOj0j2iHjyD6sWvno89jrVtayixzhRoUg0acjmqv8ApCTEKzok2:cg2654i2iDyTp8hrjaycNRrni9AETEKW","tlshash":"2bc18dbd3500cf48be47f8d943eb47d894682151fa18c1f3eba56109c029aaf1cd4aee","first_seen":"2025-09-07T17:41:22.088541Z","last_seen":"2026-08-10T18:16:57.089529Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1993,"timings":{"blocked":859,"dns":38,"connect":270,"send":0,"wait":273,"receive":1,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91550.d905f6e60b282987b3eb.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/91550.d905f6e60b282987b3eb.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad11-3ec1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b589e786bf027f03c565a9cea344896c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3063)","md5":"21260fcdd0340fb36ee260ae7e429445","sha1":"e9308cad65d9e791d1c42375adff1b281b10ce21","sha256":"7a0bc3ec97e204e312c4bf7a12df68c0c2a199c2166b8b54d6c67a25adb66910","sha512":"b8a5070802ea78ab852c7bd1f7084673411d2e6d2b0c9df6ff5adffbd5e8a2c9ac1d9b25f0d0a74bdd9d0447a2785c14f8d5381aec8258b01b0e75209f08af2f","ssdeep":"384:tcwOev+zZoeDOR0zOlfHRFx0Src3/izW/x+B7SM96ktcXWp/iWRSlqtrGqj07sei:tcwOeMZXk0SlfHfx0Src3/izW/x+B7SU","tlshash":"5e72c7c9b5e1f08943e66ce0807f440bf13a6c68314ea0a8e3e9c4d66d7658e9177f79","first_seen":"2026-04-07T11:13:01.734765Z","last_seen":"2026-05-05T08:09:20.493452Z","times_seen":1012,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/RightOutlined-ChmqbvSw.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/RightOutlined-ChmqbvSw.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-83e\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUdEUNK2ZO5ZtA93OA3IMeN%2Bjkne24c5n27BWIJq41AEItAJyOUdT7rr6LwnDdK9uyub7h4xjEUvXwbx4pnl1SaOXz0HjIQR7jVrPtfHFg4SMLlcSTSB8fKDmCPfGtk1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fdb5c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2109)","md5":"a1ce9cdb8d4869bf060f4adcb67750b2","sha1":"40d16e5dbe8419859b855b0894dfa1204d83628b","sha256":"28bce60e3e095f31228b521e16737513082964aaf423acf9ada63b792fafcaed","sha512":"be3e4c3b1c3bfdc2e1b320a6cb543019978d36d5bdc4be2576bb01f80ae073e39911085d6a811ae57a81fe805f9004e99dcaf89ba3057c7c50578d89d7e74ea7","ssdeep":"","tlshash":"004197f8b24ae27902545c8e04372712632b285cb46ce4e0f5c4def6595874ce057fdb","first_seen":"2026-04-28T19:21:23.104793Z","last_seen":"2026-04-28T19:21:23.104793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-icon-kScI2Bu1.svg","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-icon-kScI2Bu1.svg HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-59cf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2B1jC34v1qAjcEj%2ByMQ84V%2FwPQ9NYgtfl9ormqFcH%2BL%2Fz%2FU7FlKHyXczf4a6xwzjjA3DxYuSF7pGrAryYh0i5e3XStoo%2FSEIiHUM7MNPnoh8wZwMZASO2CxsxF%2F7mV9Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74abfa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adb7d90717f0e948df1bf00ea79e37de","sha1":"e1f635673fe99b8030e2f3c440e1719774cd3186","sha256":"38523719f28743dbd8523c13dc5113a6e405b241653a63b0b2b2e593d9a6309d","sha512":"0df881d40f095b4c2e3e618f9d54f7df8729d349dbcec5c211295b9ed2de43bcc0cb951fdec18e1c553fe672b4ff5bb2ac71f03f8af19dafcce2a33ec4efeb8e","ssdeep":"384:qxDS4COuR9R+vlVm95jiuWHE7EpdD6SQifE8WtTzVCHZ8Ml83+bCqApaDNlqF4u:B4COygUFisAPbNKTzUyMqQaaDNsKu","tlshash":"13a2e096a0bf6e98a6122149a39f1c429edc834735309433ec47574bb8bebd88ec10f5","first_seen":"2025-09-07T17:41:21.964353Z","last_seen":"2026-08-10T18:16:57.108673Z","times_seen":23,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/symbol_history_price","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/symbol_history_price HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XTw%2FzkTHv6LYB6vXjkgbwxnvHCzeiQD9QJsoqZh%2BanI6n8daYWF2x2A4YQTyEAi2gAyZYy%2FQyfJ19QtklL3Wav2ZhVH5eIzvkZq5Xv28TBzaFbuyOjJLjS55KSC1IYB%2FPDSHQIC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c77d98fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/70240.f1baabf7f78513318cd7.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/70240.f1baabf7f78513318cd7.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb82-4df8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:57\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 11553dd06459dae3669037ff669848c8\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3065)","md5":"9856bb6a8edbf8193e151827fd0b9ab2","sha1":"0170ca00ad43aa628d113dcee8bd1f9cf24b3bb7","sha256":"106423662eb5484ed0be66245a17e5c2e50c30847f06e0cfc13b10a6f0e10e48","sha512":"9bd7b0ca8d3e6ed8280a431d169aae34db86b8abdb2fc48a8ea13a09712c05bb242129ac04ccbb53caafe7cd3430778bcf181f65e9b3bdede0d4e63eab272f03","ssdeep":"384:gpB9qeqiwAv5A2XlUggtc6JPlrtRH/qhgvFqPzAAg0d6D/3qRAvOda7HCdKSAgA4:IB9nqiThA2uggtc6JPlrtRH/q2vFqPUW","tlshash":"cf92b324f382226505e791ed0c760913b63bb7963c83466db92c9ace675c918f372b3c","first_seen":"2026-04-23T10:22:42.439707Z","last_seen":"2026-05-05T07:37:29.12674Z","times_seen":141,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.qevorine.com/ws/2c86fd15-7133-4e96-b905-96d5fe7bcb77","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"GET /ws/2c86fd15-7133-4e96-b905-96d5fe7bcb77 HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qevorinex.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: bctQKHWkbcavPs8j67scFA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 28 Apr 2026 19:20:18 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://qevorinex.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: /gYt1DfUPc9dcQBOh0//Wob1aCc=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RTha6%2FJ8qUh1yUy82FNKw821LlEEF6R0VgvjXIk8Q49MxdbHYTvhm70biQ%2B6Tf3f6XhRjzlGCOaYl%2FqSY3jPWQnqyNSyA36dBnHUyDDVKFscbf7maEVcg8LNJzH7KFeuroNhVECp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f386c6cdcbfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=480\u0026min_rtt=463\u0026rtt_var=162\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2345\u0026recv_bytes=1198\u0026delivery_rate=5304029\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=f4345e6860573b6a\u0026ts=131\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":20,"connect":20,"send":0,"wait":118,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-BysKq6iR.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-BysKq6iR.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-261a\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2Bj14MgiesliMtm8r6Qb3Rj8CTK2t92D7po6J%2Bm83ObC9IzMIGWjA3kOOMA%2BVtCc5D5%2B6blBvuAZqR4A%2FPANnA2wHIokoHmeehgQ9U6AZP6f81utIJkeFIv%2F5K0P7eli\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e1af835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9754,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5019)","md5":"acd3c0d037ac4c0387882aa2286847e6","sha1":"bbaf51584fb007ef45285256c69f070733226c9a","sha256":"6fdf5e6eb90bd732fb068d4ab879dd99ce5a62780c451aaf547ed748f1c303e8","sha512":"fe57f77c12dc5920e751e9ee4652ba57cda18667191b922845da83500d91442075950215a3dbc000280475db8e0148272d7c5c61e51bb8cb6ef01be2bbb2bdf4","ssdeep":"192:C6KyKOKAMXwrqWsswE8WPHlXDRQwrrK/1o43jDoD3+IlvUfj:C6KyKOK22gw8PFzRQwXK/1xzAleb","tlshash":"f31208e4b048b8b0125bc5c0d1925d71c618a996e43585f8f0b64d3f2fc663da87b7be","first_seen":"2026-04-28T19:21:23.106336Z","last_seen":"2026-04-28T19:21:23.106336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/tw-DSVFgK6H.svg","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/tw-DSVFgK6H.svg HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-16a4\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKRBwBnNARXhL%2Bdi5OFMY0RWCYESwPRCoi%2F2L0Goflvi1SL8nFDrXHObSndNkLrfDvviIM%2BAulD3Px3fbAYo2ipFLdImw2xpBRM5Y5XfE3xdPZZu%2Bz8OcqRPNXdu6eCQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c738bd035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8edff4af332f791a0498c65f4d016513","sha1":"f1ea134d9eba5d6b8cbc3c61543997dc08232846","sha256":"ccd90e782aeb4bee8f77b0b25aa1362de3ac795f219f14d764e3d46493311b5b","sha512":"44d8bbe12fcba17a2cfdcc9fba955bfdf9a04a2d3d1744c57e6534a31b706c9417da818ae4ef15579b6ab0a6c8e08e106dea27b1e2e43125fa0f426f28b4b6fb","ssdeep":"96:Vw92XKCUi5CfPLJMNE2RcPpBv8a6hBQhXHleMNPAWdi91SbHm:VVAFPoEwEgAAIAKi98bHm","tlshash":"73c11fe2e76c23ec4087d34c64250026bb4e60f737829d68fa5edab15fe3d92d94b815","first_seen":"2025-09-07T17:41:22.138993Z","last_seen":"2026-08-10T18:16:57.069201Z","times_seen":18,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.07b6d58527dfa4d49adf5c0635ed354de.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07b6d58527dfa4d49adf5c0635ed354de.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30231\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108767CD23C37377BC270\r\nAccept-Ranges: bytes\r\nETag: \"8ECEDA13BD05A8DE00CA388BF362A487\"\r\nLast-Modified: Mon, 28 Jul 2025 10:33:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10281353754394872736\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: js7aE70FqN4AyjiL82Kkhw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":30231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8eceda13bd05a8de00ca388bf362a487","sha1":"0c80d7d12dc70f8c9be934440f70af6ebddacbce","sha256":"ea657de0c684e483cc9ed2ca5e03ead2b4d823effc76603a3ed034ea78075d95","sha512":"a2a09e5c6759e5ba729c2139de91e129c35008edd31f12edbf6e57eec615fcbf9eeb810c007a9c18d85ae01d2497a51787dec00bf3c6e3f8b7015bc0897a3b77","ssdeep":"768:AMzVVBMlBWjQYnCYjflDPbCISUnmZclREjDMj:AMZDMvWjQhYjhzREyREfA","tlshash":"2cd2e1e9c6485bcb4a841a819b7ec4fc79bcc2f75da55c13888d82f1852854f21affd1","first_seen":"2025-09-07T17:41:22.066208Z","last_seen":"2026-08-10T18:16:57.107898Z","times_seen":30,"resource_available":false,"data":null}},"time_used":2727,"timings":{"blocked":2168,"dns":0,"connect":0,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.tradingview.com/external-embedding/embed-widget-symbol-overview.js","fqdn":"s3.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /external-embedding/embed-widget-symbol-overview.js HTTP/1.1\r\nHost: s3.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1837468\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\netag: W/\"6e23f7559fcf4bf82e73726f0218e4e5\"\r\nlast-modified: Tue, 28 Apr 2026 11:02:37 GMT\r\nx-amz-id-2: 1pz6lyCkPs55nmwQzyNpRoc5FAC1FmJk2D4e2206Jy71emKch+V/HR5rwLBK9u7X70crgOlGqX24AOttoObrwXbL8GrlWOh9\r\nx-amz-request-id: HGSRQD4EBFNJNAWC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: liDrh0e0nHe888Spl4CO9MADbQJmGiCK\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncontent-security-policy: default-src 'none'\r\ncdn-cachedat: 04/28/2026 11:05:46\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7ac55d67ae63ff1f4b8bc4b9e4bca22c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3458)","md5":"6e23f7559fcf4bf82e73726f0218e4e5","sha1":"7f5fcdc8b1382b7806ceafea8e65d718d224d4e0","sha256":"5d77a55f4f0fdc7be5f02c21a58b4099b14948afcf7ab4af9f599286ccc6fe1c","sha512":"43aa7a8c6453da7bb1492c1034e79e1ffa10a080c1f2918a5eea47e9cb5c20bb56615d8abb7cf39f477ae6b2330a55e263f755ea7988b477afd065a19e76cb5b","ssdeep":"384:vkXguCWoofYkFdj901N92Mt7bc94p6WSVPJM0+bx:8XZl0f92Mt7bc94p6Wym0+bx","tlshash":"ca52d99af660dcbd51d985cba07a2721b61e3944f203aca4f5acd4c514adccca131fbe","first_seen":"2026-02-07T00:49:25.178853Z","last_seen":"2026-05-05T07:37:29.101698Z","times_seen":973,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":168,"dns":65,"connect":1,"send":0,"wait":10,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/metrics","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:27.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:43:54 GMT","end":"Wed, 17 Jun 2026 04:43:51 GMT"},"fingerprint":{"sha1":"09:0C:1A:6D:8E:CD:D8:59:2C:56:C0:BB:30:80:8E:F8:40:F6:B3:CD","sha256":"2E:F7:6F:58:95:1E:70:41:A0:8A:27:66:79:BE:73:05:AF:57:18:BB:7F:4F:4C:27:4B:19:43:C1:0E:19:3E:D5"}}},"request":{"raw":"POST /metrics HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1999\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1999,"data":"{\"metrics\":[{\"metric_name\":\"perf_redirect_time\",\"page_path\":null,\"value\":0,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_fcp_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_storage_estimate_caches\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_storage_estimate_indexed_db\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_time_to_first_byte\",\"page_path\":null,\"value\":184,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_ttfb_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:27 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 4817024187639443463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=3fe2cb97-5daf-4036-8dc9-9c1ce24c5ead; Path=/; Domain=coinbase.com; Expires=Mon, 28 Apr 2036 19:20:27 GMT; HttpOnly; Secure\n__cf_bm=QXde3YlRNiKlJt_YKmPSZmtPyycvv6yXrdekluKNbH4-1777404027.1743417-1.0.1.1-TCPWnLun9JpAQaclSSDIbEJdFbkco.AcOS2RtIS0OGjNFQL0jVaHs95WJy5pXMzMpNJ8.CZyk74oKWVASAEMbgPtb2ZJseer6RwqxHwo1wL_AGE4.7PQaNIAsu_UBr0p; HttpOnly; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Apr 2026 19:50:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJHnHAUbKMpwli3XC10UOZ6x1R8fQnBPcnc%2BFsTtIxJbWm1m4n9hSmLIHhK2S1VwY5oYaVuRtATKhpYEsQBEjJWCEqabIGL44Tun%2BhU0ekOMA2drD6wsHKoRY6%2FFJdAZWwHEiV7Wnw%3D%3D\"}]}\r\ncf-ray: 9f386ca1da0f76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":114,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip1-DFjm500G.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/vip1-DFjm500G.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3442\"\r\nexpires: Thu, 28 May 2026 19:20:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFOpcIH36mi0E9yFmlp3gAeFR19B6uHOVrpQ%2FIFQ75xCvHBQqIWaVWJjrbuuac3JEvjKgE8f%2FKOW2mMbJVQe6wIgJ5m0lZa1W8ZSIHQu9O9W2aiVJ8Kb%2FqAn3arPol%2B3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7ede0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 40, 8-bit/color RGBA, non-interlaced","md5":"9fdf12e5b9a8ce05bb65f159cfbda1e2","sha1":"b99ec8b8c6f1d4c0dce4340348e5fe2cb3e4e29a","sha256":"a1b2b29e2b76d9c9e3079240626b10060ff5c6be2112bd065ea3ddd554f01339","sha512":"48cea348c5aa61f910abe59ae757289f3d7c5421a1a30a9d4fb08c465d175c6eeba2b746c3078f7a5cac399a0f6cf355f63621dee7389b2e79e73f23ac3d22cc","ssdeep":"384:gYnZLnJnGe80hjEY6nI4s4hnqqCUmKDt5n9uaXzwwm0A:rZtv8C56I8hqqCUmKBXuEcF0A","tlshash":"9a52d1176e7198e1dc9aea2c3ffcb18e2bbbebd52513e011feca18150a60170c577058","first_seen":"2025-12-12T21:48:41.874877Z","last_seen":"2026-07-21T11:23:30.588178Z","times_seen":8,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip4-BhUksLcQ.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/vip4-BhUksLcQ.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-323e\"\r\nexpires: Thu, 28 May 2026 19:20:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ4Qlc6JRjRBeFPtkAyRUZ3gXXcW5QbbQcLWGRBjJVxT3gldxwdTJGPUUc3sInZ7eT8doFJj3FWJd61OEZhJbMUiV8NKYBZA0B%2FiISpWeRxKZLDE83rmxY9QBy0BiygW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7ede1035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12862,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 40, 8-bit/color RGBA, non-interlaced","md5":"40e5f498f5f717031957110a7b38edee","sha1":"bb0a9ee40a820db8b30d99ab6929afc53ad25931","sha256":"c9703ee3ff9011c6cd3f9f8a35b480b8ac695bf5051f36d31c93d541e21994ba","sha512":"42aa0f0f40bee22b8f70d93f93ca66107f0042a3b25a743ed7163779237a3a59da14d24672a78b25bec49585270d3496f4ce8e0a6c2a0de6aac2a67beecbd597","ssdeep":"192:5SzknW8BwCEA3006hhbshGaSj1XWBygIK5MP2f1wCbhSIESAyFL:gYnv+CYYnSy95MP2OW1xL","tlshash":"4942be09ab90fd08de0913aaccff710b1a6b3714da5486206cda5ea7bd011b508bf8cc","first_seen":"2025-12-12T21:48:41.937134Z","last_seen":"2026-07-21T11:23:30.575169Z","times_seen":8,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.05938baf3249e440892fdc8f1409a0bc1.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.05938baf3249e440892fdc8f1409a0bc1.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1315\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB67323733BCCEF2\r\nAccept-Ranges: bytes\r\nETag: \"79CBCBDFCC32E9ED14054FB9F306D76B\"\r\nLast-Modified: Mon, 28 Jul 2025 10:21:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11892337470558382493\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ecvL38wy6e0UBU+58wbXaw==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-08-10T19:18:27.109152Z","times_seen":1111,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":1094,"dns":0,"connect":0,"send":0,"wait":276,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.020892b70a3964681ac1b91f76c15a037.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.020892b70a3964681ac1b91f76c15a037.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8434\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108764C8B373336F6954E\r\nAccept-Ranges: bytes\r\nETag: \"3EC9B79F8CE355D514D89957318F2682\"\r\nLast-Modified: Mon, 28 Jul 2025 10:29:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 991820925141989313\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Psm3n4zjVdUU2JlXMY8mgg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3ec9b79f8ce355d514d89957318f2682","sha1":"6b4fbc8a17cbd0684416363e2846b92e81b12bdb","sha256":"e6c7988f064b561ad345a846c00b118d563305763f853d3f2bda63b5c745e714","sha512":"27af97fd9799f6aeb098531399b8fb88c9b9eb2643be8e79b518d1d7211a4c5490813b21c9c2f300bf702432d90ad6291a1edba83c4e501a92aef816e13ebe9b","ssdeep":"192:wd9fWTbtg7VJtpYqxzk4EunA8HaaHBQxG5btlozsvc1ecO4tH6sao2z9q:wdZotghJo4EC36aHBQxG5b/ozIcgcO4j","tlshash":"7f02b02316bf69bcf119dc9b48a48d41ec4102f55b8fa6d1931850ba03a9bcf2c975b4","first_seen":"2025-02-26T18:31:17.525824Z","last_seen":"2026-08-10T18:16:57.106952Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2436,"timings":{"blocked":2136,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/82484.0774d72716e6b07fab9b.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/82484.0774d72716e6b07fab9b.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0a-3d66\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:50 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:28:52\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6c68f9c2227211e97978df9e2c9ff8f2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15718,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"d8b336cb1e4c2d0d3fa1a38ddce1adf7","sha1":"aead262c50ea46349c31d5979dee19373d1a4e54","sha256":"0b9dad3c52b8b0d5a60f28b97bee1e94883f8d7d069ab5a06f8b83de12ff278d","sha512":"3f60c8077d8fb6e3cd8b85352385bdebc0d3671734f74344ada795ed169c9da65a7be76e11a6e821394bb1be7fb72072f67a0dbbbedebb5ab0a263919900e765","ssdeep":"384:NEPCRWZMRohlJl7tg+QRS6DdUs+JrmSgCWs9pu3TsrAkrRQkNrJRQ6Rql6cfvnZC:NEPCoZMqhl37tg+Q9DdUs+JrmSgCWs91","tlshash":"cd62ed8279c2f4b967915c80946f0445f11d4d2cb04eb8f8e3e6d8c6dabb18fe426b76","first_seen":"2026-04-07T11:13:01.721375Z","last_seen":"2026-05-05T08:09:20.5451Z","times_seen":1079,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/95706.06bfe84ebfb10f82ab74.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/95706.06bfe84ebfb10f82ab74.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb82-5a59\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:36\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: edf6d85af7a7d0e8c2b105d3dc374246\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3071)","md5":"0b3fd703ddf4b767220ada2c0ca0eab3","sha1":"4f6a75ab2c1d1d32eee475dadb376608cd63f9cc","sha256":"4ae110acc1a29bf097a8dbbc1e6059cb98b0e0f6bc26f4488b147ecccc1bc90e","sha512":"d012e7440b086b7c01cdd0655957f0cccc96590b529517d56f5a4d4d7167220d0fb625e313f3df2d5162d5a2eb65a6b66243018d3d1a72f39aefcd1eb5349de8","ssdeep":"384:dzpldI5pPatuo1abfvqDXGCE+v19S/CMPzOYjcPyF8G+UswCBzyiOM5eWPIbTyNR:dzpntuo1abfvwXFE+3SqMPzOK8vG+Us1","tlshash":"1fa2d8c571d2b0e2538b01f681bb0047f2bc6859744b86a4e168acd73d678ad73a7e6c","first_seen":"2026-04-23T10:22:42.502728Z","last_seen":"2026-04-29T04:31:34.512166Z","times_seen":84,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-AUZ_HxoV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index.vue_vue_type_script_setup_true_lang-AUZ_HxoV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-241\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbvPQcv31Qi4wZEOjisz%2Fd364UMnADQppj1M7qw6U%2B8dF2Mx%2F%2BhvtcF1wdJhjQ05x9fRItbzMqwute3zEKBRHnKI6vbmJaejLpEX%2Blqx6bU%2BllGvDGrxoaNMxkyqBk7d\"}]}\r\ncf-ray: 9f386c6e0aec35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (576)","md5":"d68e23f11410358f3802c98ab0403380","sha1":"c680ac5f36c96ecfea169651956f27a1709a4f4b","sha256":"179f567f655d157758b93cc4fc31da876cbdfb71fdf070fa500b4e2b067015f8","sha512":"403f43aecb23100c2071a3bf6567e05553d251ac2aa26bcd4eeb5fad2cba08f6d043b51b5a8b4928e9c8a55f10105a1cf50a85c1f57701fd000df21a4260952b","ssdeep":"","tlshash":"baf0e10aec60faf9a98f0c541d320128012a17ad7971d4e195dbc65472102f1eb6e204","first_seen":"2026-04-28T19:21:23.116342Z","last_seen":"2026-04-28T19:21:23.116342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/zoom-BtrIUIIq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/zoom-BtrIUIIq.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-94c\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGCOeTGhHk0ZJBNiUEpJ5aUKdSyghreMtt1iVVgskH6s1MVfWSDoc%2FHfstdhrfCmJgmLelxfL0Gn7jb245yZ6gxwSHFvzyNGGNewbIF0agnvZMr28rCcy0%2FRoNPlVSU1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb6135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2380,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2140)","md5":"09531583b696d266f6fb513fb67c5e6a","sha1":"dbbfac6b8e6b3c983091f8d75a1ff3ee63eeff7e","sha256":"a512f4bb38cbb05e09cce2aacc251cef91c1d5906c2d67faa54c2732ea3cc9fb","sha512":"ad023bbdc6ad73a7b176b88c783b653b88a12401f826ff0a10020790950854d69be61ade65bc03c1ccf8fef7e76960593902a0b39f5fab29f2b2cf246d50b3e4","ssdeep":"","tlshash":"be41a48d8fea54e580d95dc8a3d45e61022e8fa274228ddf735c19ee03726ec52e1b1e","first_seen":"2026-04-28T19:21:23.11724Z","last_seen":"2026-04-28T19:21:23.11724Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0db05c2a278dc4bcba1b628197308eab5.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0db05c2a278dc4bcba1b628197308eab5.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3428\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10874EE240030321BB6A6\r\nAccept-Ranges: bytes\r\nETag: \"8D27840A04BEC95C8F7B1AA477E7F53A\"\r\nLast-Modified: Wed, 23 Jul 2025 15:39:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12750990197261813755\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jSeECgS+yVyPexqkd+f1Og==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3","md5":"8d27840a04bec95c8f7b1aa477e7f53a","sha1":"f909ed600a97940393a298561cec6ab8989cbfc4","sha256":"f05c62c9ff7cf36bb94f49557ec604c736a43b0b6a10df72646e76f698912f85","sha512":"77348da3e2352b749ac77fbd69851ed5eb1de2c23d5b511375631c41dd036947e3e336f21e15818f01beb36b5b8c72b62eef74c84b00bea218af15f6a6750769","ssdeep":"","tlshash":"02615c3a4e843393e024dc3c017a9755e295423879b58f7a8c431012b9eaeee4ecdb14","first_seen":"2025-09-07T17:41:22.091886Z","last_seen":"2026-08-10T18:16:57.111404Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1989,"timings":{"blocked":873,"dns":0,"connect":273,"send":0,"wait":277,"receive":0,"ssl":561},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0b96195d4f367459fbaac66fd39462aa1.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b96195d4f367459fbaac66fd39462aa1.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1125\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB67323733B2CDF2\r\nAccept-Ranges: bytes\r\nETag: \"75F196B437F9D87FDC198BC904C66C4C\"\r\nLast-Modified: Mon, 28 Jul 2025 10:16:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10138601249240458443\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dfGWtDf52H/cGYvJBMZsTA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-10T19:18:27.089281Z","times_seen":1856,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":826,"dns":0,"connect":0,"send":0,"wait":277,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0680cf64887f44f3fa7a8b55e243b7597.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0680cf64887f44f3fa7a8b55e243b7597.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875EE240030328AB7A6\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Mon, 28 Jul 2025 10:17:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-10T19:18:27.069876Z","times_seen":1878,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/symbol_history_price","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"GET /api/symbol_history_price HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIOe%2By9aNSNagyT3kiB8PThEGo%2B0DX1KuL6a1itN%2Bt1%2BsO5%2BtPeYmfwQQYvsVQrdfbH0tprOsEWEkHvVmMBKsn%2B%2BfbthHJIB8ofSHbi09sYpkKOPPqnqXWhu1DtBXntcFlGD4QX7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c784a76b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10168,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e3a8845a47b1a1d7593ddc16fffa710","sha1":"2bc8cf9f60931ac366f0972d78c0611dd7492f9a","sha256":"3dc3da0f5af77caea80ddee504651271e8c6a57e958691cf52603ecde7e8ed9c","sha512":"315665cb84e0e432c50f1ec9d0f64c252e3c42031a655c251785cb6f665162cfe4e7f7536b75e87f7d4ee00f9549288e3bc26804660ff47108d01035d130adc1","ssdeep":"192:MaHkSFKhzW7ejdDFbSeggJuZZxysMIRkJgXXdJ1:3Enhz1dlSePIZnMIRkJgXXdf","tlshash":"89227a6217ec83b4f5708d1c7361f5a54b76706bbcce0f844ad5ba2469e2ab62b1cf01","first_seen":"2026-04-28T19:21:23.121538Z","last_seen":"2026-04-28T19:21:23.121538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/34697.aa3653b9cf640f4a5f66.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/34697.aa3653b9cf640f4a5f66.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb84-3ebd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:12 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8b2e8677a520309a542246140df7e03e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16061,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16061), with no line terminators","md5":"a165f9511cd0cf4f76b226d00359ffaf","sha1":"97dfa9aa8953bf3b3d9681e7556af3b1c52d746c","sha256":"24e85aecac8564fe2b531bdb2652f73f5a70bf82b0e6598ee486503bdf23bf13","sha512":"89a0ab3587ad5e946cdb2c22cdb076de4d03930323b5e6d0ff53b073128b681ae11e50fb70a9fb272b65832fdd8f82c9f4ddccd4c893a43ac3132223334252c1","ssdeep":"384:lAQ07chWc6WkKkC3PKPhPV90BPPiIPf1MfsKfhhHNHKHhdHhOHsOHsK/d/U/E/s+:lAQ0xpsXFeGI","tlshash":"c4721c85334f28b4f4769f27361ea984fa08bcb5b052ccbdc4955abd98c2a7d01687d3","first_seen":"2026-04-23T10:22:42.433417Z","last_seen":"2026-07-03T10:20:32.876055Z","times_seen":855,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0dce5c5137d3f4803b8a8606140150057.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dce5c5137d3f4803b8a8606140150057.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875CE63A8383255E5C2\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Mon, 28 Jul 2025 10:19:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:27.089768Z","times_seen":1056,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0384c09bc0c39493fbd6be91cdfefd67f.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0384c09bc0c39493fbd6be91cdfefd67f.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 11055\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877AFAD5B3035254C8D\r\nAccept-Ranges: bytes\r\nETag: \"E246CAD318C6FD3ADFFE6B1CDE311CD9\"\r\nLast-Modified: Mon, 28 Jul 2025 10:45:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7351801191815867487\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4kbK0xjG/Trf/msc3jEc2Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11055,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e246cad318c6fd3adffe6b1cde311cd9","sha1":"5d08389a529e48c845d232205d756e9dbf82056c","sha256":"c56f15c77ea198327a7973d4ae4eb44eadcd4468c6829caecb7f0b3c7d8d7240","sha512":"14ed51b150269a90193e158a9fdd99374bbaadec9792bfae6ef95c1cc53f1df27596c48bb4d3a6bd269c0c1dc90492b7ad71580b19151a9af647990aaf957bf0","ssdeep":"192:BoqDU8bm3a0OWRiKOXvlVsSZH8A5SD2F4vLDRViDa93S+H1L54Gyzp9ij1VfLKkr:Gq9btIutOSZH8eSD2SvXzWa93SS1yGyw","tlshash":"4532bf6278fd8062927a3415ef70121ef1a676196580c4c6474aa138bb3ed73c5bfb83","first_seen":"2025-07-06T22:01:43.122249Z","last_seen":"2026-08-10T18:16:56.90739Z","times_seen":35,"resource_available":false,"data":null}},"time_used":3403,"timings":{"blocked":3113,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.048534126ac9e4100b8658e93cce92be7.jpg","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.048534126ac9e4100b8658e93cce92be7.jpg HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 204376\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108754C8B373336D9924E\r\nAccept-Ranges: bytes\r\nETag: \"8E6D910D946A95846D4D2B2B6F1A81EF\"\r\nLast-Modified: Thu, 23 Apr 2026 06:00:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9525102548838460812\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jm2RDZRqlYRtTSsrbxqB7w==\r\nx-oss-server-time: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":204376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1450x966, components 3","md5":"8e6d910d946a95846d4d2b2b6f1a81ef","sha1":"d62ca932652522a2d6f0704f77eba1fb93abc350","sha256":"d167b4738f8b5f3c0521926b5ace629de7ce19691f6b39830a10c4ec71ff1d4a","sha512":"534fa5624500fb5bfb21c177547ae9fdcc07a110d6b4c4839f167a419ea8d3ccd0e605c837e393fdb7fa780e9715ddbd46115ff1511ed62afee49fa45578ebd7","ssdeep":"6144:khHi9OTOtb1nJMOL5xbE47oibpbuvF9z492u1E:kAsOtb1nqsHE6ogluvFx49xE","tlshash":"5f14128685eb8bd6b7f610fc472943090ff47744a69e01e6a185cf33a7b1e3a7c85092","first_seen":"2026-04-28T19:21:23.125752Z","last_seen":"2026-04-28T19:21:23.125752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/81151.4dbecda7b235ad65b274.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/81151.4dbecda7b235ad65b274.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df3301-4fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:05 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:28:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 491e39cd13f20ec822e68702acba1f6b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1276), with no line terminators","md5":"cee32de20733bfbb384ba291abc1bc06","sha1":"f7870e0d72c31d89a0ff772b3df58a54c559f1d4","sha256":"edfbc7903339243b8f1ff126660dbe82807bf0ef838f86c09256c5a511ec7fa0","sha512":"15f364917cbf8bbe32b0cc5ddb4af15d65215f7c4c1236898bf37c79fd6f202f8250c977ce813af8f0127b863c0d97d82f2b8a7c4c60b3b285174050b50735bd","ssdeep":"","tlshash":"e421c1e0e650257af8938d629788d9ca615cfa036713ed4af7dae40a44d1d7c127c34d","first_seen":"2026-04-06T11:00:06.691351Z","last_seen":"2026-05-15T10:22:28.567617Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/29990.58d1733d1b27cc1c08e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/29990.58d1733d1b27cc1c08e6.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d8990f-814e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 10 Apr 2026 06:30:39 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/10/2026 10:10:27\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2a397c5bb0b86adc4bf2133d6befa4f4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33102,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10847)","md5":"1a77285c02ec824e43fe88bdbf734d6a","sha1":"9f4d66b4428428c6814e1630e03b771a079a113d","sha256":"8d98fefa4f3489d5193aa5bf17da99fdaf67bb280b29df39cb3d8c7018fc9b94","sha512":"47e8e8a874fbd77eff71a180c747a1f088ab53913a44130593cb74eed5e0fc97b7a609c5f6f78f904ada42da8b1ea44a5d606e9d100dd5c01938f69429936113","ssdeep":"768:eiEjxRvcsIj/XWmSVq4IK6+dNTQdT39G3fmbv2TzoJZemIwxK3yPkhBGPV:yyj/XWZVwFbMzoJZemIwxK3yP7","tlshash":"6be2f926592eeaf2defa41d614775441cafc01173845106876bcceec134dbada222efe","first_seen":"2026-04-10T11:01:44.659456Z","last_seen":"2026-04-30T09:21:24.274309Z","times_seen":596,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/13817.256fa5a5213b9cb70f5c.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/13817.256fa5a5213b9cb70f5c.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-b07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 45824259c53333f54b7e0563fcaa4872\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2823,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2823), with no line terminators","md5":"9117f5417af5435afba6f7700053a6fc","sha1":"28521c103a762e72c133892f41ee2fb550e20888","sha256":"e121896dc20723795767320cb9facd147ce5ba20427b67b47b47eb2f85d85b67","sha512":"7e71e1b26466a549b6496d8e84f2581eff4877ff30f1d0deaa365a3c6729bf545e9672f4a4c8417b5dfe1c7d61cfd349b3c6d476823a50b074c4a6423cb09a67","ssdeep":"","tlshash":"275188abfbcb1e2de71bcea1e7a712ff91a405c1be584138e5b3ad71064ca741724184","first_seen":"2026-04-15T09:47:56.523899Z","last_seen":"2026-08-11T04:48:35.669254Z","times_seen":5673,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/en-DU1UmOfw.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/en-DU1UmOfw.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-DE8HP17O.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-21559\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uK6FgE9wNXqDbqJJBularzSKbp4tbPu9OhNqkPtgnSFt5IrKQThKOiXO3vdGyx6Kv5Ofag8hblglS8XsSFfxAE0WAjs%2FSmJgSdRhTlAFJcJ3nQQB%2FQaH2Q20qTFPvL%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6c7aba35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136537,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65497), with no line terminators","md5":"9021f483a554bca90a92a8868085f7a9","sha1":"dab6cd20f07bff107bccc2f37dd7e7ea8741c27f","sha256":"bd5ad8f8a3e3aa0a20703354cb041fdf3bb36dca6edf741d6774fc151bd88284","sha512":"2bc385d26e2c65b4c8fb11706b9ce6df694c400d90f36491184764e7ed088283405a4d012fa9fcb8652bf7efc6e341334b8f64f63d8f034a49c6b80c98666e21","ssdeep":"3072:yYj1coBiDpodF4TLtwnMxS+Dbcun/3pDNA4i0QjYQ+T:xHtdsbxS+H7REO","tlshash":"43d3c7a5b5cb999153c589802caf1ce1b6188d813d49acb7dcf8ac19fde4875c6b3f08","first_seen":"2026-04-28T19:21:23.12858Z","last_seen":"2026-04-28T19:21:23.12858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"qevorinex.onlinesupportcustomerservice.com/cable?pv_id=3D019OUYKaTFnZDQ1dId6U1aauq","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /cable?pv_id=3D019OUYKaTFnZDQ1dId6U1aauq HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://qevorinex.onlinesupportcustomerservice.com\r\nSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: u1C4KLpeXPrearmr/4Ukow==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nConnection: upgrade\r\nSet-Cookie: AWSALB=12RsZ5lCmB9Y8YYwYGu4oMnltlyNI6QcOckkJW2BaD/pxssixM1oFSWkHB1ERbdtxUwec2xTlDv50dHlOMwn+ZReyU/ZSsYBRmlJmuPMzBPq2o/WCvHtkelNJA6K; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=12RsZ5lCmB9Y8YYwYGu4oMnltlyNI6QcOckkJW2BaD/pxssixM1oFSWkHB1ERbdtxUwec2xTlDv50dHlOMwn+ZReyU/ZSsYBRmlJmuPMzBPq2o/WCvHtkelNJA6K; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: XOOw4aay659/eqRImo5KM3Lg5ms=\r\nSec-WebSocket-Protocol: actioncable-v1-json\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sdDfhqCTBuAqoW%2F%2BpUDR5d1h9WDDSei2XhvPL9aCbzIJtMmBI3aJMKowslzfOZQ7dUDUzTBtwGxNmfAp8XrQaW3b2toTQNxwyIY8sfLBJwF6xn9vrbMs4QL5Lghihk3M\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nServer: cloudflare\r\nCF-RAY: 9f386c855dd05ebd-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2881\u0026min_rtt=2878\u0026rtt_var=1086\u0026sent=3\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=219\u0026recv_bytes=1722\u0026delivery_rate=498279\u0026cwnd=51\u0026unsent_bytes=0\u0026cid=eae3a130b79dc84e\u0026ts=110\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=576\u0026min_rtt=554\u0026rtt_var=196\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2407\u0026recv_bytes=1466\u0026delivery_rate=4290370\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=33c6b7efbfb82cd2\u0026ts=742\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":19,"connect":19,"send":0,"wait":727,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-DxXX5Vnb.css","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-DxXX5Vnb.css HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5bba\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gitKiCs2fwwoV6pa9H6D6HK9oGtuY4iA3Yda7vfyX32W7nbTKgzoijjyMMiy6CL37w%2BBqO5hYi%2BjYzrFhpMElPCuUr8vn5uIB1VKxOzq6P8qP3lGBwpsd%2BgwSiyDZurO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6dfae135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23481)","md5":"8c05677cf462a733ecb9ac7688868d77","sha1":"7492ac6c6f2a9a21c060dea48863b8fd3b2493a4","sha256":"a9ae76fccd2b84eeb7f9c2e7b70a101885663919a7228cd0ce912984c59d0eac","sha512":"a73e60e784848a88c324e4b3d156eb7deb8f00680846a6bd5999670ac337c1b7a062aae501ca03b85d4a8d336ff2696a520e5d52843c36428167355885b85fbd","ssdeep":"384:0F7Fw5zYxHWCmtlGR5jOvfrh539NOJ22C+co:0F7i5zA12P5c/3","tlshash":"54b2a424e3c9142cbe33c1f7e1d0d44dd179e563ef33614a9941362ac5cb39b3aa26a9","first_seen":"2026-04-28T19:21:23.129588Z","last_seen":"2026-04-28T19:21:23.129588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/5bf2ec646dc04ff6a9df9a19c24745cc-BZ5pyhBv.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/5bf2ec646dc04ff6a9df9a19c24745cc-BZ5pyhBv.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-2654d\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCj2y%2Bv03%2FctaE8X8i1Vwxzh7KkLS76srRPaH07zbJBN5FoRGJxvzDSUuRTIKU5ShhRZSNMTvE3e6bY8SpNyXRgIEYIwXyfK9%2BjknnBaqr29FTIAhwbw2asysfDDWc45\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c73bbd835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit colormap, non-interlaced","md5":"73f1917369977217ef55cc4373b078e6","sha1":"61ed4873755ddfd6e7e8c942c96caa93a3a12ef9","sha256":"7067f0209a87311759c42e3698400ec0f5c55bea9cc11780677953ab0f08c47b","sha512":"c12bf4caa641be289517137426ad7fd5afcf79f94dee617407b1adc50728283c628a24155d4783f5d3e38e891d40b843af81bf0288b78f35f2755934256afce7","ssdeep":"3072:dY4UQeWZjeLfqzBlqBvzSKmn8xKWkuPZ0NtRLOSegjUA2ZczAkw9i/eGO6:a4UQ/wCNlAzKn83k60Nt8yjCiOZ6","tlshash":"48e312b6c966e41a69bfc1638831017d0c64bdae42217b48d61874370eb6bf5e3f235e","first_seen":"2025-09-07T17:41:22.116675Z","last_seen":"2026-08-10T18:16:56.882669Z","times_seen":59,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/charity-1-C3tZi8vJ.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/charity-1-C3tZi8vJ.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-101d\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bip2evlNdfZtTuYRM3aX2NI3aUWw148tCznkv3xXFlAnTxxJai4q3w3xspj%2FycQ04Md%2BXJblRD1%2FqVIY81U3%2Fg%2BsW0B4sNCJNa%2BVZ3fXaolOPLJyEbHt7p%2FAqsaYgc9y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74bc0135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 542 x 108, 8-bit colormap, non-interlaced","md5":"4e9f9ca52aba10c942384edc4b4c6f18","sha1":"25a99f9b9dfaf40d08a65cceaf27ead0cb33d5bb","sha256":"e201fcde84179898afb171069638f5a0cb7b97ff8fc861b95dd50edc7a5fb72c","sha512":"5a7c92bcc26a84ea34503d6451cdc88cea5e331d8b649fee5c6b123499d4df4d7874abe84f361ea0743c9c958a88b2532a38e4b449657e7f51edc67c7526468a","ssdeep":"96:XNg+8beBm+ddlaRZjNVdZpPHgXBbj76jTf:XNgwZdraTjNVd3PAX9vATf","tlshash":"83817c838c3c02cccdd6d77641b6024174eb205e3a1d409c8e4a6ac3799bbd5ec59a03","first_seen":"2024-12-31T04:27:31.73547Z","last_seen":"2026-08-10T18:16:56.960871Z","times_seen":119,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/34414.31d6cfe0d16ae931b73c.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/34414.31d6cfe0d16ae931b73c.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 0\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69df32f8-0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:56 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:35:48\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: da3162fa18824dae6777137c816e5a9b\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-tab-status-DB450rZV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/use-tab-status-DB450rZV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-60\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AccR1GE8thKv9MVMYDVVBh%2BnlYh4psydbIw217opb9OBZ369xM4yfmoeO4lablCRNc8UExp4wtW%2FiKPgmMFx2w7XylglUY18ZdIKkFHEYAtl9vZS72Lc11nijMIJaMkz\"}]}\r\ncf-ray: 9f386c6e2afd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"968ee546d512c045a407210af6560212","sha1":"5447f7eb06cf6b9b01adee73a843661bd16fe424","sha256":"828c0d820decf1eb95a259d16388ee8ec29d7eb63d5d7dade7f61eff9fcb2510","sha512":"1b239b70f9775c3ed1e47402ac3abb421d4be99ed093a842145c5b93c5660acf3ee8f9909ab8ca7c72897583990241712e570a7fa8606c8cb050854be504b8b1","ssdeep":"","tlshash":"d6b0120f0c0070b9040a0dcc231c18324321985d2bf25ad09215cb141b511caf10da02","first_seen":"2026-04-28T19:21:23.095444Z","last_seen":"2026-04-28T19:21:23.095444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-lSzl7MlH.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-lSzl7MlH.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3c0c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1OcH51bOLCJxazvf3sLH1%2Fy7uwX5BFfih3AsBJrCDjyBHazcJhAZJE1Pqv0WKTlekjQA3HCnUn3SnvniP2sshnOmvjUbXzDyh2oXrU%2FwiiKdcZJgSY8PyP6cqsEDBJM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fdb5b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15372,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15371)","md5":"3dc91db572f9bf89793b207c85c5937b","sha1":"cee3244b4e1a05305e3d9070be813bc6b069c649","sha256":"4c023f02ba54936a0966a253adae5fc4582306d17e1f34ba4478de05111f1027","sha512":"28b305405b7451b19326ac5e8e584099554182c267674bcb38dc1e459872a8fa907bc5eade934f80a060f2f1d5b82a55febf67bfb31b6555f4dc7aa943b43a6f","ssdeep":"384:2RKLMpWRCdxdKz722oHPPP4pxeO4AkMAgpEQdKX2MbBdzpJM/8pzhIZ2Lsm:6UMpWRCsn22oHPPP4pxeO4LMAgpEiKX1","tlshash":"7a62da917580b472c77ba6c8c01945d1563e2b88b128d6e6f06f1d26379a8e0f0fdf2d","first_seen":"2026-04-28T19:21:23.131811Z","last_seen":"2026-04-28T19:21:23.131811Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/pt-BHWqNMZD.svg","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/pt-BHWqNMZD.svg HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-2a67\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ykSYrqbskEydnmJ52ABbBPOfyVf3eGVWxpuWC0vi2E%2BdYAqgl79hiOunkcwK6pW5rJmvWDxPaOQFAcj%2BFhBU0kMiNoLH2oemzYFnpmgSV9Kxkvh1WAfl3K%2FOc5BWCAp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c739bd135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10855,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (10853), with CRLF line terminators","md5":"9f5df63cddb50dcb090789f3880f0bdf","sha1":"eeb8eba32979d4e0c6516ae227521d92b96fdebc","sha256":"1c993b3e26f91ea131e92ad8b613ea065a0ce3cc18bfa53bc402118868f14ec2","sha512":"5b951a00745ec7a92a0a1272a090fc922f4620dfac068e6955a4aacec2a5b976f8f9826513922e5a24e335ef38f6fdb2dc13b976c66cfb4b96bd8501984bc10d","ssdeep":"192:jhphuHMm3amylIFolOE0iSMJdIzIJS03y4/rn8avJaeQVGgP:lphgMhbSF8VSydxSx4/rcGA","tlshash":"3422e9c85b3412fcac8a57eddb1668fcb15360bd672a81dcc23d4b181297b5dee489d0","first_seen":"2025-10-15T16:51:36.362217Z","last_seen":"2026-08-10T18:16:57.096734Z","times_seen":16,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0aa02eab588ce4116932d37585738c056.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0aa02eab588ce4116932d37585738c056.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1184\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108764C8B373336FB964E\r\nAccept-Ranges: bytes\r\nETag: \"7030FBEB27BFA58DC4D54D816CA70413\"\r\nLast-Modified: Mon, 28 Jul 2025 10:35:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8585336231698321681\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: cDD76ye/pY3E1U2BbKcEEw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 4-bit colormap, non-interlaced","md5":"7030fbeb27bfa58dc4d54d816ca70413","sha1":"196241c53a7609a0e286f7efd3c81c2ed3d8fe45","sha256":"02f9e036ad2e96edf7e5bfc7d75fd551ccafaa1b30623b278ed7c51cfe9d249e","sha512":"d5df7c1c2856e57017b500452f260125a07b262d3d791052eef9e4ba8b6cba3b97e742311277e3d622183d027907339278258f2b7466ab6e6220b4cd038ac670","ssdeep":"","tlshash":"49210a115ee8c6582c394e1514b3c812368679741850f0cf9a35243cc57030b2c8dba5","first_seen":"2025-05-14T11:04:58.534591Z","last_seen":"2026-08-10T18:26:08.872061Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2693,"timings":{"blocked":2398,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/clsx.m-DHulAg21.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/clsx.m-DHulAg21.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-1de\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbs1sg6ZvHE2uTFNgN2tI2xbh3CVjdFK9q74Lt5347i7Z5Th4FsKgC1t%2FfT%2B%2FZLV5hs%2FcWPUC9VBW%2Fu8TryVoYxHnRvXZ3rL5ZUc8GwcY9SzxKnkQVl303iEBiFKRotV\"}]}\r\ncf-ray: 9f386c7aed1435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (477)","md5":"dd64838e50061a16762037242174d321","sha1":"5bc1624ae224e067c9d93bae60c518ca57f48e49","sha256":"fb137b760bacfb05fc2eacfee16f7954a01bd739c1846a2efd5ea53e24f454e1","sha512":"b5207d2b5bb502a387ef3bbc933f4ee8cfa6d2fca59ce3c0514b46ee83e1349746b07ac1b0a37e34b1480cc0721551b151e4126ee79bac1eefa48dfd49035d90","ssdeep":"","tlshash":"4df09ec426c1608153ed58c1952b9143f418876297bcb040f5c0e7b551d4aa5120bff7","first_seen":"2023-12-22T02:32:13Z","last_seen":"2026-08-10T18:16:56.894784Z","times_seen":89,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hmac-yXOAIEY2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/hmac-yXOAIEY2.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-54a\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQ9n%2B95Qy2BsiLprDtWl3X58CYQUksHFkw9GIy%2B0oiMK2NnJ6g1V9MzEB8ii423JXxxjGDWAdO6IsMkPy89airnALx9rblSI3uuMyrbFYNSTxGVLZNh2hPcLuutOiVTT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7aed1735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1353)","md5":"83afcd976aa2802647cc5809a4a548c9","sha1":"56164838ccb6ed0a9a6a6e6b5d677da0abb3d80c","sha256":"d6a942f21e4c97411f98c178f05036c3677fa8e0b1d02a14b20fee49fab7f3a5","sha512":"c8f36519e5f653233178710b9c646690a03d4371ba5d6632f012e65b587b02e64d31e6e514b94593b772bb99cf08d4d82718132a0a0131e523601b823771fd8c","ssdeep":"","tlshash":"ad2101e0926085a0436990d61e108471e07080d7a943683cb2bddeddf425566e9bea3f","first_seen":"2026-04-28T19:21:23.135411Z","last_seen":"2026-04-28T19:21:23.135411Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/52653.b6e0332c914a3e30ea56.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/52653.b6e0332c914a3e30ea56.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0f-2f68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:55 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d3faf7a245fd7b22675b93e5efc09e0b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12136,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3070)","md5":"e36f230a63e1a9bcdbd81db22bf9a79e","sha1":"8a5bb3acf4350fb0072256616f77bb1a02fd9c4a","sha256":"cf452e7c6b0bb28eff6f75ae3ea679d03389d3e3b4ba5e8f2783bc40cf568e3c","sha512":"0caa6ec87a711d2b1244e30b45e99fa665e34813f01cb45298c4a0d61c6b84db618ca274100d0391ae4db6295f7b9b7bcaca1ece3eade948e471c73dce5508dd","ssdeep":"192:WIqc4iO9WvUkvL+FnTN3q/Kt2Jjfxi9nulrIjUeSlbSkDtHa:xGkUkTGnTNa/P9xKJjUeaSct6","tlshash":"0442d8b9b2677117c3a09097d4b69043732c259078498c74ba702dee39d8c96f5baf78","first_seen":"2026-04-07T11:13:01.690968Z","last_seen":"2026-05-05T08:09:20.493983Z","times_seen":983,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/financial-zPnx9bJV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/financial-zPnx9bJV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-115\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gML%2BboYhZ3n017SYsDS33Nzv5YiGssZYJruOEpOweljZ7d%2B4I6%2BBUcql6tGPH6m58sbKjG44%2B9S0OaNGA%2BnqJl041WHqUztgQlhUH8OzNv1ITk3LrjILPPOAGdK7jqvN\"}]}\r\ncf-ray: 9f386c6fbb4e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"417c3560b9a06e8f35b782d8953fe502","sha1":"cc5eda3ee66b45197dae37c2f78e336e2f3cbade","sha256":"8d20ced9a95e9292c882b55287bbfd11dd50e5530ff195a67971b7729d3301e0","sha512":"b2085728eae444fb7c30c9cb41b272857a2c4439bee0103235a87ffd4b6da0b12556bb35422f9845ef5b2672417fa3cf9130b9ffaf527b9a7b86763698be4529","ssdeep":"","tlshash":"2dd0121a4b9413eed3ba7d4651d2cc26402b4c79bea355f0457a46370295251b29db04","first_seen":"2026-04-28T19:21:23.137007Z","last_seen":"2026-04-28T19:21:23.137007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/border-BWz2L3Pm.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/border-BWz2L3Pm.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-Bt816wsy.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-23c0\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FcGTzd8PjxZf88jLdi%2BWwXypyq1ZwqL3%2BEkhMrnuwzg1MCzFs4PE1ENoNbrlff%2F5pBfpxOW7U%2F9yLoFtWxhBZRQY8OGEPeO5Agf57qGfWnhPk3B5WB1tzwJ8hakMT%2Bw8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c754c1635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2654 x 394, 8-bit/color RGBA, non-interlaced","md5":"38d67b0110dcbb94dc0a3e3a44957eb6","sha1":"d6a46be790928f1239c58992494fecb64add5e6c","sha256":"7daed9aa14c861d2208d3337649980cfbbeee30478b9352fa605c4cfbb7edd17","sha512":"8d8d6e2ddb42cded420cdf53c9b429d54c9cda36f7158a786d56b28033ef68680c8a63607e799c5947c01c39a716dfa8e04baf9586eba1f65636b5b58e3543a2","ssdeep":"192:TQ0bZMWujgQe3XAclzU16H/5Q8e0A7UO3Q7:80bqWToKU1i/KoN","tlshash":"c9122b807d918be0cd066b7bad79ff6c13b22545e8456f0f083b5a27fec1629ac4128d","first_seen":"2024-12-31T04:27:31.832449Z","last_seen":"2026-08-10T18:16:56.870254Z","times_seen":96,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2062.e8996c9d544e5965ee8e.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/2062.e8996c9d544e5965ee8e.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-81\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:30:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 21bebb2759f6a588a7a0cc3eda89d5f9\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":129,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2d8b5c3cd7ae08934776b1b41deb95a0","sha1":"9a4bc81c4da7271b047a696d368d128e5b45bc34","sha256":"5f316dc78efc3ea794be5d29dfd1eed788783714c025438b37a111d055aede33","sha512":"7415ab6e87a294dd5f039044c0948bfc3b18b9eaa78fc989de2e239a663416b1b80e0586464def8b43b503130c664160484e9bb1ce824905d1aca0423a2e90a1","ssdeep":"","tlshash":"afb02b5063401df480334382f0ff330b11bd68f339e8058c048d8cc00e030304272571","first_seen":"2025-09-30T03:50:33.714717Z","last_seen":"2026-06-10T09:48:28.895074Z","times_seen":2796,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/95706.06bfe84ebfb10f82ab74.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/95706.06bfe84ebfb10f82ab74.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb82-5a59\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:10 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:36\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e907d99db62cff5e30d778a2f00da6bd\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3071)","md5":"0b3fd703ddf4b767220ada2c0ca0eab3","sha1":"4f6a75ab2c1d1d32eee475dadb376608cd63f9cc","sha256":"4ae110acc1a29bf097a8dbbc1e6059cb98b0e0f6bc26f4488b147ecccc1bc90e","sha512":"d012e7440b086b7c01cdd0655957f0cccc96590b529517d56f5a4d4d7167220d0fb625e313f3df2d5162d5a2eb65a6b66243018d3d1a72f39aefcd1eb5349de8","ssdeep":"384:dzpldI5pPatuo1abfvqDXGCE+v19S/CMPzOYjcPyF8G+UswCBzyiOM5eWPIbTyNR:dzpntuo1abfvwXFE+3SqMPzOK8vG+Us1","tlshash":"1fa2d8c571d2b0e2538b01f681bb0047f2bc6859744b86a4e168acd73d678ad73a7e6c","first_seen":"2026-04-23T10:22:42.502728Z","last_seen":"2026-04-29T04:31:34.512166Z","times_seen":84,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/embed_medium_widget.d86033b71ea9aa8996a7.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/embed_medium_widget.d86033b71ea9aa8996a7.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb81-213\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:22:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f62033cc5cabfe35d3e13db371aba8da\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (531), with no line terminators","md5":"3e6550810bf918c40702643ce09ebf9e","sha1":"baad8e675e37d1be41ac151ec94e679807eb052a","sha256":"2b63e7afcabca703c8cee746865012f395a9ee811de2b3506e5e082360390dc7","sha512":"84a85a97cb6a9e4cdf6fbaf261284d2b1c30a12f38a17f6923b9648ae7891448e16eca22cdcf7478fd95944f4ca571eef6fb5f13ef8c6a70ee236295244fc6ed","ssdeep":"","tlshash":"c6f0dc000118f0e672ce38c9f2d369920d011290b21bebdf8d88cd0540aa6d5fbceafd","first_seen":"2026-04-23T10:22:42.554036Z","last_seen":"2026-04-29T04:31:34.471044Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-sheriff.tradingview-widget.com/sheriff/api/v1/rules/search?origin=https%3A%2F%2Fqevorinex.com","fqdn":"widget-sheriff.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"52.84.50.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Dec 2025 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0A:93:73:BB:95:EC:D1:52:11:5B:CC:2D:92:43:D4:FD:5A:2E:BE:A4","sha256":"70:E8:96:A5:F6:09:13:92:CB:0D:3F:A5:37:C4:A1:0D:4A:F7:52:C0:C1:B6:21:DB:D5:92:33:3F:B5:7D:EE:0F"}}},"request":{"raw":"GET /sheriff/api/v1/rules/search?origin=https%3A%2F%2Fqevorinex.com HTTP/1.1\r\nHost: widget-sheriff.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/\r\nOrigin: https://www.tradingview-widget.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 28 Apr 2026 19:20:22 GMT\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nserver: tv\r\nvia: 443, 1.1 8c3a87d110aff35fe17513b9a9ad30cc.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: https://www.tradingview-widget.com\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: same-site\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: uMbHg0bfmRz6gBAWQ1hxKmJW_V7HOWXq5GRLtr1OCIj6IX3SLr5J-g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":1500,"timings":{"blocked":525,"dns":90,"connect":1,"send":0,"wait":448,"receive":0,"ssl":434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/media/shared/assets/fonts/Inter-Regular-b35f79d43d03b9a20047efe416c35d08.woff2","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:23.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/media/shared/assets/fonts/Inter-Regular-b35f79d43d03b9a20047efe416c35d08.woff2 HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/packs/css/widget-91db6852.css\r\nCookie: AWSALBCORS=LvOR+Imhiz9pHWoS2wjri8OVdVGYvNSAQ9lPo3FAlc79qznHtuxcSJ4/+wJpkxfFvNlHaxZQRPQ2HHsd5g75U19BGEE20TvjIribNjhRBWzG3korQE5XLASIeYXJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 34832\r\nserver: cloudflare\r\nset-cookie: AWSALB=AcbUixE23kRqHMbE9HjYHjdyI8XMGwQf/my2Wn+m/dhexdnhOqm+1vA/T5VW3CRcvJjGvgimA8RatC/AUrKvjdLkXVK6L+L4nCzZnyAedJOsty5XRzVDNHb2NOHN; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/\nAWSALBCORS=AcbUixE23kRqHMbE9HjYHjdyI8XMGwQf/my2Wn+m/dhexdnhOqm+1vA/T5VW3CRcvJjGvgimA8RatC/AUrKvjdLkXVK6L+L4nCzZnyAedJOsty5XRzVDNHb2NOHN; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/; SameSite=None; Secure\r\nlast-modified: Tue, 21 Oct 2025 06:57:21 GMT\r\ncache-control: max-age=60\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qDpsUwEK2fZModGlm%2FI%2Fdrch5wPx3OnzJqqyuewWpnhRTo8%2FZTfLHiSHhFh2aB4Ez%2BN3ipRM1yUjVepJPqjw19xoOI2b19oQlK1ocBRD7UmuIHdAfIF69r66tqlRehg\"}]}\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:24 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c8b9c04b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34832,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34832, version 1.0","md5":"218a027a7d4d1fe4ae1c9d3415111ed2","sha1":"1e095a23cb7076efc31dfefd400088696fc44b74","sha256":"9ff1509605edb93b5b09373cc654addcf9afe913bc0ca69082e5683348e2ba75","sha512":"ce70712c758204a22d6a5df346412d513f20be4ad1078ed33521571f23d4aeb3c2ec49c437f7ad3e38de9a4e7720aca6f2c908518dca314dc7aff635b7b198c7","ssdeep":"768:5WfGJjzoi/cVMrl9aVE/CG3dJlSFbhXxMa4pKJrCcz/VPThsKr0eHdz4tk:sGFZ0I9/DjkFIlpiz9LTr0eH2k","tlshash":"24f2f13c03af16aacb4c936492a4b66b9b130514f643f0e6cc6a7f2f13bc1556b54ad3","first_seen":"2023-04-07T18:13:55Z","last_seen":"2026-08-10T15:32:58.741009Z","times_seen":735,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":830,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useApp-GM78SUN8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/useApp-GM78SUN8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-81\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnMPdvWuvVFqRpCNUNSdMStMKthyq0%2Bpc4reCvYMrwB%2Fzm%2Fz5CvgNh1evunf6FKp9qfnioqcV5dmKts2XlcMFB9zLDrR3rMwvoo91IQ%2F%2FeYQXZHH2Qc2vyh6dm7YRsuG\"}]}\r\ncf-ray: 9f386c700b6935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"d3858f5d0612a6d33242c04739ce0810","sha1":"8c19198885a5ae2716d7463fcfd862d97f6d97cb","sha256":"33b9d16a873e808c9270e1626b1f63d48a04669c3f288daf2e9fbbc99aee439a","sha512":"51963573b6606af941ae6c46d41365c3fe2b74ca3835c468fa91cd5e34ce26c8ac8d82fe0aecaf0bbad2e672ce3d61c14c434d391a45f16e68746824c1b0f5ab","ssdeep":"","tlshash":"22b02b0e248071b4e3080cc8622104c20314451437b147d0c02e431ab048499f229b02","first_seen":"2026-04-28T19:21:23.141114Z","last_seen":"2026-04-28T19:21:23.141114Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0971f2da6cb2240408e5e03a88269c871.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0971f2da6cb2240408e5e03a88269c871.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8646\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876794D1038349D552C\r\nAccept-Ranges: bytes\r\nETag: \"6D5B4D5FA1076FD069C299E6269E337A\"\r\nLast-Modified: Mon, 28 Jul 2025 10:34:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12611491678234257564\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bVtNX6EHb9BpwpnmJp4zeg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6d5b4d5fa1076fd069c299e6269e337a","sha1":"9bd71d1472ff39ec523711f4ba39e15dae78105e","sha256":"d934caba25d66b415f679f6b08a8ece3e10d1ce9c4a324216594493cfd42692f","sha512":"dc8f9c4e0c3cddd31befe0fdcadfaca7f4e17bcf42c5b7c9dc0e4cb990ad96e015d33a3e17b7aaa5a08af23219ec155d89bb3fcd081836426360a4c996429dfa","ssdeep":"192:eH4TtYPopn/FNZPyTxOwUVRjIt9HzSJqQ9rKtm0cB81vtw9/p:eH4Ttii92xUSKX9051vtw9R","tlshash":"d102af82b77257b19523927cc716f2cbaa6e43c1e5d250ff0341a0b997ced24c0426f9","first_seen":"2025-07-06T22:01:43.154442Z","last_seen":"2026-08-10T18:16:57.028632Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2686,"timings":{"blocked":2396,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/debounce-DnE9GlSA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/debounce-DnE9GlSA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-63d\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfZMgSQqJv1eI97gwq3bq0%2FqdKoJRg2m9bZBfag%2Fth10222x7CxiTMCp7Xxb4PRlVnzzS2GxH4rPOu5Csz9jiYRS7VJpmWwAUatzQXY5qprHRfg9TzBiFGom0fqx%2BQxI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0af435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1596)","md5":"2fffdba678d36300e74302cca0d00f2f","sha1":"00752829dc634cb5d28d264790ed6628bac23ed7","sha256":"87c378bc71efb9f8c816a0448f5f3407acb9939a4025ea2cc3a026e0742f123d","sha512":"d29f855d3d65bfa6df1e9e58fab846843b210819d13d1667cab6bf83e1a53a7cb641063d09ee6cd1156880d9b942e3f2a849498f1bb6e186706f5fd4a8a35352","ssdeep":"","tlshash":"a131e0dcb1cbf0d0235656f080bf9916f03938b1049c81c0f526e161be74869e2b7daa","first_seen":"2026-04-28T19:21:23.144432Z","last_seen":"2026-04-28T19:21:23.144432Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip6-B60WAgX3.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/vip6-B60WAgX3.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLE78FKMlLssT6iMiYBWfxh0FDKFTybF5gv5VBsii3q9JZCYBLw29xig60GyCCGtOPieCI0kUGF1KsQ3A1XYqYdQf2YmiOF36XUR8QWSg6HJ%2B2RbDW5ser5ErBBT0T0M\"}]}\r\ncf-ray: 9f386c6fcb4f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"37b1b94f7299f5780c82d2f678b8074b","sha1":"7d2fcaaab2211062575f7a49e32d570b8f815743","sha256":"6f667df5dbb914c46f8e793d627499a97cd487e1d0d81f727f75fbd81f98a55d","sha512":"299f11af30f7b2178e49d041e61847c69f7cd3eb43f4c2b352eb8e60dc462bcd14fa24d4675f096cacea8abe8c328c8b2cb73a6b3370604caa93443acce2507e","ssdeep":"","tlshash":"d3d0c739447844600436754445a3ac93d11ce386afb4c37a9032e44ff65fccb505bc37","first_seen":"2025-12-12T21:48:41.863434Z","last_seen":"2026-07-21T11:23:30.530029Z","times_seen":9,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/notice/list?pageNum=1\u0026pageSize=3\u0026orderByColumn=notice_id\u0026isAsc=desc\u0026key=INFORMATION_NOTICE","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/notice/list?pageNum=1\u0026pageSize=3\u0026orderByColumn=notice_id\u0026isAsc=desc\u0026key=INFORMATION_NOTICE HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lI74Ewd0jXa7jLu5R6zf0NimC%2Bfxn70cIToKotaRzWRC0%2Fw5zinaklY7N4zchRyDqt8bp8Pslqob47%2F2RYBhgbQHH1hWpBx2XOR64JOjPIL0i5GGp0D6gqG9dmh0CrlrOIAHrBOv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c77d991b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/37833.8457808decfdb6b99100.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/37833.8457808decfdb6b99100.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-6bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 08148fdc19a3a2e3b97a8d009cad7262\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1724), with no line terminators","md5":"26b2f4662fa34bfdfe2f9290d6a5a6f1","sha1":"a250999df0cc87843390fbcb11acaf3018d4db3d","sha256":"a0125d5a32019350b8402e4a4a383763e07af6bc46eac9321f8b5eb77e1d2220","sha512":"4e806a479287d3018f606cec1f1264efae96e39f519d3a308b20b3fbcdaaf1ae58eaeb520254c00cebfe03c95020499ae89e14f7fa1fcfee3fee85b80702923b","ssdeep":"","tlshash":"b331ae75d325a228bd6a1a276340e1ae319cf4477777921cd581b968c0d17fd3633398","first_seen":"2026-03-16T12:25:01.231403Z","last_seen":"2026-05-15T10:22:28.411184Z","times_seen":2680,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/medium-widget-creator.494b1b7910cdf03d458d.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/medium-widget-creator.494b1b7910cdf03d458d.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb85-2d73c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:22:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: eb0c822b029621d33d076ffc5201c939\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":186172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3071)","md5":"037db0620627d74272aefc379e289a0e","sha1":"7e5c5e9e2898e4aacf88342e4e616bf44c239a94","sha256":"893a8351e943480c5a9bb7f5e1d5cc3ec5a286b98fcfe251332813ba6cad5a2e","sha512":"671009f112b5b30aadbb54e339bd2a473db937b004a27d5fd1919133d5ee95ab6d5f0c2e247190ebe773fdd55d2de0db69b9c1eee5c9fbab51b09d293bafa0c9","ssdeep":"3072:hZcrNwxf+t8k2U9xawx4BEVYTXdVw5uMcAVLPcju4ayOw+V:hZhWt52U9xawx4BDXdVPuLcjuZ","tlshash":"76042aa4f1d1b06263e340fe587b5003e3291941781a4ae8f678e9de3a5dc4a7276f7c","first_seen":"2026-04-23T10:22:42.49684Z","last_seen":"2026-04-29T04:31:34.449522Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-lSzl7MlH.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-lSzl7MlH.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3c0c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwAs1dYRYIUFzD8BR9DVmTv%2B%2ByM0cQMfGns%2Bl5qaQkyTxMP3ZzwIOyH2SxvNhkCRXD6udjoddsWFRmkfR1G0EnBFDEJXkcbuAKxOInCPr0189I4y3x7%2FwYNwwmMpBEi6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e2afb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15372,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15371)","md5":"3dc91db572f9bf89793b207c85c5937b","sha1":"cee3244b4e1a05305e3d9070be813bc6b069c649","sha256":"4c023f02ba54936a0966a253adae5fc4582306d17e1f34ba4478de05111f1027","sha512":"28b305405b7451b19326ac5e8e584099554182c267674bcb38dc1e459872a8fa907bc5eade934f80a060f2f1d5b82a55febf67bfb31b6555f4dc7aa943b43a6f","ssdeep":"384:2RKLMpWRCdxdKz722oHPPP4pxeO4AkMAgpEQdKX2MbBdzpJM/8pzhIZ2Lsm:6UMpWRCsn22oHPPP4pxeO4LMAgpEiKX1","tlshash":"7a62da917580b472c77ba6c8c01945d1563e2b88b128d6e6f06f1d26379a8e0f0fdf2d","first_seen":"2026-04-28T19:21:23.131811Z","last_seen":"2026-04-28T19:21:23.131811Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hashMessage-B4Wm9Th7.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/hashMessage-B4Wm9Th7.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-10d2\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkPpYnwIZxUbTuWfpVzIa6XZZExmS1sdV7G8TsZVfX7tu7%2Fu7qb8F%2Bxk0P87HUq8%2Fe1mQMeh3tzV2f1KrXUVT6a1pMYselI%2BM4YrCepgqO24%2BTKUeQuNdIdlYe6sBirK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7aed1635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4306,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"7871d108edabe44f5cecab64074b0792","sha1":"17e79875481040a78e17845d4166b63f3782077e","sha256":"75578aa62baf953402bdb4e15b9f2f0f2d32afb03b64d0f97b7754614cdb3c71","sha512":"2eb3887f01d7d8680985d41d17f074b9d9aa799c6953105fa5f592c90bf75e9d4ade963f9e162b381f3d8e18f299e5609674d6a4d139753f50dd75b28c361215","ssdeep":"96:NHl+/nhKCzC8VKABKEKA4p1pjOts19evXF4Vjjsufr4yfq4+6KSEZkF92:DQnhKCzC8VxFcjOtS90XFKvsuJH+J","tlshash":"5f9112cc75a1f1b82ecc05e8e0e76101e6e4ac11f07588a3f1ac65b735f292da579b2d","first_seen":"2026-04-28T19:21:23.146309Z","last_seen":"2026-04-28T19:21:23.146309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/81151.4dbecda7b235ad65b274.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/81151.4dbecda7b235ad65b274.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df3301-4fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:05 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:28:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d7fcb5fdee1a09e03729f944033e12fe\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1276), with no line terminators","md5":"cee32de20733bfbb384ba291abc1bc06","sha1":"f7870e0d72c31d89a0ff772b3df58a54c559f1d4","sha256":"edfbc7903339243b8f1ff126660dbe82807bf0ef838f86c09256c5a511ec7fa0","sha512":"15f364917cbf8bbe32b0cc5ddb4af15d65215f7c4c1236898bf37c79fd6f202f8250c977ce813af8f0127b863c0d97d82f2b8a7c4c60b3b285174050b50735bd","ssdeep":"","tlshash":"e421c1e0e650257af8938d629788d9ca615cfa036713ed4af7dae40a44d1d7c127c34d","first_seen":"2026-04-06T11:00:06.691351Z","last_seen":"2026-05-15T10:22:28.567617Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"widgetdata.tradingview.com/socket.io/websocket?from=embed-widget%2Fsymbol-overview%2F\u0026date=2026-04-28T09%3A00%3A19\u0026page-uri=qevorinex.com%2F","fqdn":"widgetdata.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"93.123.102.178","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Wed, 18 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"96:06:76:35:9F:2C:2D:1C:89:55:E8:92:7C:4F:4B:FD:E9:F6:FF:1A","sha256":"BC:FA:33:CE:19:85:7A:43:44:BA:17:CE:87:15:42:E2:02:0C:7A:4E:83:42:1F:58:8F:59:B4:20:BF:4B:35:00"}}},"request":{"raw":"GET /socket.io/websocket?from=embed-widget%2Fsymbol-overview%2F\u0026date=2026-04-28T09%3A00%3A19\u0026page-uri=qevorinex.com%2F HTTP/1.1\r\nHost: widgetdata.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.tradingview-widget.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VaDENKH1YAPR5/QnFCtr7w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nConnection: upgrade\r\nsec-websocket-accept: kgiYhTsmNEZrUa6pdo10mAoP7mM=\r\nsec-websocket-extensions: permessage-deflate\r\nupgrade: websocket\r\nServer: tv\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":1,"connect":22,"send":0,"wait":23,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/css/1-5a7e157d.chunk.css","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/css/1-5a7e157d.chunk.css HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 2333\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=14400\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\nage: 14186363\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR51J05JoadogZFchJG8kzb0y8OkJfHhKQLFf7dXdaLMdxuHAZShg%2B1m%2BvlQ6nxeDPeUSfpsXsXMy79ZBN5nT8gYWw2T%2F%2BnO9ZgG3kW%2B6z3anzKiwFBmoI8%2BiEI8cRu5\"}]}\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:23 GMT\r\nx-cache: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9f386c850d30b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19931,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19931), with no line terminators","md5":"e7833ec351e05d686920e13be82ea5a2","sha1":"894900e2f4264eb7c1dc322d1b9c27a1be5cd62f","sha256":"70871a3f204671c53a0561e02fe576765439ec9a328426b660b7a3dc056f23c7","sha512":"1c273bfae6d0eba14ad6bd2ee8dc4e117764296c509fd96ce5c0f2f5cc9d2d6faef71f0d0bba621b1b65424005bfccc48141106f7ecd95207a820cb3f591b790","ssdeep":"192:1K4yVuo5mn/VzMEBtA5UMndP1MKHkzceTcpD7VEpgQpedNnt/6UoU4/zHw3B5hJ/:kB0zxc/dkRFolhd","tlshash":"9692ac1ca75c6bfe353bd18918bcc0193601b3b3f2fd47ee85657a51aea26636c0e424","first_seen":"2024-07-08T00:11:40Z","last_seen":"2026-07-12T15:00:50.728785Z","times_seen":86,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-WkERe-Ty.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-WkERe-Ty.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-17de\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhHfNBiY4oQ64svzL6f%2FHgdlJaGy%2Fi7Tz2kv89%2BAiiz2G94o1Jxw8YgicVF%2BMrTEUDlMOtmrV2AnGiPwcZQrirG0P%2BfefqbQaIF1f9Y5JGtLUrEGlaVl7xYchVSna6RG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fcb5835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6110,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6109)","md5":"4cc4bd73079313c46e6759c1b8efdc5c","sha1":"594b83350b4f66311b363cec48f7f66cef7cd09b","sha256":"30b55e5260297241b8ab6eab1d04812183febb7c022dd2e48d1267caf8d9f37d","sha512":"e6759aeeab9a8485f1bc6014d10a7f314806cfe7f00f5045cb38e387191a0efa5411bac3220a7af495ff84bcb2a685ed4ec4b847b50b1c5edb18b9c74c457bf4","ssdeep":"96:Ta3CW2sHi57JSEldQcz5Ci3Mc0HPcf5CkgPY2s8e0+5Cie4SD99t0:23CWtHiVJ5dXzkJc0cfkRPYt8e0+k+F","tlshash":"63c1b66fd1559bbc4b71308a34ab4504828e3b5bfcadd6c0f79828481264da9d572b3e","first_seen":"2026-04-28T19:21:23.14908Z","last_seen":"2026-04-28T19:21:23.14908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/charity-bg-DnuQENdi.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/charity-bg-DnuQENdi.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-Bt816wsy.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5cd58\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rq2JCmXjvBU0N6Czyy7qLpbHkho2N2wcPUZLTUqci6oupX%2BVOmcy5byMTILVaIzRBsaK8mqtA6KdP6%2Ba8Jvcb3ZUW16QpSLFxwn1Ub5AzLl77hBYBSgFY4rkCxmor43A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c754c1535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2520 x 1000, 4-bit colormap, non-interlaced","md5":"116b9afe9862a40d304065bdf384a57f","sha1":"0faec52922a357dd335aadf8bb2d052bc4b6e262","sha256":"b8e2103ea82b7f03c1f320fb19e1eee8661be3cfb347aea149300afb35c7cbb2","sha512":"34a62e330e84dc7fd47b9be584a7f8e63f80e19cc5506f4933daa8a38feda0b70db005b5f50a4ddedde22ce5c37d06bd31bf474e865fdd4c55eb420a4f512768","ssdeep":"6144:WM8B3pSOIhB2S9mEZ5c4dlp72Xa9TAFAItBH2uQX5wWaVFWTorAzC0tDEom6mHLQ:VGS9H5nfp6G8FAAH2ubVFWTorAzLJmTQ","tlshash":"6b842360ed9a5a8600378d7bdf43d0a5570ae029897c7ce2c45c9f3dbab541ea0b7f09","first_seen":"2024-12-31T04:27:31.778019Z","last_seen":"2026-08-10T18:16:56.949696Z","times_seen":117,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0d30fa45f78814c84a419b109b09d431b.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d30fa45f78814c84a419b109b09d431b.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 957\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876CE63A8383261E8C2\r\nAccept-Ranges: bytes\r\nETag: \"DB1F13E46508474023E51DAC9B924272\"\r\nLast-Modified: Mon, 28 Jul 2025 10:29:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2775687442448118922\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2x8T5GUIR0Aj5R2sm5JCcg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:03.591485Z","times_seen":561,"resource_available":false,"data":null}},"time_used":2181,"timings":{"blocked":1900,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0c7835776ba5644afaef82b4d981a4dd7.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c7835776ba5644afaef82b4d981a4dd7.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9147\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876CE63A8383260E9C2\r\nAccept-Ranges: bytes\r\nETag: \"B951A446B7CDE16D30950D6D477D9222\"\r\nLast-Modified: Mon, 28 Jul 2025 10:33:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6085252504609925482\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uVGkRrfN4W0wlQ1tR32SIg==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b951a446b7cde16d30950d6d477d9222","sha1":"d88da1fc7330a5e6ca1f128fa6368d3e1fd6ced8","sha256":"670ee14e5a574210e72af620de981a1596da85c84cdf413a034ccb181faf29e0","sha512":"448c62e64c1a2b83a4fe206223c05c68a90b039a428297263dabd21191d42ea164f9c29cf8653a9e6098fad14a2ea3a894e24d2dc7584b541d20ecfa299ad4e7","ssdeep":"192:eFolsULki89u2MSY3tzCsDLdo0kC8mNblrWrxQq/dFl7:eBMgPcPdok5r8L7","tlshash":"4212c0837cd9bd876f4368902a10d915f79f3687849888887674eb0aa240df37c5f89e","first_seen":"2025-03-29T18:49:42.988174Z","last_seen":"2026-08-10T18:26:08.905947Z","times_seen":86,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":2169,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.047ed67eb6c284c9e97a0a6aedebaccb8.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.047ed67eb6c284c9e97a0a6aedebaccb8.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 352\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876CE63A8383269EAC2\r\nAccept-Ranges: bytes\r\nETag: \"0BF47A0FEBA1F8E68202E7FC29FED743\"\r\nLast-Modified: Mon, 28 Jul 2025 10:36:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 50722347791479226\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: C/R6D+uh+OaCAuf8Kf7XQw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 4-bit colormap, non-interlaced","md5":"0bf47a0feba1f8e68202e7fc29fed743","sha1":"e2df3bc97f7787f425db00bcbfc9baf6314685d5","sha256":"e7469b8f5e95efd43da015f656e3fd53c2ca2e6ce49d238820a63cdffcafcea5","sha512":"f3f2113fd458bd7098271be93f22e8f2fa3196cfcf38c060b6356cb4fb90be88bbb3751084b25e6d9e82a2e3ba306212e431a5f6a82db757c17b817597bd210f","ssdeep":"","tlshash":"14e0f82b875ecd47e8a101336a0682c305a22a2bf19282634482ea031c0160308d8407","first_seen":"2024-10-18T13:48:19.560645Z","last_seen":"2026-08-10T18:16:56.992332Z","times_seen":163,"resource_available":false,"data":null}},"time_used":2706,"timings":{"blocked":2426,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/55482.57ef1b6cbf22977fa29c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/55482.57ef1b6cbf22977fa29c.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"697c6721-1daa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 30 Jan 2026 08:09:05 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/30/2026 10:49:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 07543f4d1c5eb32855776b0b920c90aa\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7594,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3055)","md5":"6c01e80787ffec0a3beb96bba5a15479","sha1":"e6f3476cdb2a6fa27326789e65e39ee585fbea39","sha256":"8223e4125b61010598ca15da34c93cf3751ef63065a1bc1070257a4cc4e7bc81","sha512":"fd7748be7492952f9037c2f4f293f148ac5d84aebfa889495431426dcd4b14f5ae138d8b28ac1106ba2a126558f6ec3acf5f399effe032d6dc642c8c031ad2c3","ssdeep":"192:xxjobnZ3MfzZaIBV4tIcs3m/ad9xi9Sz5:LjorZGsZtIc27+ct","tlshash":"fef1b7e935c7b00d679a497428cfe604b2afb55ea84e4f41c05af1817c6993c9333fa9","first_seen":"2026-02-07T00:49:25.160393Z","last_seen":"2026-05-05T07:37:29.15341Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-WkERe-Ty.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-WkERe-Ty.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-17de\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKDTitWxQr8ZeOlIAhy0m0st27PEaVZnwnsHuHs3mc5tdE9Hy2WHOguYKif98ZKScuKacws4hkD80NpDWa1%2BiXduOgluskQzzI7eCzZCLn40tESv2xn4N%2BPBteAWeWZy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0af735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6110,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6109)","md5":"4cc4bd73079313c46e6759c1b8efdc5c","sha1":"594b83350b4f66311b363cec48f7f66cef7cd09b","sha256":"30b55e5260297241b8ab6eab1d04812183febb7c022dd2e48d1267caf8d9f37d","sha512":"e6759aeeab9a8485f1bc6014d10a7f314806cfe7f00f5045cb38e387191a0efa5411bac3220a7af495ff84bcb2a685ed4ec4b847b50b1c5edb18b9c74c457bf4","ssdeep":"96:Ta3CW2sHi57JSEldQcz5Ci3Mc0HPcf5CkgPY2s8e0+5Cie4SD99t0:23CWtHiVJ5dXzkJc0cfkRPYt8e0+k+F","tlshash":"63c1b66fd1559bbc4b71308a34ab4504828e3b5bfcadd6c0f79828481264da9d572b3e","first_seen":"2026-04-28T19:21:23.14908Z","last_seen":"2026-04-28T19:21:23.14908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/SpectrumVisualization.vue_vue_type_script_setup_true_lang-CO6w7rVC.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/SpectrumVisualization.vue_vue_type_script_setup_true_lang-CO6w7rVC.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-e30\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOpmWVfdmET1glTPe2MEOveMtCMJyimUTBpmFKFETSRXQd2hKtYysoMr29%2BMzEiOzPEucRhlm3IC9EFUKftxDSRnH40KdeWVZGLxMgNfdBVPiyQUe7ZPyBWjRTd82wvg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e3b0335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3632,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3631)","md5":"7188dc761b294ba0a33b9a42821cd2b8","sha1":"d4fd8ac3f1e9586882aec6a5f36cf461b8c0474e","sha256":"5d41bf23b5dbcbbf76bb1077b16db96026ca92c20209b3a3a3c6a293eb7b3e6c","sha512":"3d9866771f7be1f304cd06950f07b1de0ea1a1766a00e17fb7fe49a157a89bf6334e9471647cd824ca371632709c97efa03ce9f2269d643c8b87fd959b05c907","ssdeep":"","tlshash":"2f7194fc0608ba9fd5624d475358790ad40e53ee9f97ac80d7ae812dc52204dbeacb3c","first_seen":"2026-04-28T19:21:23.153298Z","last_seen":"2026-04-28T19:21:23.153298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgfeviKMiHwd2cr9Da4uRbegPryUbo35Qc8LqveeOH%2FL%2F0aFjOxSbmajYNRCxVXxS8zictCazlUod7qzGvi5zLU0rLfanUUR9FYaUKgdj2s1xDdXnOyAvdboRXSt39wW\"}]}\r\ncf-ray: 9f386c7bed3f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/debounce-DnE9GlSA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/debounce-DnE9GlSA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-63d\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9LQwAwWgKRNVUBKmAyP5t3wEbD30jxKIawg95BQygaqYfvg8MRhagvhe4ZJ5lKHdRginQXxZXz%2BSqOzpqDPqZs0soNEyopTBkkfuAdh1lp8hIw%2Fp%2F0fgxyCybe1D8TX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fbb4d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1596)","md5":"2fffdba678d36300e74302cca0d00f2f","sha1":"00752829dc634cb5d28d264790ed6628bac23ed7","sha256":"87c378bc71efb9f8c816a0448f5f3407acb9939a4025ea2cc3a026e0742f123d","sha512":"d29f855d3d65bfa6df1e9e58fab846843b210819d13d1667cab6bf83e1a53a7cb641063d09ee6cd1156880d9b942e3f2a849498f1bb6e186706f5fd4a8a35352","ssdeep":"","tlshash":"a131e0dcb1cbf0d0235656f080bf9916f03938b1049c81c0f526e161be74869e2b7daa","first_seen":"2026-04-28T19:21:23.144432Z","last_seen":"2026-04-28T19:21:23.144432Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hashMessage-B4Wm9Th7.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/hashMessage-B4Wm9Th7.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-10d2\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvUADfuhd5T6NYcszMxGRC15ygSuHclLYd0nLAtrqI6gZinT%2Fj%2BXDXmcjGdwOqYPKf3lkpCpmt%2FWNXbQD9tIRtSbOcu5nZu8B5k4JDeveqL88XAYV9o8hZZRxgkJRygn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78eccd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4306,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"7871d108edabe44f5cecab64074b0792","sha1":"17e79875481040a78e17845d4166b63f3782077e","sha256":"75578aa62baf953402bdb4e15b9f2f0f2d32afb03b64d0f97b7754614cdb3c71","sha512":"2eb3887f01d7d8680985d41d17f074b9d9aa799c6953105fa5f592c90bf75e9d4ade963f9e162b381f3d8e18f299e5609674d6a4d139753f50dd75b28c361215","ssdeep":"96:NHl+/nhKCzC8VKABKEKA4p1pjOts19evXF4Vjjsufr4yfq4+6KSEZkF92:DQnhKCzC8VxFcjOtS90XFKvsuJH+J","tlshash":"5f9112cc75a1f1b82ecc05e8e0e76101e6e4ac11f07588a3f1ac65b735f292da579b2d","first_seen":"2026-04-28T19:21:23.146309Z","last_seen":"2026-04-28T19:21:23.146309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B1xPd2rd.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-B1xPd2rd.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5db\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhDkpLNm2px4xFwSqb6LMpHHVIRRZi%2FRixQ2PX7y2YXhGmwJsvy4s4P8dvuet4R0RG3kBxuX2Yhx5ZrIfZCOHGLHNSgbltI1zPtQ7GB7nZDgkOEtbe3V6nAUd%2Ba89G%2BS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e3b0535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1490)","md5":"656b64a6aab7ff6c3f51e3d8def15dcc","sha1":"560748911745394f29874d7afb365f628eca5adf","sha256":"8661bf9292fcfe18a2f35802aadb1ef0c481ee2464dd9f0c5c7550f1203c700e","sha512":"f09aa3f03fff2be28ac5259e6390fabab04e2489ba4a4149239593ea1cd4635394ddc13de07cf071886db78fd13ca975e24cc1e5ac468f2572293771a69ea92c","ssdeep":"","tlshash":"4c31122e5d59673266e7b81132860420030606e8bda889d03fbd1f1e8d96cc3767f90a","first_seen":"2026-04-28T19:21:23.154174Z","last_seen":"2026-04-28T19:21:23.154174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-1-_K3Dez7N.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-1-_K3Dez7N.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-9f70\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xgu3VeeMwAtqhdkC%2FO9WFdNEoVHxcjVFV6j%2FXlkHALHxP0%2FRe9lF98nWY6sgTPAKJXOxbun2KcfnOps%2FvFnyJgjhvv50r2%2Bw%2FfF7GEzs94I1JGlhMpRg%2Fg%2BaoAMki6K%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74abfc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 307 x 303, 8-bit colormap, non-interlaced","md5":"8c4268a0ab85bcf4ad6756711db827d5","sha1":"93cb342fae3e1ae99c8913bd572b44097081f557","sha256":"b788982ad8c2cb434ac118335f242d8d346deeb8fb6106f016ddb08d466a30da","sha512":"325f51a453a8c88cef6882433c45eab9079ac577d5e2658cb7db059f915c3fe4cffbddc9197956bac39515beddacaba6bd4bc7bc815c7d7e048cb054a12c4451","ssdeep":"768:0dpZWsFeoO7XkYpcRnW2qAAs48PYJ2BPm229fZbvcx67vmKfhW8uY7S+ExfNSj+:scXkYpcRnxGQYJ28FfNUXwuY7nExlSj+","tlshash":"c003f2f4432e78a4994337948b166e385a6b73feaa1425bc38992e543afd005f9c0873","first_seen":"2024-12-31T04:27:31.727649Z","last_seen":"2026-08-10T18:16:56.87096Z","times_seen":65,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/secp256k1-BR5oHcvx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/secp256k1-BR5oHcvx.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-6811\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBWciWgPCOfAAt%2Fh5exrYv9cX4Bp78kvjWovj7kkV1EkZCbrpXZ1UtGJwjSsqmfvBN6TaARkVx6QPAoUk%2BqIkMAoAGLE0gJP9aE5ThPJVDjqL5WJ7UhDxL0X3zdeVY6K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7b6d2635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26640)","md5":"7f3d3600f9b1c440d34ee3275f204739","sha1":"5a46d1625824adbe6b0cfbbdc074dcb6d61e08f8","sha256":"e595c063a145084feb0d241a3adec6180b4ee8e87426ba8a86f42129abae11e1","sha512":"87f02e68c5bb36130cca42be257cae4186edc60d334bfd07ee0530d0d9c0f042994f49e66be33dd044f7a1cb9be706f3132a61516e5873d85fcbded8377a608c","ssdeep":"768:yM8AoeMUTPdT+QOSVP781Akg57J7zpxdjjGZC1ek8R3nYqYpm0ObGv4lNvx0jC7d:ndUSdg9kkh/zvLl","tlshash":"0cc2e98473d1747253ba28e001769502f5b4dca4f2dd4861e59c89eb3ef18ad8eb7e38","first_seen":"2026-04-28T19:21:23.15616Z","last_seen":"2026-04-28T19:21:23.15616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/34697.aa3653b9cf640f4a5f66.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/34697.aa3653b9cf640f4a5f66.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb84-3ebd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:12 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 36e087c1f9e1f26d5f881f2b3c513ce4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16061,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16061), with no line terminators","md5":"a165f9511cd0cf4f76b226d00359ffaf","sha1":"97dfa9aa8953bf3b3d9681e7556af3b1c52d746c","sha256":"24e85aecac8564fe2b531bdb2652f73f5a70bf82b0e6598ee486503bdf23bf13","sha512":"89a0ab3587ad5e946cdb2c22cdb076de4d03930323b5e6d0ff53b073128b681ae11e50fb70a9fb272b65832fdd8f82c9f4ddccd4c893a43ac3132223334252c1","ssdeep":"384:lAQ07chWc6WkKkC3PKPhPV90BPPiIPf1MfsKfhhHNHKHhdHhOHsOHsK/d/U/E/s+:lAQ0xpsXFeGI","tlshash":"c4721c85334f28b4f4769f27361ea984fa08bcb5b052ccbdc4955abd98c2a7d01687d3","first_seen":"2026-04-23T10:22:42.433417Z","last_seen":"2026-07-03T10:20:32.876055Z","times_seen":855,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/motion-BeBk3o5Y.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/motion-BeBk3o5Y.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-1642\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwicYbGfhQPy8Js54T1FHOfU3na87ee%2FaaDvtkTT7ybUgynAH6JlxbvYYAT9JKNGU%2BKqFoAofHEvk9DLMtnMgv40Mm6Ry3suM8A1M%2FxLOpeCk79IuyggH8tl78htv4wD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fab4b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2734)","md5":"541fd24e797817ee1f8f4388bcba539e","sha1":"74e522c9eccba3da7cf8e8e4444b20dc05ecf8ee","sha256":"da520ec42819ee501a89e3cfc9e20a8d4e58d808c8352c350de7b8e494af2938","sha512":"f9fd332a52dd3ce214e8c6b201612f101975aa83654061bdc00577ffe6ad814f85d0e84c9e764ed43865708e860571c0ac6d75c23951b077b698a15041a8d467","ssdeep":"96:wSLaNIe1GgLcIeW0FMerm8hAYjWTx/mXKMexNl3DyV2FUYn2VmdfJHBXXm8Od1HY:wSYigQfLrxhAwWF/mxGDyV2FUVCJSxtu","tlshash":"e3c1f8dcb38878f287eb89abe037c315763121147419c8e0a06e7e3e6750da35533e66","first_seen":"2026-04-28T19:21:23.068543Z","last_seen":"2026-04-28T19:21:23.068543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/RightOutlined-ChmqbvSw.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/RightOutlined-ChmqbvSw.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-83e\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41l1Ol37tpi8PmVc8mjPpEsfJ4vYTCPvqcYMBo5titb43a8oaRy0eCIlL4yxvhXkgUI5E6m3va5uDDERAk6EFg8d8ZUEsjP%2BjYy58zfUOEBZybONE5Pah5itBx2H9AE6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e1af935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2109)","md5":"a1ce9cdb8d4869bf060f4adcb67750b2","sha1":"40d16e5dbe8419859b855b0894dfa1204d83628b","sha256":"28bce60e3e095f31228b521e16737513082964aaf423acf9ada63b792fafcaed","sha512":"be3e4c3b1c3bfdc2e1b320a6cb543019978d36d5bdc4be2576bb01f80ae073e39911085d6a811ae57a81fe805f9004e99dcaf89ba3057c7c50578d89d7e74ea7","ssdeep":"","tlshash":"004197f8b24ae27902545c8e04372712632b285cb46ce4e0f5c4def6595874ce057fdb","first_seen":"2026-04-28T19:21:23.104793Z","last_seen":"2026-04-28T19:21:23.104793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-DyP9EBVq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index.vue_vue_type_script_setup_true_lang-DyP9EBVq.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-1de75\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fw0tdhY5HvOW3ZU3b88yzti%2FnMl%2F8LYNMmSJLhrgIZulTwrBJATTS43Pxq5dxF48XuaE1horUXiVGhsbwdJS6Xn2e23p76U7ehPnqMjLtyBpMd6XJinrfI2PebQ48tvN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6dfae535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122485,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e6bcbe51a1a0d06fad50ea127b8efd7","sha1":"312f724a9d67af7fe9da5891b9dce5a8756746d1","sha256":"d0a510c014b4c2682e0602ff891ba9e7f2bf54deda4116b256c2476f17da3179","sha512":"91dfd6cbb85101bdcfd2ef42555b0d9ff57bd8b8b8adb7465e0d08c8c502c7fe099c514f98a614e71eb281734ef4f7f1623c6c0885b5b7d6c4491380d4cf1b0a","ssdeep":"1536:ZwIBPTqzh1RCEfM0LEfyBL538ze54Lqa9:tTIrILD9","tlshash":"a0c30afd268171e8f437cfa254113819b03b39bfbf368944d9e56aa4fab146415dc838","first_seen":"2026-04-28T19:21:23.157124Z","last_seen":"2026-04-28T19:21:23.157124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/zoom-BtrIUIIq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/zoom-BtrIUIIq.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-94c\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9KNr87Ax5gXzGMQLqnTGshmGmdwm%2F8GxJ2gEH5ooYufH%2BQQuimuZ70LhnQj0spXA%2FF54uJNcs2KNQrKXQE23Z5o6fvz8wekXCTBwrjmiNv7V69dxBSf59UWKLVpaokj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e3b0135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2380,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2140)","md5":"09531583b696d266f6fb513fb67c5e6a","sha1":"dbbfac6b8e6b3c983091f8d75a1ff3ee63eeff7e","sha256":"a512f4bb38cbb05e09cce2aacc251cef91c1d5906c2d67faa54c2732ea3cc9fb","sha512":"ad023bbdc6ad73a7b176b88c783b653b88a12401f826ff0a10020790950854d69be61ade65bc03c1ccf8fef7e76960593902a0b39f5fab29f2b2cf246d50b3e4","ssdeep":"","tlshash":"be41a48d8fea54e580d95dc8a3d45e61022e8fa274228ddf735c19ee03726ec52e1b1e","first_seen":"2026-04-28T19:21:23.11724Z","last_seen":"2026-04-28T19:21:23.11724Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B0bjfhc2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-B0bjfhc2.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-11a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5ou1QEYdm5vmsOnEC7RqVwX0QRpuasYj%2Fsj%2FnZdiK7663CCzk%2Bp77y4Zpd5hzKqXROWZyKHY%2FXrp4FjoZU8V21xZSTB%2FSFD0%2BTgMtytBCtzqa4QHATJSTCOK%2Be6CQ0G\"}]}\r\ncf-ray: 9f386c6e3b0435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f3a674058a2b8ed2e16957f28e58ae01","sha1":"f7c253108ff6a1e3103b0d62c9df8441b9191b47","sha256":"bc1cac2feed9b67271112178f2c52c1b3c66dd384e51a24fda3b8fca4238c43a","sha512":"02ae007ac0672a45d16ffebb3c7384b9189ee6731fed056bbd0817863877ebf664d0c365a2028c9140dee976bf1bc8e88c47a82c3a500949d98a075c225966bc","ssdeep":"","tlshash":"c6d02baa2c15b0fb4345555005ec4536425f5180375756b0c1b6234601932ded0599de","first_seen":"2025-09-07T17:41:22.070776Z","last_seen":"2026-08-10T18:16:57.046519Z","times_seen":31,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-y0Ok8amp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-y0Ok8amp.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-15bf2\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GD8xBAkxhapzLZWQei0NRA3Kk029P3qpDbLoMhv%2BTrCIBEsacgWcEsr3L6ULFVnUatq4PMOCFF8VZptrwih%2BC2fg64tf4yrIdRzRl0kz%2Bwejn6%2B67NxPCThxSleGXu3Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb5e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89074,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33772)","md5":"7c0d86e8a7e8543bf3f4434930a9fb80","sha1":"e1785ccf344653f4f5b9221fb5f53a5282d4c61b","sha256":"8e4282c154502dc52f4177ca7b2eaf65897d300ca048fcce4953fdb811fbfcf8","sha512":"e55e98866b284027cb98e29958b0cfc7cec2951536a85bd0a79466d7fd85efaa4f4b24e7d541e2106c09b61ddec62fcdf318b3a61c722474a658f5df41f17a68","ssdeep":"1536:BdIxKHehCLR8+sIooFwLs8UCGrkcd23Y5u+CnC9ZQvNJDkLx0:EVCLR8+sGHy1NSRK","tlshash":"30931aa8779478b142ffc9d2d0fb4a0561766b40b414c4e5e23e9c9a27a2e1c6163f3f","first_seen":"2026-04-28T19:21:23.158029Z","last_seen":"2026-04-28T19:21:23.158029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useCustomService-B-tCr7bt.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/useCustomService-B-tCr7bt.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WU%2FT%2B%2FWpzc1GOL1FqTsaJKMukXMirJ9N3FdQ%2BurHCb%2BA9BsMLaDcP4e4Vn7b6uFhr%2F9RNEHIUnfi44jyi1yDN5SzEEKbZTwzAsXLeMcWxm%2Ff4%2BnzPvJok823MkY5jWoh\"}]}\r\ncf-ray: 9f386c6ffb6735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d02fc59d3eeded50bc62959ab92727e8","sha1":"c44130c715148d706533b18abaa971c76da7c8e0","sha256":"5015f972718c426e470ce532b49fe6380e5267d1bf831c65aeb6a7c71b237edc","sha512":"d469796c23979e1e298005f5b0495481172a7ec6c3baeec5f6bad0a69013b5340b7857d46c3da76dd0c82e6bc32477518336ffb6091db88e7df78b61af145071","ssdeep":"","tlshash":"16b01252ac4453f0936587c30f126f783220010c210453312985c6b131d3493a205c74","first_seen":"2026-03-19T19:54:38.476553Z","last_seen":"2026-07-08T14:59:29.809133Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/css/widget-91db6852.css","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:20.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/css/widget-91db6852.css HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 14999\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=14400\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\nage: 4435568\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HA0IX4uqDJ6Wdk9qJjXmnd3uMe8vSt%2Bs%2BfOiNusxHRkHzZ0Rs7g%2Fc9b8mLQmMaFrHgwkXqnkS%2BxNXto11zCZk4YWfZFYHmZkbMxevFIXfudeFkC4xYOF%2BV9lHODKyrce\"}]}\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:21 GMT\r\nx-cache: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9f386c789960b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61720)","md5":"0564c042c49071e8123ecb8358b3e7a6","sha1":"4a43d5184ed005dec2ec05a9f8d8f0f3895c8bc5","sha256":"58c91700906055e2a42ece044c396f7fd7596760d42d27005f8de4ac2cc891fa","sha512":"f0e03675e1172389a9ad55673a60a980d489a9377a53f430f366277a101d3c82ebac645a5212b8a5c362de771e70c17c745e1d18191cb63ac74739cf5428d9c6","ssdeep":"3072:dDV6hoeYUcwBmVBYn6OlYX0EXYRiXb+F8o7NQ/fzqfXYcsXAuc2XMV:dDV6hoeYUcwBmVBYn6OlYX0EXYRiXb+b","tlshash":"5eb3649de760223f3c2391beb1a8cd8da51972c0fd6a1bfaac4273018ed57a75d13164","first_seen":"2024-09-19T22:22:52.291957Z","last_seen":"2026-07-12T15:00:50.658561Z","times_seen":83,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/1-64b4dcd92aa76c6152ee.chunk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/js/1-64b4dcd92aa76c6152ee.chunk.js HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1599\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=14400\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\nage: 4004542\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOrzgDhA6a%2BkjJv64KeG1BOJYuAUMhgglXix6FKWavSlTf8eISZTN7aty0zCLaFaX%2Fkb0uRh%2Fctqi3zHlbShuz415tiqI3a%2F7F1w0ZXGq8%2BNz1Zl3Xq8Oi3JbHd42Xac\"}]}\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:23 GMT\r\nx-cache: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c850d38b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4444,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4387)","md5":"1a67b3bbf4a5daf09c1f2d881667c525","sha1":"846f81876da9f06616111fc0d2da4383955f2aa0","sha256":"0094bd857d181aaa1f34b71095cfdca7e541f207623d497c0879d7842c2b8857","sha512":"f95fe474f27f085ff16df57d7fc574aebd3ac75586aa7bd65ad6d1ab822dc77738f7b9080d3f5149b34fe723b1e0488d7dc5d65148dc49a708cf802e2825b2f3","ssdeep":"96:5MsaR/jCkclWXocgDj4Hk7wV21mH3DuFMwRl4ucV:EPYcSEawE1KTu+uk","tlshash":"b0919668f1d37c1e5a4a24b0242f224d71726e89a5199d79eaf0c4e1b8609ddf03bf3d","first_seen":"2025-07-31T16:26:05.474951Z","last_seen":"2026-07-12T15:00:50.733375Z","times_seen":75,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0ffa7a6a209de4ae491a90b07f1d5ff4d.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ffa7a6a209de4ae491a90b07f1d5ff4d.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1289\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877AB6732373951D4F2\r\nAccept-Ranges: bytes\r\nETag: \"7290ED52436B197F22DEC959794A77CF\"\r\nLast-Modified: Mon, 28 Jul 2025 10:37:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053731668100281913\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: cpDtUkNrGX8i3slZeUp3zw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7290ed52436b197f22dec959794a77cf","sha1":"dfbcc5de182c12a8dc3aecce574718835228d8e3","sha256":"eedb605b601d24286034b55b362387e5627b346a0ef69e2afd92177968e1e755","sha512":"d51b24f577360a4c430ffb8e6559e53e0664c35601daca1a6aef27f48521fee3f172b95e23a9fde17f53659f65c4b80a3f8dd9d25f2df9379e8e7c0a171d4a7d","ssdeep":"","tlshash":"bd21c5782b9a422ec24dc9762e7a03001d2d8131a04c5cf8db69096b6e80d7e426cfa1","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T18:16:57.027301Z","times_seen":251,"resource_available":false,"data":null}},"time_used":2941,"timings":{"blocked":2668,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /embed-widget/symbol-overview/?locale=en HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=120\r\nexpires: Tue, 28 Apr 2026 19:21:15 GMT\r\ncontent-security-policy: object-src 'none'; default-src 'self' https: data: blob: wss: 'unsafe-inline'; script-src https://static.tradingview.com/static/ blob: https://*.ampproject.org/ https://*.paypal.com/ https://platform.twitter.com https://platform.x.com https://songbird.cardinalcommerce.com/edge/v1/ https://checkout.razorpay.com/ https://*.checkout.com/ https://*.cardinaltrusted.com https://pay.google.com/gp/p/js/ https://applepay.cdn-apple.com/jsapi/ https://www.tradingview-widget.com/static/bundles/embed/ 'nonce-3d7mIS/NoZwwKvlHm/Bukg=='; base-uri 'none'\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nreferrer-policy: origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/28/2026 19:20:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 35070f6d03c961eb7a98c33286a44c96\r\ncdn-cache: EXPIRED\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PayPal","description":"PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.","website":"https://paypal.com","common_platform_enumeration":"cpe:2.3:a:paypal:paypal:*:*:*:*:*:*:*:*","icon":"PayPal.svg","categories":["Payment processors"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43490,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16561)","md5":"e78dc329efe3c948db95fa41b75bc29e","sha1":"3cf886171e0a2ce44191abdb1cfb11138ea8bcb2","sha256":"eff0431f8e97a6d8ea2f00615c80d6e6d2a46ebdd38a013232c745ffd5e70966","sha512":"df37c051aa0b43b49f0937436a35d9e9b64feaeac3fd128306e657ab59eeee61c23e544cef3f3a35dfa8d59afd05f3ae14ad20ec413c9faaf84fa593352a999f","ssdeep":"768:G5UWAf/o+14bHU/45zgI+0CCZ5s94ACZLL0YSP3uAaL4t:IUWf+mlgI+0iiAC1m3f","tlshash":"6613fa53e01d9309e66a85163c33b203fe2a055859524498b6addcec119bfc3f297bfe","first_seen":"2026-04-28T19:21:23.164105Z","last_seen":"2026-04-28T19:21:23.164105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":193,"dns":52,"connect":1,"send":0,"wait":160,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.7277.46b4379d59a93bfd7278.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/en.7277.46b4379d59a93bfd7278.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d358e3-10fb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 06 Apr 2026 06:55:31 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/06/2026 10:32:47\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8faffeb12c5b2be17e93f226ce8dca29\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3058)","md5":"71e8113d69ebd28608e036cc48d36ee6","sha1":"3d7b55d9379e984cec7f210624566ae39375fc68","sha256":"c883784f9697c52953713d3f3ba35118e69cd1a5fff4000e46084d22a3973a71","sha512":"8b6c786cb0ddd0e4f62e7e7dc0d4c2484514295d200bcdb4382a74f1d0e04e2589b1a961a499c6a93277e80512df2661b47f2ed2602589e1ccad1098d64eac59","ssdeep":"96:Ycdd3tyTURzoP2ZDC9G3H4i0rR1i34xkDEzj/:Y03IYRseZ1H4i0rq34x2Ezj","tlshash":"4291db4bd1c001e96fb5e7183b5accd13ad0b0a04075e4ca57496f65c2d7ef4d8faa88","first_seen":"2026-03-11T12:55:07.279369Z","last_seen":"2026-05-05T07:37:29.078502Z","times_seen":983,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/48607.f298843ff396b4b7b4c7.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/48607.f298843ff396b4b7b4c7.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-c55e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:07\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d3ef81258efa2ae8281323b9ece332f4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50526), with no line terminators","md5":"81484f39badcbab944a690390f1a56a0","sha1":"f2a6d53dba2e9ea218491cc8b4ece112736342c7","sha256":"8dbaf57d7dc5992d04239573317e81892d87f2df759244491518755dedd9e65c","sha512":"999d8d68cfb53d59189a17acb1e62acbc2412527845ff7ae7b2ea174b9c2277a3c4aa6f84177f6b4fb4bcfea5a37280bd1e6da1fe91e7bffe3c654bcd583ed93","ssdeep":"768:Nqs11or81KG/BGeM8U4cg29ggeQavl1U4Vgywlbsmf5nPC4V3S6/VMGnXFZHvi4f:NZJgFXdvxCLcxz696SxpoH","tlshash":"a63365eaa7c0e67a7f6763694319f1e9b398adbdf8223fc7f554414400c39e31046a26","first_seen":"2026-04-06T11:00:06.751694Z","last_seen":"2026-05-15T10:22:28.58302Z","times_seen":873,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/icons.html","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /icons.html HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Apr 2026 03:40:14 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALspx8FDERjdSdSKzzId0l779wFWMH0M%2BWOVQ1ptHsxC%2F9joD4QWgYBwVrGyskrx6lGJhWxZEH6%2F2WTZsAIsDTIWn0CHTp24DxQct%2FPx7O8LGHzxvgVZyToAjwnPDyEH\"}]}\r\ncf-ray: 9f386c6dfadf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155738,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3051), with CRLF line terminators","md5":"3956c58612b7c638383949ccb18114fb","sha1":"164b3dc6f98c34623c404a482ee9cdecc05e159a","sha256":"e5b714678dd30fd3bf107e441e1093ff7a3bab668a9bd9fe04626d355b7bd507","sha512":"378becb2ffe7dd16d6ac2eae019306b3ac7f6ec1cc21214bd468d703ead8eeb812af357881f0ac46f89ca346a8f9aeaa5dc05d826ac2c89ab1619e0c23e1db4e","ssdeep":"1536:byItCRc4Ah+DUCSbWMj4RFSwmLF5O+7vNERL1znS/Fq6vjacDHZ:RhvjV","tlshash":"a9e3eaa4d3d8e2b1e526c3a8fb269024fa1b20f777818190b16d5e776f3148e8d0f9d5","first_seen":"2026-04-28T19:21:23.16629Z","last_seen":"2026-06-29T15:08:39.113614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/compact-item-C3wgf_qA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/compact-item-C3wgf_qA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-10ac\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dAkxTb654wMnA%2FWQxHS3soZEXx6lPHKNRfWSbfbXRHQRaLylpsgfTKBcsboLRbjnTOxQ81F3G1Ovl037qXk1IL9ddjWTo67UyUG%2BKaP92YjgFXzHkQiSl9v881nKKOKr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e1afa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4267)","md5":"40071286fc81ffcb93a624216b25bc02","sha1":"a13bac4269a5f90f3322be41ea46f9cb37d98b97","sha256":"8132bc71af750e87d0842517a7faa9ef2f03d540118d28bb0c7b40f020d53541","sha512":"f2040dc08b3503e98711a2e45a8fade32d597613b0b97a42ce9a4f5b0c7481bb23bf8618a8e037cda3f9444e2bf0843ae0a6eb4bec3cca7653d725d73bd1df9b","ssdeep":"96:v7nc/E8wPUuhDVHB1jypNmoMms4PNm3zImM3tJK980xjnRJVlNK:znYe5Vn2RMms4Fm3cj3LAN9Z7K","tlshash":"1591c7cd7188fdb4651749e4496b19229f255102b87e42e0c8f2d7752ef036d5d3322f","first_seen":"2026-04-28T19:21:23.097798Z","last_seen":"2026-04-28T19:21:23.097798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/home_top_bg-D6Ufjogb.gif","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/home_top_bg-D6Ufjogb.gif HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-773d57\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrGdUoixllNnVFpY7cwsENGGLNmUdmK2yl0PTK6x0QRuu3olFR9Vdp08KXnJFELzpjkd8fwuCDkGjIwTkof%2BhX0G5XuN6CE%2BQg1%2BS3GQWIkxJ%2BpA1%2FubVYBPsED87wGm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c73abd235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7814487,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 600","md5":"5a85688b5d119731accc7fada3533119","sha1":"f074f773729add3f12794e0d3b2a02e9dc2ad9d2","sha256":"be8a34ce1a2340ee4aae86d6aa379eead5312edff032c5a2d3920dbe7fef7b51","sha512":"c237f68c71ac13053148310173a458b1f1bd627619f0b6123b4110c49630d56605a11ba11175a9cf38119924ddc1a660945b2ca733f01759f253337aa507db39","ssdeep":"24576:m0Ef+LLiAWYoMW2Hh2HrctgGPkqfXEkbE+zMaw81/tqnX:J2qWTvMtOGUKMDvX","tlshash":"5425339314cc46c25ea1781c25aba780894ee97918513c39bd1a7f07dffa7e190f8cda","first_seen":"2026-04-28T19:21:23.167315Z","last_seen":"2026-07-21T11:23:30.493763Z","times_seen":5,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/68539.7c91b0ec4eef2fc2bcba.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/68539.7c91b0ec4eef2fc2bcba.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb86-7ce4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:14 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a53d76aa3e06643e9edd682946859152\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31972,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13339)","md5":"1d86f7627113ed4696fe785ec14df2bf","sha1":"9149ede7a0beaa4effe57c384a7d8e7a9a6e7726","sha256":"e4e5ca00c9c8b88f9409e4250363607152b1e66ec98fd41bfe3344fb65c234ad","sha512":"7c14ee62fefa69a8a9a27b1487379e761f5e8010f6789152043b86d5b39b5d6ee4aca898086ae81234d1a436699268b5712c68c616df24cd80528e8ccf1709a4","ssdeep":"768:ocLjeXq+fR6P0OITZAFfTPrY1JuzUh3jx0LPiqqEGek/PPh3swuPMnuU2Kxb65XP:ZnIvJuzUhzyPqEGek/nWBMntb65XwzuL","tlshash":"b7e2faa2a9239c331fe51b9ed87b350291d84679e5823c68bef858dd0d8dac070f355e","first_seen":"2026-04-23T10:22:42.465814Z","last_seen":"2026-05-05T08:09:20.509956Z","times_seen":437,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.090101ccbffbd41cbb966c69b134671c8.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.090101ccbffbd41cbb966c69b134671c8.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14387\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108777CD23C3737D1C570\r\nAccept-Ranges: bytes\r\nETag: \"D28C209D8C737843E40CAA035D5ED881\"\r\nLast-Modified: Mon, 28 Jul 2025 10:43:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9069869361435194369\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0owgnYxzeEPkDKoDXV7YgQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":14387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"d28c209d8c737843e40caa035d5ed881","sha1":"3cbb497e0ab2689e1471187f43bd25451456c63b","sha256":"f2e9b1b10cb1644dd597d3572042bd358c73f0a24677510c7688e1d803460ba6","sha512":"0a7aeb42efa1578588a204a28575f1f48650cc9ba2cebb4f7f9440dd7ee527efd7242731e38bd88ed1947cacb31a4b2db6ee17defb8e163491f98cf9cb5a98cd","ssdeep":"384:VcuxZ17bGVKC9ZFYXq1SVm3V3sOwcxvP1XC3EqSsY9GTR0:uuxZ1bToC6UVm3VPz1Xl9f","tlshash":"2c52cf6cc6a22f93d36d9d0943fd7895734e0a06b2f16493898d9460d98603d3e9fae3","first_seen":"2025-09-07T17:41:22.057365Z","last_seen":"2026-08-10T18:16:57.029354Z","times_seen":39,"resource_available":false,"data":null}},"time_used":3470,"timings":{"blocked":2911,"dns":0,"connect":0,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.01967d6655151488bb51b43835bd51937.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01967d6655151488bb51b43835bd51937.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4485\r\nConnection: keep-alive\r\nx-oss-request-id: 69F1087568F57930339D00A7\r\nAccept-Ranges: bytes\r\nETag: \"08D881201347DBB6FE2AD1C621C1ED43\"\r\nLast-Modified: Mon, 17 Feb 2025 14:19:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15261408750886147437\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CNiBIBNH27b+KtHGIcHtQw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"08d881201347dbb6fe2ad1c621c1ed43","sha1":"e0fc9b0592aea12fd71c14639add01428cd3b406","sha256":"0d8d06ffadfa623356b053506dfbea7a39db40c200352d394bb15a76ecbf28c8","sha512":"01c4f959b62effba4ba43c0af525ab97dfbcfcab77bb0ce0e0f8837f40928376449f9fda9a7b7da9dfc10e742b666a214f07f01ce3ef7e566fde64cf206e7bd9","ssdeep":"96:cuaVNY5KVRNttvW8faJxVwuaSYjth7VpiiotaFXxbcB:k76KVW8qpXiviiokFtcB","tlshash":"33914c775106abe15e1d10686b360177fddb1b4eb21fe74982729e3c33120e4f8ba095","first_seen":"2025-12-12T21:48:41.847518Z","last_seen":"2026-07-21T11:23:30.504903Z","times_seen":5,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/47572.0d27a73b231b4360a8d2.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/47572.0d27a73b231b4360a8d2.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-3290\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/22/2026 10:25:25\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4b31694008a62909e10c226ac9c70683\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12944), with no line terminators","md5":"544c9caaf8f1650174411d6828635f5b","sha1":"1b8d9c4c7b6649fb9ea197b631237c003965bce2","sha256":"0b6d12db726905d28e9e842a9d977054d2c0fb9b4d499034f8239676a9308352","sha512":"f84fbfd863273a1f78982875180eaf001301a019f180d1f1cc344a774252c9049b9a74f2dd1444886268fc0c5652ee8116d80c65770b40756260345a487994b5","ssdeep":"96:BcLOAv6PyYa01SGtheUryLSJ4Mm2lIzeVZCvk6/n0gdiEQNhCrzC4FwdmN6pfNGO:IvQwFE+SnpJUn0gd4Nh8zEfAM","tlshash":"7d42c454fb60e431b4720a66b597a908e304d46df1518cfaddb0f6ac8dc79ff122872a","first_seen":"2026-03-24T10:38:42.764846Z","last_seen":"2026-05-31T07:10:35.042809Z","times_seen":983,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.07c0137d6cfed4569a9c83e7942569934.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07c0137d6cfed4569a9c83e7942569934.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5645\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876AB673237395FD3F2\r\nAccept-Ranges: bytes\r\nETag: \"9BB5EFEF84A74846D869B16DB18FD18F\"\r\nLast-Modified: Mon, 28 Jul 2025 10:34:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9891992419806992325\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: m7Xv74SnSEbYabFtsY/Rjw==\r\nx-oss-server-time: 18\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"9bb5efef84a74846d869b16db18fd18f","sha1":"fea8902ad907e6b90c49c0f0c991f85d8e1031e0","sha256":"fc30970806476cf211905fee096383f22247eb2b665f67bcc9c69b3a241d4f19","sha512":"5732aeddf6eefca5eb7f047a1fd592caa476709215b9e6159a1b2bc5b4ad2091937037db9a434370bf7e4cf8cb4dc584ea4a08b2f4725be34aedd5c65c3b5a2c","ssdeep":"96:XrMAKgrowT0E5Dz2vCHe6fMUtFmmeHuqOznsh1L1U4z4p5:aqbzaC+6fMUtFpDsh1Lui4n","tlshash":"0fc16dd7c2abf592883374db72cc8099c871791b731b13097901fa92c9141ea55af736","first_seen":"2025-07-06T22:01:43.189414Z","last_seen":"2026-08-10T18:16:56.956126Z","times_seen":102,"resource_available":false,"data":null}},"time_used":2701,"timings":{"blocked":2411,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/47572.0d27a73b231b4360a8d2.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/47572.0d27a73b231b4360a8d2.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-3290\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/22/2026 10:25:25\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 53aa511a33bde6ba8822bdfb4b21f622\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12944), with no line terminators","md5":"544c9caaf8f1650174411d6828635f5b","sha1":"1b8d9c4c7b6649fb9ea197b631237c003965bce2","sha256":"0b6d12db726905d28e9e842a9d977054d2c0fb9b4d499034f8239676a9308352","sha512":"f84fbfd863273a1f78982875180eaf001301a019f180d1f1cc344a774252c9049b9a74f2dd1444886268fc0c5652ee8116d80c65770b40756260345a487994b5","ssdeep":"96:BcLOAv6PyYa01SGtheUryLSJ4Mm2lIzeVZCvk6/n0gdiEQNhCrzC4FwdmN6pfNGO:IvQwFE+SnpJUn0gd4Nh8zEfAM","tlshash":"7d42c454fb60e431b4720a66b597a908e304d46df1518cfaddb0f6ac8dc79ff122872a","first_seen":"2026-03-24T10:38:42.764846Z","last_seen":"2026-05-31T07:10:35.042809Z","times_seen":983,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/api/v1/widget/conversations?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /api/v1/widget/conversations?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiIyNmNhZjg4NC03NTAyLTRjNDAtYjEwYi0yMTA4YTAxNjE1NmYiLCJpbmJveF9pZCI6OTQ0OH0.7e8Xl9x7YkFF18ccfcHrLy-YkY4kBFSx-4W3f1Kmsuk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nset-cookie: AWSALB=PcF1Ev3LLmo1YwisO0PinOHoCxhZ7RHSEiEYmZReXWqBeFQQc2Grb0s5dY0TAEuEoV4Ko8rRLP4obpkwrQ4Ow2YR+/CO/FNI3Iu43/SI6nXsPkqGYylntTaA3sJ7; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=PcF1Ev3LLmo1YwisO0PinOHoCxhZ7RHSEiEYmZReXWqBeFQQc2Grb0s5dY0TAEuEoV4Ko8rRLP4obpkwrQ4Ow2YR+/CO/FNI3Iu43/SI6nXsPkqGYylntTaA3sJ7; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"44136fa355b3678a1146ad16f7e8649e\"\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: 8883c63f-246b-44fe-add0-c5eea3e3f4f4\r\nx-runtime: 0.032730\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kA6twBw4RJiEMBYdjQZfS9%2BurcSGLqHXXpmHt7sjOf6WR0h7t4EXMWnjG%2FW2kkSC0eASCRHtb%2BqAqyEIitI3V%2ByCffJJy7G4l1%2FgRhq9kzE3d16lo5pXxEsWLzzF%2FTja\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c851d81b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-11T05:54:18.621756Z","times_seen":758836,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.voxsig.com/audio/widget/ding.mp3","fqdn":"app.voxsig.com","domain":"voxsig.com","tld":"com"},"ip":{"addr":"104.26.1.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voxsig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 19:15:42 GMT","end":"Mon, 22 Jun 2026 20:15:41 GMT"},"fingerprint":{"sha1":"04:0D:D6:21:68:99:F2:CE:81:B8:94:BC:07:67:7F:1C:CA:22:EF:3C","sha256":"63:DA:75:04:44:92:FA:71:FD:BB:16:92:4D:E9:58:E3:89:5C:4C:FD:E5:A1:F9:97:44:E7:EA:66:A7:83:3B:E3"}}},"request":{"raw":"GET /audio/widget/ding.mp3 HTTP/1.1\r\nHost: app.voxsig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/\r\nOrigin: https://qevorinex.onlinesupportcustomerservice.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 2667\r\nset-cookie: AWSALB=uJiJmifZQ/gSwyuCvMHLjQ9SCp7L0ROL+2GSFlDn6yfvMqi6ey6c14FUed7VQaoG/t4UCPEvXZPIWXYxcJWdDclp9YFNTBsWgbexwxQJhrx/Y29rAKxRU277ZOKg; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=uJiJmifZQ/gSwyuCvMHLjQ9SCp7L0ROL+2GSFlDn6yfvMqi6ey6c14FUed7VQaoG/t4UCPEvXZPIWXYxcJWdDclp9YFNTBsWgbexwxQJhrx/Y29rAKxRU277ZOKg; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nlast-modified: Tue, 19 Sep 2023 03:59:39 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtPJJbqc4E2t9r4i5e4yp%2BwkLu9r3hwDQbZtyVGk2v8qiab9bevSDPn8UMtEH5%2BUeQOeHHutMmqo4Kt0hFcZU9yKx80mujOPV6IDjugeIYJjxr3DxzeKupYjyCRP7h3T\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f386c857a2b0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"bcd687e9c2469aa3cd8b882f373964c3","sha1":"df5d08e7bb31b2ad2e0a5ca3ca56e42661f9d554","sha256":"42b9d70c9c51cfdff6ed60e874771049df657c93a0361220174582f07dceba53","sha512":"1a9c433e8f39e18f036449ed7c8decafae3f1b4f772dfc2d080842369ac601ed46bf532cb54764a696732ec6edfa636618009a5600b61749888d349f0e6b445a","ssdeep":"","tlshash":"5b51d7576a1a034df8604a339a77aa8748289f0e017dade2936cb7d56d783025e85217","first_seen":"2024-07-01T02:40:50Z","last_seen":"2026-08-10T15:32:58.610985Z","times_seen":113,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":51,"dns":31,"connect":1,"send":0,"wait":801,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"app.voxsig.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/api/v1/widget/messages?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /api/v1/widget/messages?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiIyNmNhZjg4NC03NTAyLTRjNDAtYjEwYi0yMTA4YTAxNjE1NmYiLCJpbmJveF9pZCI6OTQ0OH0.7e8Xl9x7YkFF18ccfcHrLy-YkY4kBFSx-4W3f1Kmsuk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 14\r\nserver: cloudflare\r\nset-cookie: AWSALB=2yMQWN37WA57zzkYx9UFwMiVaUcnjtbuqRqaZN5e4ZnQbZUIJJqfemF32IsvR2XeHqO3dQjNw2TKHFxYk1dVRkpWqRSY7Pdzi0H+0rMXkgy4lY+a8bE7A6cV/sV7; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=2yMQWN37WA57zzkYx9UFwMiVaUcnjtbuqRqaZN5e4ZnQbZUIJJqfemF32IsvR2XeHqO3dQjNw2TKHFxYk1dVRkpWqRSY7Pdzi0H+0rMXkgy4lY+a8bE7A6cV/sV7; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"258153158e38e3291e3d48162225fcdb\"\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: 0359d572-9d51-4d3e-bd8b-6be5a028fb20\r\nx-runtime: 0.031161\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2F1q6wcm3p7nsZ4yRsro292wg5g4ZWyWYEkz0j0dHT5zaWWJc3fjyHID3LA3hMR74glIBIZmu0bI3L0Xp%2F%2Fp6XFso%2FCHMAC6K9LbowwpGmi%2Frl62hBNLyAh3hYYZlAX6\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c855e4eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af1fd6795b95d5be36b37d5281fdcdc3","sha1":"1bb3365ca69f2475ce5d789503180db7256dcbb6","sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","sha512":"284ea516df7e3636fb847431b6d91444a5987913985a01228395a2858954d7e654d86f099c20345e76e3a830bd3004eb19dcd4cb75a1e8f442168cb0e16103fd","ssdeep":"","tlshash":"2a6000000300c3000c0000c0c0c0cc0003c33003fcf0003c03000000c300cc03c00f00","first_seen":"2023-05-21T09:16:00Z","last_seen":"2026-08-10T22:31:14.173274Z","times_seen":2645,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":653,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/media/shared/assets/fonts/Inter-Medium-aec38a6b266a908bc320e30f261771d1.woff2","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:23.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/media/shared/assets/fonts/Inter-Medium-aec38a6b266a908bc320e30f261771d1.woff2 HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/packs/css/widget-91db6852.css\r\nCookie: AWSALBCORS=LvOR+Imhiz9pHWoS2wjri8OVdVGYvNSAQ9lPo3FAlc79qznHtuxcSJ4/+wJpkxfFvNlHaxZQRPQ2HHsd5g75U19BGEE20TvjIribNjhRBWzG3korQE5XLASIeYXJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 35264\r\nserver: cloudflare\r\nset-cookie: AWSALB=MWuoFC9v1hqxadFTtE9yI2FS/ULN0Jl1fWjq4LtMNxqaM19nK8owuWU2kN/gib18mspzWlZIyrXHTBehPF6sNDjEZPvzvepWVQy3qMo0FYlE6QP6+0oKAWvl+NPy; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/\nAWSALBCORS=MWuoFC9v1hqxadFTtE9yI2FS/ULN0Jl1fWjq4LtMNxqaM19nK8owuWU2kN/gib18mspzWlZIyrXHTBehPF6sNDjEZPvzvepWVQy3qMo0FYlE6QP6+0oKAWvl+NPy; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/; SameSite=None; Secure\r\nlast-modified: Tue, 21 Oct 2025 06:57:21 GMT\r\ncache-control: max-age=60\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVCJ2Plga7pPnlPE75%2FXY6jNGz3CeqUjTGaDvqBROiR53cRrs9OvXrJRfJPUEQsgKHHalvp51WRnzRT5kGZuaPOCCUf%2F9K2ZOkmIEl3WV3lUk98cPlEegEMeK7tdv24S\"}]}\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:24 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c8b9bfab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35264,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35264, version 1.0","md5":"30434fc36126a3b5f64db621a685a014","sha1":"a6af0b4c89d3725db9fc6d86ca0dc28118f9daa9","sha256":"9177550934c7d4516a148a4d0bc2cd709da01789a4d6d2862c6d17b083a7d8cb","sha512":"93142de8d2bc656e2c531cb1905736606b055ad9cb3f42a54893dcc826e1db8f391f29ca1b53100d6d54848deeffe5b93a6456f4e755d73111ccc5247fc234d4","ssdeep":"768:zcNpmzzhBL+UMp4wrkB1LxGgUFfmXgsirBPOJcu5H3IQAXabUOCx7h:sEZBL+N4Bh2FuSP8c2FAXa+x7h","tlshash":"2af2e08c90161cec467c56e75fd28bac5437c64bee4af07c1693a763b9232282774e36","first_seen":"2023-04-07T18:13:55Z","last_seen":"2026-08-10T15:32:58.836829Z","times_seen":734,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":823,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-y0Ok8amp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-y0Ok8amp.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-15bf2\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5HaoYaYBcEkRxLKhJsXoAEZg55PoxgFotwW%2FTTtDBWtdH7tnDQLYbu3Cg%2BNAsnJ8BhKXJzE7n98caqi3oKgo%2Fx0apJDsoJ7ZkRwcf2PLQSj8Neu4Mby9%2F1Rm%2B1zj0zL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e2afe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89074,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33772)","md5":"7c0d86e8a7e8543bf3f4434930a9fb80","sha1":"e1785ccf344653f4f5b9221fb5f53a5282d4c61b","sha256":"8e4282c154502dc52f4177ca7b2eaf65897d300ca048fcce4953fdb811fbfcf8","sha512":"e55e98866b284027cb98e29958b0cfc7cec2951536a85bd0a79466d7fd85efaa4f4b24e7d541e2106c09b61ddec62fcdf318b3a61c722474a658f5df41f17a68","ssdeep":"1536:BdIxKHehCLR8+sIooFwLs8UCGrkcd23Y5u+CnC9ZQvNJDkLx0:EVCLR8+sGHy1NSRK","tlshash":"30931aa8779478b142ffc9d2d0fb4a0561766b40b414c4e5e23e9c9a27a2e1c6163f3f","first_seen":"2026-04-28T19:21:23.158029Z","last_seen":"2026-04-28T19:21:23.158029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/createContext-DTDk1Our.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/createContext-DTDk1Our.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-12e8\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFwxTrfbE0OP35NqTW%2FGszPxsGL7N%2BOjtGbD9TmUaT4B4IP%2B7%2F7YBpIJlaNFxKmptDHKuMfvr3dnKCS4bH1eGU2y%2BjYnU14h2Dg8Nl4zh4ErQyTEcl0Kkr%2FrwaBrh3lu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fcb5735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4840,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4839)","md5":"1d3abd1ac11d033701ccf158ff36d372","sha1":"bc0d2b984e1f7b28e2d07d185089b33c10ad0c2a","sha256":"59c92399d44860b0238cb8c9eb87244647979df92a68ff374312d117a2f50367","sha512":"ace51beddcaf746fe8141bb1967e70ce80c93731e775bbecfa0c732ec007d2fb1d74cbde73f955d41a2771ff292e20cfde8a33c1077148cc8a50d3193f9672b5","ssdeep":"96:OQMhADesPaYFwQR7cGT8Kj/fzI3OBelfVP2bIsboYpHfv:O3hADLFTxJj/UOBLMwoQfv","tlshash":"32a141c975d6f47283765ce4806f8d0af17d18b5908ca08091dde6e2f8a982ac622b1f","first_seen":"2026-04-28T19:21:23.1747Z","last_seen":"2026-04-28T19:21:23.1747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/78124.975fb41d42ae2d51c08b.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/78124.975fb41d42ae2d51c08b.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:34:19\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9a60d969a0613550f4527fc29f55e5cc\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d41e2d9340f0acb54930ab3ac629035b","sha1":"543a7964ec708fd72f33fd1e5ade7f185832cd98","sha256":"fc71e7aea9892d509794361261cfa1aa19e87f31e89548399eeb05a041de477d","sha512":"a3dd70c85f122c9cc97275462880cfb30f0f8959c1346593c92b9cfa1b73fee7fb83ef73dbfd36f3f317d22008729044e9a856748f65e8444f56aa0d241bb1a3","ssdeep":"","tlshash":"37c0120790472b6054a3cafa0fa034516524eabe881147e855919bd1d97ee1c651342a","first_seen":"2026-03-24T10:38:42.744841Z","last_seen":"2026-08-10T18:57:37.822113Z","times_seen":2203,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/financial-zPnx9bJV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/financial-zPnx9bJV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-115\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vax4p62C%2FLrnXuqZF32u8B3hP0jlF3qWSDKjgXfBnqOvRfiueXsFf3sWBHpRKHF8VelvHZoG5evpDfrPN5gW0nUsyX2pkXp%2BAmp86nMK9t17Dv5LH0fPfqN%2FbI7ZGMfA\"}]}\r\ncf-ray: 9f386c6e0af535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"417c3560b9a06e8f35b782d8953fe502","sha1":"cc5eda3ee66b45197dae37c2f78e336e2f3cbade","sha256":"8d20ced9a95e9292c882b55287bbfd11dd50e5530ff195a67971b7729d3301e0","sha512":"b2085728eae444fb7c30c9cb41b272857a2c4439bee0103235a87ffd4b6da0b12556bb35422f9845ef5b2672417fa3cf9130b9ffaf527b9a7b86763698be4529","ssdeep":"","tlshash":"2dd0121a4b9413eed3ba7d4651d2cc26402b4c79bea355f0457a46370295251b29db04","first_seen":"2026-04-28T19:21:23.137007Z","last_seen":"2026-04-28T19:21:23.137007Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-bg-BXKR--BW.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-bg-BXKR--BW.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-Bt816wsy.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-cc2e4\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmowTacm%2BFFfZ9dp%2B6ovcZvAeM%2FxUtXQ%2FTR8HwhH3YjPD6UUtf4d%2FQDSYav4A%2BAZZ9HHMRV6UGlimgrZJHwNWEX6TaQtfbxxB29%2Fk9%2BfT4dfNH3TMjYHoKtSfMwHlZb%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c753c1335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2520 x 1368, 8-bit colormap, non-interlaced","md5":"a3eed3e50afc53cb2cc316a2cc4bed6c","sha1":"b2f90be084727db261c88e151ed173570d92a8a5","sha256":"2a38d3feafaf404e40f3ae81d2bc4ba3a3b1ecb0702c59fbffbfeb95c097bcde","sha512":"cb289eda846646a1d00e56d94d63b40381e0a4e63102e37f5cedf4d18d35a98f334abe4e900599239d446def7ca939d188882d0d002ba645fc12951f574f043d","ssdeep":"12288:K6JZl+3zsQCd5sQ5Vhb+IIB2E3yTTa5ldfOPrVvAKz1Zees6XXHCE7p3Oas7ecbx:Hbxbh53EVVLfVK5BDFOasYnO","tlshash":"330533f5c8bf1b979c4bb13196247a0f0dc6172d1f0a00e88508d4b08e7f55a99af9eb","first_seen":"2024-12-31T04:27:31.796575Z","last_seen":"2026-08-10T18:16:57.075321Z","times_seen":63,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61863.0d8f4adefa29ba2925e5.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/61863.0d8f4adefa29ba2925e5.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69c6453d-2aa87\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 27 Mar 2026 08:52:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 03/27/2026 10:28:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7c631c8abde225c13e50779856774e7c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":174727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3069)","md5":"6e81e01e073f974a0b912981ff90632f","sha1":"f4b1c0e9a1e21b1393c8995585dd370e1220de3d","sha256":"965492ef0df8d2ab82a480eb3c9952a1a73bef80dafb8fb77495fc2930649e6c","sha512":"ca661e3ec6584d936c717f58463263896bd27eec09143d95730121f16db2769c6487eab93a66652ede732df9b5bc61a12a6cf12ba683f8ff3894bfafff32c483","ssdeep":"3072:769GrBTxaeLM8GO2HTxvAc8wtMcYRsCRgTwfVxwsbSOnecjBi4z:7yGrhxaf8GO0REwtMcYRsCRgTwfVxws5","tlshash":"bd04d69132a6f02613e1c5e618750402f31a7889794b85acf5bdacd73c9ac4e72bdf78","first_seen":"2026-03-27T11:38:57.878612Z","last_seen":"2026-05-05T07:37:29.007836Z","times_seen":688,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/29990.58d1733d1b27cc1c08e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/29990.58d1733d1b27cc1c08e6.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d8990f-814e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 10 Apr 2026 06:30:39 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/10/2026 10:10:27\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a285799c26f8f5de6b8a23a12608bdea\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33102,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10847)","md5":"1a77285c02ec824e43fe88bdbf734d6a","sha1":"9f4d66b4428428c6814e1630e03b771a079a113d","sha256":"8d98fefa4f3489d5193aa5bf17da99fdaf67bb280b29df39cb3d8c7018fc9b94","sha512":"47e8e8a874fbd77eff71a180c747a1f088ab53913a44130593cb74eed5e0fc97b7a609c5f6f78f904ada42da8b1ea44a5d606e9d100dd5c01938f69429936113","ssdeep":"768:eiEjxRvcsIj/XWmSVq4IK6+dNTQdT39G3fmbv2TzoJZemIwxK3yPkhBGPV:yyj/XWZVwFbMzoJZemIwxK3yP7","tlshash":"6be2f926592eeaf2defa41d614775441cafc01173845106876bcceec134dbada222efe","first_seen":"2026-04-10T11:01:44.659456Z","last_seen":"2026-04-30T09:21:24.274309Z","times_seen":596,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91184.b533ba526f3dba73f194.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/91184.b533ba526f3dba73f194.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb87-756e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:36\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: cd7f22f41c07841279f96c093351db9e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30062,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3069)","md5":"9f163fe398287baf0a93d6a5e67eb5e6","sha1":"2d6355e759a14f17458723ca8c811ffab1e5ae10","sha256":"d99c902c217bb28535ddf2f4603faeb28a970fb7fe0bc8a1a3a95b89196fbe5a","sha512":"602e258e44768e68e0af1a188301141b6b53e82ba9385b992f9675de7ab727ad47ca25742469ad1eaf2b85cf2ea03adaafb9630044842e876ac0b4b4a605c63d","ssdeep":"768:BKDMotxUGiG7s8frffVXzTBcGW5mzhHT5N1Cmq8ghwMA+mv60F/0rFLfLuPBbZ3W:koG7hTclhdI60V0RuQUPrECkj","tlshash":"bfd296ca32d6733693d1c78508750903f33da5743c0a55acf6ac69cfbe1a882916ab7d","first_seen":"2026-04-23T10:22:42.457306Z","last_seen":"2026-05-05T07:37:29.059902Z","times_seen":190,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/common/getCoinList","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgztn7jm7fUUV615l33v8JABwsmjW1UVopURgwGogwWU8eMtzr8ZaEnexy3K6Q%2FyhaYkd0ssEfGgN37DHj8BnyO%2FBsi7WP6lNpmvpKwCr%2BXfqfY1cRSOCVMlFLM0yyodUpRYOks%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c714ccab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0409f9e843ec74da198ed062120b08f4d.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0409f9e843ec74da198ed062120b08f4d.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2808\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875E61358373853688E\r\nAccept-Ranges: bytes\r\nETag: \"D55DD75446D505958E5210985B246BED\"\r\nLast-Modified: Mon, 28 Jul 2025 10:21:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13943290759176926731\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1V3XVEbVBZWOUhCYWyRr7Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-10T19:18:27.105702Z","times_seen":1002,"resource_available":false,"data":null}},"time_used":1342,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/clsx.m-DHulAg21.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/clsx.m-DHulAg21.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-1de\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R90hgVPNebXqqjxMjGLeqlWur6tI16yU0YDVXSXd6oHSleU0x5thCN2lr3yUnviyKDJGv%2BFuqtDiyRZN7sD974rIeorBGZJd3VYfnFTpkwAyeiUeUfJ3R%2BDmYQB%2B8rx2\"}]}\r\ncf-ray: 9f386c78dcc835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (477)","md5":"dd64838e50061a16762037242174d321","sha1":"5bc1624ae224e067c9d93bae60c518ca57f48e49","sha256":"fb137b760bacfb05fc2eacfee16f7954a01bd739c1846a2efd5ea53e24f454e1","sha512":"b5207d2b5bb502a387ef3bbc933f4ee8cfa6d2fca59ce3c0514b46ee83e1349746b07ac1b0a37e34b1480cc0721551b151e4126ee79bac1eefa48dfd49035d90","ssdeep":"","tlshash":"4df09ec426c1608153ed58c1952b9143f418876297bcb040f5c0e7b551d4aa5120bff7","first_seen":"2023-12-22T02:32:13Z","last_seen":"2026-08-10T18:16:56.894784Z","times_seen":89,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.03ad7918f5a36470dbd885f500fa3191a.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.03ad7918f5a36470dbd885f500fa3191a.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8071\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB67323739A6CFF2\r\nAccept-Ranges: bytes\r\nETag: \"1120928E635C6C88FC1E8797A66D450E\"\r\nLast-Modified: Mon, 17 Feb 2025 14:19:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12377208973214568623\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ESCSjmNcbIj8HoeXpm1FDg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1120928e635c6c88fc1e8797a66d450e","sha1":"5450da831d7ea9f75160d84cb5ea01ad8397cba9","sha256":"398b7b116cdbc2a9bfc3bb885eb0d4e05233b92080e78b642cb88474b1ce0e83","sha512":"947aa24233ea26a75bc846492f8ee13a4381a97be2f69655fc7f5b040c729221a6e18eca562ad427617680f754993b3b3ac75faf4bbff0c72471015065bb3f06","ssdeep":"96:d9eKgL0QrWd9hMxSLciMRmvc14NrIIq8jKwUmjhMfwQz8HPXSaMxAeNVNYlFWFQK:vYfaWQLzGs8H4xlj6qHvuxAeNVNYl3IH","tlshash":"d0f19f2c75f3858c9035303a056a767732ad2e71cbd9cf939b25a582d7e81372ccaa25","first_seen":"2025-12-12T21:48:41.901288Z","last_seen":"2026-07-21T11:23:30.653458Z","times_seen":5,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-B1xPd2rd.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-B1xPd2rd.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5db\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaTHpFyvQu44%2BDETvzKUGI1mzN4l4%2Bw9kYJvg14agY5czNmjmi80TNC5gZWeT6qsaWjlyDpRVvyYd9qjdDEXpZeqQgYq1omh5Ipq10eAdslEJ0cDgbZxQqvo1v6IXBXA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6ffb6435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1490)","md5":"656b64a6aab7ff6c3f51e3d8def15dcc","sha1":"560748911745394f29874d7afb365f628eca5adf","sha256":"8661bf9292fcfe18a2f35802aadb1ef0c481ee2464dd9f0c5c7550f1203c700e","sha512":"f09aa3f03fff2be28ac5259e6390fabab04e2489ba4a4149239593ea1cd4635394ddc13de07cf071886db78fd13ca975e24cc1e5ac468f2572293771a69ea92c","ssdeep":"","tlshash":"4c31122e5d59673266e7b81132860420030606e8bda889d03fbd1f1e8d96cc3767f90a","first_seen":"2026-04-28T19:21:23.154174Z","last_seen":"2026-04-28T19:21:23.154174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/runtime-embed_medium_widget.e5942233783964f9bef2.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/runtime-embed_medium_widget.e5942233783964f9bef2.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: W/\"69f051ba-15e2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 28 Apr 2026 06:20:42 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.51\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/28/2026 11:22:14\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e1ec5c9460aaabd0fa802b0660ea437c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":89647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12537)","md5":"31a992ac6bfebd7b9f8c0e96736c852e","sha1":"f7af4aec6aa90ddfaf2821028f9d959eaeec6902","sha256":"bebcb7a33f128cf6a57a04baa96e5698bf4c178cb863b43cbdebccc6745efd10","sha512":"dbd3e2e1e33f1a304a45b44db53e7315e67912326153c546c80dbfb68880eb214dfdb86a0998762006ab9dfa6ceb6a28d907c9b1611c87a7a6c69499063df31c","ssdeep":"1536:01wXkjwT+K7GsW+9bPnQQgCjzVte7EDXWcuqtR3G6xkfsXZvNFvAzi44A4X4p5:01GtrW8znBpTdXxmJiXAGQ5","tlshash":"d4938dade73c99b779f01ea95c2a9c63633c20123d2187d982d7b36505a3ef4d267903","first_seen":"2026-04-28T13:49:55.973337Z","last_seen":"2026-04-29T04:31:34.495529Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/27509.859ec4d2364de631a2bf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/27509.859ec4d2364de631a2bf.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb81-8df0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:22:04\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 38a44185223ef5e4f48596d34497ac78\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36336,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3069)","md5":"52ebe02f11766655e0da856772623334","sha1":"5e3e168c58e2dc04abdebef2c0191b3e30bbe83b","sha256":"784407da0b265498b3e9edda8c6aad5d154b5752ee7f19019d8a33f7f103cacd","sha512":"e5ff2fc6914335afa913310827e15d6abf29b263e58098f27fe116f1b413132e3ed12fce4277fa36c1c5d3f950e9b2023c8fe22e8a6a1f5d0ca311ffa9f61df6","ssdeep":"768:vvep6SHPhMc3edVuniDmsj0Ew09fAggyAKJV8LBmcl/thLm45ypjuqkU8b8DNMFH:vBSvJcVuKXR20VDcYCqGZ","tlshash":"a5f2faca31d6f05573e990eb84ba1083d23d68857c48406cb61cbcce791d96a73a7f7a","first_seen":"2026-04-23T10:22:42.447856Z","last_seen":"2026-04-29T04:31:34.48618Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/32-e426f86cac8ab106fcce.chunk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/js/32-e426f86cac8ab106fcce.chunk.js HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3787\r\nserver: cloudflare\r\nset-cookie: AWSALB=q34n3Jg2+VJB4zSvaVbKNAAPxpeLhbMsVoS9ZeePgM5n8l+zB0yEHRfI6iM2HwDdsU19hACTfOTXcp/1Qltc+xpdYExI1znfeyPIlrD79JyCon8lJL0Y7Gv2yb2V; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=q34n3Jg2+VJB4zSvaVbKNAAPxpeLhbMsVoS9ZeePgM5n8l+zB0yEHRfI6iM2HwDdsU19hACTfOTXcp/1Qltc+xpdYExI1znfeyPIlrD79JyCon8lJL0Y7Gv2yb2V; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=60\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZZqGSNarWJPulP%2Fr5hjVm4oghYFHqw%2FmfGLLQQq01%2FMFs6QzOH0CsqnDlMefp9R7aSjsgJjFq%2BBO%2B6fOJbbLYf6f92qh7B%2Ft3Dchr%2FKT2qyBHhUdTYRQki%2B4gSuio5o\"}]}\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:23 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c850d51b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14604)","md5":"e8bccdc8c243fcb16663e861ba2b09ea","sha1":"b51f10cd5bbac5c3defedc3da3bb9f2ae011cd6e","sha256":"bebab25747854611e684df4b28181a2af59fe401769cac7033f1718b331626ad","sha512":"db20dda2ee9852a8b6b57727b550c515f2b8f2074c9acbf9932345d4bc6642113f75ed2e34a3e2f8ae729fa5884126f3b9be233cdb502263304d563ef1d62ce3","ssdeep":"384:iIc6CWt0SnpMkOe+FIul2+RaOyqCLR/IfgNRB4RceBtWVbMzP:fT+FbMGCqCLR/II/B4RceBtWVAzP","tlshash":"5262c884b0e2feba4a876011407f3502f2392b489479e0a4f7b1d8d56d7885d92aef3d","first_seen":"2025-07-31T16:26:05.38251Z","last_seen":"2026-07-12T15:00:50.653763Z","times_seen":75,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/localBatchGatewayRequest-Kbzne3ii.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-Kbzne3ii.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-6f5\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygj%2FpnNscf%2BdKW7FQvBFt%2Ffn2xMIKOTrOr%2FbnU4lxXqan7wfemRIVla1F4qXvqlonRTAsI0qDAaPozWm%2BvIkXLFOgSHtp3ielOCjIRUH8milfQppPNFSifusoWKTXsvs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78dccc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"24e8dd103ab9a5d042bb35eb5fdb6d45","sha1":"8084b6a0f0f87442ecfea88e4a800a3a24da9ccf","sha256":"bc94df981383e4d012bb62c4d3d91c92bbb5d6cb2164c96f814499971c714d16","sha512":"bfe16ce223b0faf34950f8cee5a788e5580ed2a38133218c77664b4591105c9efdc7eb058a771ca95d17434b7f0a4bb37a79c30480285d94a3e21906bd365e9d","ssdeep":"","tlshash":"6c314188b619ec7d856e2d30681fa484e4342806a42f8471d64f75f7df319c1ae6fe1c","first_seen":"2026-04-28T19:21:23.182554Z","last_seen":"2026-04-28T19:21:23.182554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/secp256k1-BR5oHcvx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/secp256k1-BR5oHcvx.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-6811\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fL5oR5lZ7vIIf0GkEFXBbGy8gHGNmqoGtA9s0aVhgusibXw09QkGNKFXzfbF4vECoQbIxFG9MlfK1hxV9YZlItgAUR9qdL82XGhFwazfkBCTgKoIQK9PVeyhvBDG%2BbZp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78eccf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26640)","md5":"7f3d3600f9b1c440d34ee3275f204739","sha1":"5a46d1625824adbe6b0cfbbdc074dcb6d61e08f8","sha256":"e595c063a145084feb0d241a3adec6180b4ee8e87426ba8a86f42129abae11e1","sha512":"87f02e68c5bb36130cca42be257cae4186edc60d334bfd07ee0530d0d9c0f042994f49e66be33dd044f7a1cb9be706f3132a61516e5873d85fcbded8377a608c","ssdeep":"768:yM8AoeMUTPdT+QOSVP781Akg57J7zpxdjjGZC1ek8R3nYqYpm0ObGv4lNvx0jC7d:ndUSdg9kkh/zvLl","tlshash":"0cc2e98473d1747253ba28e001769502f5b4dca4f2dd4861e59c89eb3ef18ad8eb7e38","first_seen":"2026-04-28T19:21:23.15616Z","last_seen":"2026-04-28T19:21:23.15616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2062.e8996c9d544e5965ee8e.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/2062.e8996c9d544e5965ee8e.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-81\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:30:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e7d4fab3eb681779727e4853c1266b2a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":129,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2d8b5c3cd7ae08934776b1b41deb95a0","sha1":"9a4bc81c4da7271b047a696d368d128e5b45bc34","sha256":"5f316dc78efc3ea794be5d29dfd1eed788783714c025438b37a111d055aede33","sha512":"7415ab6e87a294dd5f039044c0948bfc3b18b9eaa78fc989de2e239a663416b1b80e0586464def8b43b503130c664160484e9bb1ce824905d1aca0423a2e90a1","ssdeep":"","tlshash":"afb02b5063401df480334382f0ff330b11bd68f339e8058c048d8cc00e030304272571","first_seen":"2025-09-30T03:50:33.714717Z","last_seen":"2026-06-10T09:48:28.895074Z","times_seen":2796,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/cdn-cgi/rum?","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\ncontent-type: application/json\r\nContent-Length: 661\r\nOrigin: https://qevorinex.onlinesupportcustomerservice.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":661,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://qevorinex.com/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1777404019415,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"59761626-fc4e-401f-809a-53adedf12522\",\"location\":\"https://qevorinex.onlinesupportcustomerservice.com/widget\",\"timingsV2\":{\"nextHopProtocol\":\"\",\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":871,\"domInteractive\":3122,\"domComplete\":3137,\"loadEventStart\":3137,\"loadEventEnd\":3158,\"transferSize\":0,\"decodedBodySize\":0},\"siteToken\":\"13be051fb03a4b1ab7cef40afcbfe61f\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 28 Apr 2026 19:20:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKlD1psYh0zkto63VbJJxlC7TWnnF7WWpfpOb9VCVOxPQW8nPF8Az2FSHoltrRYPLe9awuG%2BBWBd9Wq4ZYgh7Kzi9iAnDbYN6DPJjQKb%2FWYlONQE5TxV7xKStIV35BNlOX%2B3B02FvKkOL2u%2F8O32twQnVIt7G4rFKdtMPsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f386c854e38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-11T04:47:30.069542Z","times_seen":19416,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0eceb6a0afa0e4c848061d64332155373.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0eceb6a0afa0e4c848061d64332155373.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 408\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877AFAD5B3035354B8D\r\nAccept-Ranges: bytes\r\nETag: \"3C07397AD2014312444D8A402995631C\"\r\nLast-Modified: Mon, 28 Jul 2025 10:39:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1230327830200684589\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: PAc5etIBQxJETYpAKZVjHA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 4-bit colormap, non-interlaced","md5":"3c07397ad2014312444d8a402995631c","sha1":"9d903a8915cdfeb05c33204895797405ef9fd41b","sha256":"dfda2661a90b8e069d912859a3af3b1b95129ce98540164a766354b3440d8b73","sha512":"116d35bbb9af0edf457cc5cfdd5335960a55008127a997b1496c1daae1a51861a8f63575afc5ecb2359ab1530cffe06d074a5c110d48b9218f50329d58fd1701","ssdeep":"","tlshash":"f6e0f1d0f32c0a1ac3fdc29244e90cd05d63d2e5da21642e74c7a84d8a0c365c6fd037","first_seen":"2024-08-03T18:47:50Z","last_seen":"2026-08-10T18:16:56.98221Z","times_seen":264,"resource_available":false,"data":null}},"time_used":3157,"timings":{"blocked":2872,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-CvghBqvW.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-CvghBqvW.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-v5iI-2eJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-50415\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSnLVK9UArbu3X8pynYCkNPL%2BEaQUQEI%2F5cz9iom5tONShNNixIfAwMMvvHfF8ApwS51GU2q9qQJkVuvGQQ90lwdwfWOrIpvRIsPfA0WiBZ9NFdYqhKy5SmtpaTfPLPZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78fcd535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc689b0e01662eb341ef007ea366cd58","sha1":"6ee076baca173e74ff6b76126b45639bb37f2702","sha256":"e3df3523036a59f7b47ac1dfa95cbaf12d5c838abafad1078d3e3ec90531a97f","sha512":"78ff4bd8d4f632943d58b01bffacd103da0dcdc115157b25aa93e7f9e1dfee87671f2cc6ef9a700ef4d678a2a153ceded4c922415a976732b331e51115922a69","ssdeep":"6144:mHEOIqk8rui9oZ/izrQvIhH6AG18RjguSsRNWTROLtiRumPOE:lOIaQZ/i/QvuH6mRlWNOLdE","tlshash":"a6645b84b29570798fe654e5a0372101f231bc11b4cd8464f6ecdefb2ea98894767f3a","first_seen":"2026-04-28T19:21:23.078152Z","last_seen":"2026-04-28T19:21:23.078152Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/55482.57ef1b6cbf22977fa29c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/55482.57ef1b6cbf22977fa29c.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"697c6721-1daa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 30 Jan 2026 08:09:05 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/30/2026 10:49:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 790e4204cd028fb90baa960ecd976461\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7594,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3055)","md5":"6c01e80787ffec0a3beb96bba5a15479","sha1":"e6f3476cdb2a6fa27326789e65e39ee585fbea39","sha256":"8223e4125b61010598ca15da34c93cf3751ef63065a1bc1070257a4cc4e7bc81","sha512":"fd7748be7492952f9037c2f4f293f148ac5d84aebfa889495431426dcd4b14f5ae138d8b28ac1106ba2a126558f6ec3acf5f399effe032d6dc642c8c031ad2c3","ssdeep":"192:xxjobnZ3MfzZaIBV4tIcs3m/ad9xi9Sz5:LjorZGsZtIc27+ct","tlshash":"fef1b7e935c7b00d679a497428cfe604b2afb55ea84e4f41c05af1817c6993c9333fa9","first_seen":"2026-02-07T00:49:25.160393Z","last_seen":"2026-05-05T07:37:29.15341Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:27.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:43:54 GMT","end":"Wed, 17 Jun 2026 04:43:51 GMT"},"fingerprint":{"sha1":"09:0C:1A:6D:8E:CD:D8:59:2C:56:C0:BB:30:80:8E:F8:40:F6:B3:CD","sha256":"2E:F7:6F:58:95:1E:70:41:A0:8A:27:66:79:BE:73:05:AF:57:18:BB:7F:4F:4C:27:4B:19:43:C1:0E:19:3E:D5"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 4458\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4458,"data":"e=%5B%7B%22device_id%22%3A%22ba0f4bb1-ba4d-4cf3-9603-c8ac64892189%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1777404022144%2C%22event_id%22%3A1%2C%22session_id%22%3A1777404027313%2C%22event_type%22%3A%22perf_first_contentful_paint%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A662%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1777404021114%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22890e50a4-b96a-4b29-9924-a7656671094e%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%223e4aaf00-653a-4806-a5b1-bfd3f6534c42%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A1%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22ba0f4bb1-ba4d-4cf3-9603-c8ac64892189%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1777404022260%2C%22event_id%22%3A2%2C%22session_id%22%3A1777404027313%2C%22event_type%22%3A%22perf_storage_estimate%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1777404021114%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22890e50a4-b96a-4b29-9924-a7656671094e%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22d2d92eec-5db1-4a90-b64a-f228439790d1%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A2%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22ba0f4bb1-ba4d-4cf3-9603-c8ac64892189%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1777404023863%2C%22event_id%22%3A3%2C%22session_id%22%3A1777404027313%2C%22event_type%22%3A%22perf_time_to_first_byte%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A184%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1777404021114%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22890e50a4-b96a-4b29-9924-a7656671094e%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%220ead7250-099a-4505-b63e-28b65bde1830%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A3%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1777404027315\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=2b84f926a41a8a0dd8f4ff1a69027bf3"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 7528917866155584000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hINWU7oNN8jLk5GhbxI6C6C5dX1F%2BGWRgh4J8AhLUcLPT%2BDCVcdPNPTZWwz%2FM%2FKKxnlXuKqeVjMrg3rFtoz8f3hmb6lIp2BghcPFJCcCnwar8t4aDLnAYpIzFRSCv0UOr1YrQ5jhFA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=fbd365d3-0537-4f18-ab57-a089449fb160; Path=/; Domain=coinbase.com; Expires=Mon, 28 Apr 2036 19:20:27 GMT; HttpOnly; Secure\n__cf_bm=ADpoemWsBG1CcQ.Q8f9DddC0s.Gi8zYuQU2FhQZU4KA-1777404027.3453562-1.0.1.1-I5K97MbgSUDouti36DOigxK8fP3TB.LPnK.UqRQgblN0zeKiqXTzCcCJRS6pU78AnCrg0vnDMYlUXg.aZ_R7xq9QmPj8KZCkhA9XUpk0mtBtoiqiU05e62KPha2oh6XM; HttpOnly; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 28 Apr 2026 19:50:27 GMT\r\ncf-ray: 9f386ca2ebaa5697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":122,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.03c046ea626f94106995aca4c701fc795.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.03c046ea626f94106995aca4c701fc795.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5321\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875E6135837384D698E\r\nAccept-Ranges: bytes\r\nETag: \"E243D03F847E04A3BCAF9238D2D79587\"\r\nLast-Modified: Mon, 28 Jul 2025 10:24:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18211197115078776784\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4kPQP4R+BKO8r5I40teVhw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e243d03f847e04a3bcaf9238d2d79587","sha1":"badc33000a29d7c9677f95c4155a49609eee722b","sha256":"786590835f83f15e22d1d73a2147878b00625e91912ca04e8e0c6775c56dea4a","sha512":"798f634225925aa9e02d11634c010de038d70b0fa197ee014443ae9ef782f0a90a35b18a48ee4f417380acbc8e1c9df2ded77ddba10c0fa7d1784f28a3fbf013","ssdeep":"96:dmY//imlSbkkYlFPTQOqidjRGZRIMHp/k7uOrNiUyrcMUz:8Y/qmsIP0OqiUhHpMFrkc/z","tlshash":"c1b17d106cd0e052d9ebcf9ea6959e736072cd5a5c0ae24d3a08e3262f7f07c42e90e1","first_seen":"2025-04-01T12:16:01.548942Z","last_seen":"2026-08-10T18:26:08.845268Z","times_seen":152,"resource_available":false,"data":null}},"time_used":1606,"timings":{"blocked":1351,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/13817.256fa5a5213b9cb70f5c.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/13817.256fa5a5213b9cb70f5c.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-b07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7548f5cc38a84dafec176984cb82372a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2823,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2823), with no line terminators","md5":"9117f5417af5435afba6f7700053a6fc","sha1":"28521c103a762e72c133892f41ee2fb550e20888","sha256":"e121896dc20723795767320cb9facd147ce5ba20427b67b47b47eb2f85d85b67","sha512":"7e71e1b26466a549b6496d8e84f2581eff4877ff30f1d0deaa365a3c6729bf545e9672f4a4c8417b5dfe1c7d61cfd349b3c6d476823a50b074c4a6423cb09a67","ssdeep":"","tlshash":"275188abfbcb1e2de71bcea1e7a712ff91a405c1be584138e5b3ad71064ca741724184","first_seen":"2026-04-15T09:47:56.523899Z","last_seen":"2026-08-11T04:48:35.669254Z","times_seen":5673,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/medium-widget-creator.494b1b7910cdf03d458d.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/medium-widget-creator.494b1b7910cdf03d458d.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb85-2d73c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:22:05\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 701da4854e8c97687bac5323e820141c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":186172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3071)","md5":"037db0620627d74272aefc379e289a0e","sha1":"7e5c5e9e2898e4aacf88342e4e616bf44c239a94","sha256":"893a8351e943480c5a9bb7f5e1d5cc3ec5a286b98fcfe251332813ba6cad5a2e","sha512":"671009f112b5b30aadbb54e339bd2a473db937b004a27d5fd1919133d5ee95ab6d5f0c2e247190ebe773fdd55d2de0db69b9c1eee5c9fbab51b09d293bafa0c9","ssdeep":"3072:hZcrNwxf+t8k2U9xawx4BEVYTXdVw5uMcAVLPcju4ayOw+V:hZhWt52U9xawx4BDXdVPuLcjuZ","tlshash":"76042aa4f1d1b06263e340fe587b5003e3291941781a4ae8f678e9de3a5dc4a7276f7c","first_seen":"2026-04-23T10:22:42.49684Z","last_seen":"2026-04-29T04:31:34.449522Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-DE8HP17O.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:17.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-DE8HP17O.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3215db\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajM04llUG8IPZMzZTAp0o%2Fe22TVUa31clf55dGQbgHt9bDP3sHtXwbTmZq%2FkVIvEaomoIMfOvZvOpnvVm337xZTIibIQXz7xsvDJwsXy6FA2qLKUbX67k9nGYbKtE0qz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c67d9fe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282395,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27005)","md5":"48ebba827e6e97a4467797c94aa47f92","sha1":"5d73a3b9f8878c48b1abf40ff0ebb22bcc9bac0b","sha256":"944a62a05b9717bb10481c500aef23c5317b73c339e4caf340c08e471de2f991","sha512":"56cc85818a2cb2cbef046182ba38972f72c8c04885f5a7117b5c94d4f93fcb6710510a4b85a3d63c9f55de30b9e44187e5bd8dd99ca001972f0c8d2c5b8dc690","ssdeep":"24576:pwsHnhHup+GQJUJH9I2Lih5XIHjslpMIFnw6n6+ZQI9AtbaVUL6p7jMePdFZIT:pw41up+GQJUJH+PXmjslpMIFnw6n6+ZM","tlshash":"e3254ad4b252b06506d201e8646b124bf07c5ca1b048c4e9f69cdef63ee6a5d81aff7c","first_seen":"2026-04-28T19:21:23.185992Z","last_seen":"2026-04-28T19:21:23.185992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/colors-CS7848yA.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/colors-CS7848yA.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-cc11\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGcjqpIH%2F%2Be%2B%2FvHqAnNovMh9PExJil63Y3xigfM4NOFYyOr5N9ODrz4LdUIg1PYz%2BoBBHZHOZZ62%2BzKMzA5H26Py5wG39OJ7Tn7LT6G7sWm5DTVUtJ10FIFxhxrHYg8k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fab4935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52240)","md5":"8f972ae6b2dae7e6a85da4c924a29f7a","sha1":"fe9495df617b591ec359ee328811ee4317055904","sha256":"52830e8958e45ccdbc300e62ca481ed59df06e5e45d357030eda66890ddc6028","sha512":"fc3df2bfb93824d0079b700b969ac6952bce230c5142924e8e37ee56e9b25e49f7d0df9fbf9bc008f93d736dd1cd2a5fc2ebfb3373d40e1c92a1b539601c67f7","ssdeep":"1536:scTHibs0CjKUblwMioHGCKkvG0FCePJGmKPRaJa6EFoV4kWZ/Nc:POUblxioHDJHf6gyc","tlshash":"bf33f8d47181b03283aa5161806f010bf339a904b44fd498f6aee5dd3db984aa37bf7d","first_seen":"2026-04-28T19:21:23.080683Z","last_seen":"2026-04-28T19:21:23.080683Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/ai-logo-52GP66oM.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/ai-logo-52GP66oM.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-39eb\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7X%2FsZSpAz1UpeYTr%2FbgVTvGCzjIdh2OXikf9R0By9Pd7Xq06qq4yiPQxa%2B0Ygoi7TT1i9VOOKBWFA1sc5CQ7L7HYoBySqnuV11RsrXWdM36CX5n9QGPfRWG2G7IYp3e%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c73fbe535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"fba5599d6a608980a9b60046e19cd0ea","sha1":"7cec4b0d7fe6489ff4e11eb5824b65cbbda04cdb","sha256":"9f41dcce785ca80c3bb989813e3aaddf6b1c9a8bba2de21b4f3c26db182f6b5f","sha512":"19d72db690d8d07e8f72ee00f228a2ffdd16c3b2e68fafa840a18e56e3eadccc24a0fa3f0b13f5b5daeb332dbd09dd2afd1cae3c63325d6394dcb55a9b9e724c","ssdeep":"384:zfvQuVRyoFhlZ+/rresE8JEjJcR1gesbz1b:rv1BamAJE+RPezh","tlshash":"bc62dfffb886f80aae5d2c881113c1595e0d3f7a1fa494cb5c427e623871c67a8b19dd","first_seen":"2024-12-31T04:27:31.761018Z","last_seen":"2026-08-10T18:16:57.090325Z","times_seen":112,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-4-BtmWgRar.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-4-BtmWgRar.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-1f29\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IaPrU%2Fq7M3ugfsjLb1y7V%2FMvpHeGrLAn%2FBtNTKi%2FYn3AzTw93vUgFrHz4FdVkaTSU44NYPygjRPl2zz4xg46ecL%2FH6l5iuRaFweXeJnSZ1mg2i0vcrOUbukBe9rFS0E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74abff35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"e852256139157fea2331dc777aa8858a","sha1":"b5966bb7f92ceca69e5fdc8583601a26fa8da57f","sha256":"708a73173f571875bbeb124450dc8a1b3c10c78cac96f3d1337a42f68518531e","sha512":"f026b8755f8fb1f3a72cfa418dc921b6131c6a4a0ed9a7edc3d164af43b8f23b15a3af523162b4f00f66a61ec70cb202ff7e677f6f28524ed4c115292d9da805","ssdeep":"192:+4rpBB5Kz0qqHn2nLXhKl92ue4V7QkSMudp+WSXW7m:rTB5fqqH2LR/y7Qlp+WuW7m","tlshash":"5af1bfd0f48fcb37f15a4a30f679ae64a27e4b281978d7e79b91828b9421f05331025c","first_seen":"2024-12-31T04:27:31.716014Z","last_seen":"2026-08-10T18:16:56.95044Z","times_seen":66,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-3-DTTE9tVe.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-3-DTTE9tVe.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-8fd0\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v83k4R5i%2Ff3tDyfy3oVp68AVYK9eZbXpAYCW38bBanL2vzFt5GJoCvpmVlK5esf4Xd1lp%2BDF6XJVbVaNz8fIDGIqKFDNXzZcfPTql%2FVQEjp5tvLnr6P9TzRJngIczj1X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74abfe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 307 x 303, 8-bit colormap, non-interlaced","md5":"05670cf3ee465e7b5981a88690476a6f","sha1":"ee0359b0dd3da4a436f6d78f5d2c145a453d5348","sha256":"e9cf1da2881aa044ad5b7bd8d24fac38a2d03e0dc879b3126972e5f53932da05","sha512":"cc21984ef00d19079a931dcada8a7fb9e4afea575edc9ebf7819121492759f7260626e904900e38d97524aca56e69258bdb5f65e897b1f4a97de23f8021ce0b3","ssdeep":"768:8e+C90N/hlDeK+RK9i/TrmkiCvyGtRubI9m4XLvk0zm12LgIVN:w/hlDT+RKg/TrviCKGtM09menr","tlshash":"57f2f16f884ae274e6c59efc03ed7533238f5e490402597d962d164287caafcfb11b0a","first_seen":"2024-12-31T04:27:31.826813Z","last_seen":"2026-08-10T18:16:56.880322Z","times_seen":66,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/10502.1585eb3721bb152abb7c.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/10502.1585eb3721bb152abb7c.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-7c02\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:30:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: da0985a17aef2e5d1a35249cd2f6d2a0\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"e66872887f9360184dfd846a9af7fa3b","sha1":"e007ee2f1c53646d4b219df0af912b1965bf3594","sha256":"546500d674f78223a36961d2847b83d46ae228bbc008b6800805df347e063db7","sha512":"6c77681f491bab4ef303d3bc31df9c6b8f9bb65624c550860300c2f3b7d4b0bed6c8f76d7cd8278e773450c19ed0a247072110663ae142418378e969a0f6c2e1","ssdeep":"768:PrvnaU3z3axr91U+Lle16t4QCht1hUnuIYIN12okJvb/9WcHwRKT6Z1n:raxB5S9tD5PCr","tlshash":"59e2f886b3f864b957e780dac8350103e32820106455847df7b8bdde6b5dd4cb6bab39","first_seen":"2026-04-15T14:27:01.584397Z","last_seen":"2026-04-29T07:45:38.563882Z","times_seen":221,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.00e21a768fa1147d1b9b6ab85d36353db.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.00e21a768fa1147d1b9b6ab85d36353db.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8884\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875CE63A8383272E6C2\r\nAccept-Ranges: bytes\r\nETag: \"269EE031C7C4F58A01B311A3787DB80A\"\r\nLast-Modified: Mon, 17 Feb 2025 14:19:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9527830406459104116\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Jp7gMcfE9YoBsxGjeH24Cg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"269ee031c7c4f58a01b311a3787db80a","sha1":"488d9a5f2af338205376c7fb3610a7c162894dcd","sha256":"d4806494df4315bbf4b40ecf91232d0f74ef2b5981f5cceab5cfe026faf10096","sha512":"5aee1d55ebd49597de1d91784cf2aaada6690b1c5ff3bd886fc14d3b8094cc42029a9db88ade57b47e5c077437fe1abbb3ae4d124ae08690462452c5c4e4245e","ssdeep":"192:PPlZEMu1wJHNBykX7Pqj3GdTrSuJuUyzgsJ:PtZvJHNBPD/dXSaOZJ","tlshash":"3102aeef7409acf4d32f2fade3ce1708bc065485254414688815cf2c78f6a8a6ae423f","first_seen":"2025-12-12T21:48:41.927736Z","last_seen":"2026-07-21T11:23:30.627534Z","times_seen":5,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useApp-GM78SUN8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/useApp-GM78SUN8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-81\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYQh6hH0LVi28%2FqXX6RDUbrz7WGiRIegtK%2FojFnx%2B5qV8gS80dYy9IoIR0kH4vc2OmDtk4HXFlVjfxGfc6raPVk1xM5nmaSQq%2BU2THqq8VrVHuUhvsQ919HNdiTIq8KB\"}]}\r\ncf-ray: 9f386c6dfaea35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"d3858f5d0612a6d33242c04739ce0810","sha1":"8c19198885a5ae2716d7463fcfd862d97f6d97cb","sha256":"33b9d16a873e808c9270e1626b1f63d48a04669c3f288daf2e9fbbc99aee439a","sha512":"51963573b6606af941ae6c46d41365c3fe2b74ca3835c468fa91cd5e34ce26c8ac8d82fe0aecaf0bbad2e672ce3d61c14c434d391a45f16e68746824c1b0f5ab","ssdeep":"","tlshash":"22b02b0e248071b4e3080cc8622104c20314451437b147d0c02e431ab048499f229b02","first_seen":"2026-04-28T19:21:23.141114Z","last_seen":"2026-04-28T19:21:23.141114Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/nft-2-Bidcm4Hl.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/nft-2-Bidcm4Hl.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-938b\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSwx0517qI2O0vhF1mpvx7HkVmLClfN7BP2K7u1T7rneIQ0Pyl%2BDfFwSNQE5C3qnNLmC0paaKVaP3LGobzsH5qlijbQqz4dMXuDN7d%2Fsn2IpxTADzBGZGa77DTU9JsH%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74abfd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 353, 8-bit colormap, non-interlaced","md5":"fb4e306ff3ef5f8eb1f335a489e8a655","sha1":"232e6fa9d51ad61807ef37ae5df27ee61deaa80e","sha256":"5cba3a8af7b609329a1b5bd1f7ed4fdd2e01df1c429c2054648ed28449cc6a79","sha512":"893547e60a9518e2bcb214da1cd6a8ccd0320aac74343f861eb5025b279431a73f28a4620a1f3b59d1ab76e124721a046fd8870bbfbd3f639d27faf2dd84ea21","ssdeep":"768:W4MDX5Rk8qCerzqJMOv3b14tCpllPnbsBfbKAMUE8Cu56pUs:eDX88qqv3b14tCpnnYBDpwukpJ","tlshash":"9503e060ae4b373c25d442b6d7a3013a9458fe28bb94688fa71ebc970a777c181d34dd","first_seen":"2024-12-31T04:27:31.722801Z","last_seen":"2026-08-10T18:16:56.887594Z","times_seen":65,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.012be8b9b57894415b743bb9a3a5cd69b.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.012be8b9b57894415b743bb9a3a5cd69b.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1008\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875CE63A8383287E7C2\r\nAccept-Ranges: bytes\r\nETag: \"1D8873B15CE7E65A262D1788F19912EF\"\r\nLast-Modified: Mon, 28 Jul 2025 10:25:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10605487744494310156\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HYhzsVzn5lomLReI8ZkS7w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:27.120242Z","times_seen":423,"resource_available":false,"data":null}},"time_used":1918,"timings":{"blocked":1637,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/parseSignature-CXLIVmT8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/parseSignature-CXLIVmT8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-d13a\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4baUj8AxtC5zoLx49kcYLEHfPA1eDNG8Eig%2BaCGagXLMmZKr562uv%2FB6AUCgdn%2B3JaL55bS5%2BwQsYS2W5Uiw7QNUhgTtnO3WB3tknxPpfnOOUHrNFOY%2BiP18a3%2ByjjH%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78dcca35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53562,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39564)","md5":"2662d9bcf3eab650de4769184d92bf03","sha1":"8e4c107efc49cc22bbb95a25023f94f8c7e9b911","sha256":"b01bf138c15ee78a8606cbd5b6b0809c6c610bfbf56a6c115ba7340b255b3607","sha512":"a305847c01e660b45420a23451e7dad8385624aa6510e8b3170df1e4eb3b11819c74f4a18f3e45a264501a997634bf814c47f4214e644e128a408f2f39069ac3","ssdeep":"768:xX0nJ/CMiFHLup2cN7E9DATzWZzqXDm801aYes5+2IgxVpvRNiRkP1RqziCs7d1V:NAJcDsmJ1de0+1EVh0gMVtxq3+a/nv9L","tlshash":"f5333bc4b6b9b071938474d0906b6101e128b9d1f44d8091f2adde6b3ffa94cdaf2e1e","first_seen":"2026-04-28T19:21:23.088395Z","last_seen":"2026-04-28T19:21:23.088395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91184.b533ba526f3dba73f194.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/91184.b533ba526f3dba73f194.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb87-756e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:36\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3dfa08c17f2b7f3881a4c7c4443ce4f3\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30062,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3069)","md5":"9f163fe398287baf0a93d6a5e67eb5e6","sha1":"2d6355e759a14f17458723ca8c811ffab1e5ae10","sha256":"d99c902c217bb28535ddf2f4603faeb28a970fb7fe0bc8a1a3a95b89196fbe5a","sha512":"602e258e44768e68e0af1a188301141b6b53e82ba9385b992f9675de7ab727ad47ca25742469ad1eaf2b85cf2ea03adaafb9630044842e876ac0b4b4a605c63d","ssdeep":"768:BKDMotxUGiG7s8frffVXzTBcGW5mzhHT5N1Cmq8ghwMA+mv60F/0rFLfLuPBbZ3W:koG7hTclhdI60V0RuQUPrECkj","tlshash":"bfd296ca32d6733693d1c78508750903f33da5743c0a55acf6ac69cfbe1a882916ab7d","first_seen":"2026-04-23T10:22:42.457306Z","last_seen":"2026-05-05T07:37:29.059902Z","times_seen":190,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/3193.bf0956124aff296d9619.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/3193.bf0956124aff296d9619.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0f-42bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:55 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f715d912338a4690b393582ee7ac98f7\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17083,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"1b19c2a2d96cb336c07d6d8a6dc51755","sha1":"0ec49b2d679f7b6092dd039f15fd979b7754dbb0","sha256":"8ed9e69ea55c0438d2f03b7bab105c9c7045c9b51320db349d9d15d3ca30e144","sha512":"1d2feff1c96fb57db6d755978c7dd844698ca93aaff2bce6307c4497d29ab482aee60d993f5394dcd539fb042b0f8c6f08328a125e3614a504d203ce41cf3a28","ssdeep":"384:bxjVKZysKJy2r9Ey6fr2PrIINayMwsF/lrQDfP7yXP0wRmNXoQ:rKZysKJfr9B6jQ/EyMwC/lrQjP7yXP0Z","tlshash":"6572b68931c2f06557a32866443f5009f33c1c58350e98a4a362dc95bdf65aef27bf7a","first_seen":"2026-04-07T11:13:01.74205Z","last_seen":"2026-05-05T07:37:29.133653Z","times_seen":394,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0d81e41c22c7246b682a305fe56f3cfb7.jpg","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d81e41c22c7246b682a305fe56f3cfb7.jpg HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 281522\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AFAD5B303592448D\r\nAccept-Ranges: bytes\r\nETag: \"4B6AFFF489B312556FE87F1DACC7DA80\"\r\nLast-Modified: Thu, 23 Apr 2026 07:40:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12729756379883130803\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: S2r/9ImzElVv6H8drMfagA==\r\nx-oss-server-time: 31\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":281522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1450x966, components 3","md5":"4b6afff489b312556fe87f1dacc7da80","sha1":"3af2207e98f018eedd337490a2610679cbb37ff9","sha256":"24c123bfdba02907b0ddc65773596cdecfe4d0f6928c1506af703780c1201ce2","sha512":"76bdc53cd36a9127caefb8ae1c8e734ebe30f3be849bf99c33186bf13934566c02fd6de839caf043c2ddfaa65e006b0a003fc13e87ce4fe4c289b0177bb9feea","ssdeep":"6144:JLQ6EqaM7aOOOeLt40YglhTZqmIcxYP3k6rMaeJ77w8QlGwG:JcyaMOOOOaPYgHZ/dc3k6AacHpQQwG","tlshash":"b5542320181b858f1154a431bb5b5f6e8c3dc035cfc1a8af25f5fac26cc7dada2a3595","first_seen":"2026-04-28T19:21:23.192713Z","last_seen":"2026-04-28T19:21:23.192713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-DyP9EBVq.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index.vue_vue_type_script_setup_true_lang-DyP9EBVq.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-1de75\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJTelZKeObpkXWIqm3W5rDHhTYfR8CT0CyW0oZKtLUdiZstKa2u3fPogZzJ4ZIL9Y6gIb8FWXR4PHjrvJc0qsmkxh%2FoSD0NOgfj9EONszB%2FhER6M6pTS%2Brvwqqjiizp4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fab4635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122485,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1e6bcbe51a1a0d06fad50ea127b8efd7","sha1":"312f724a9d67af7fe9da5891b9dce5a8756746d1","sha256":"d0a510c014b4c2682e0602ff891ba9e7f2bf54deda4116b256c2476f17da3179","sha512":"91dfd6cbb85101bdcfd2ef42555b0d9ff57bd8b8b8adb7465e0d08c8c502c7fe099c514f98a614e71eb281734ef4f7f1623c6c0885b5b7d6c4491380d4cf1b0a","ssdeep":"1536:ZwIBPTqzh1RCEfM0LEfyBL538ze54Lqa9:tTIrILD9","tlshash":"a0c30afd268171e8f437cfa254113819b03b39bfbf368944d9e56aa4fab146415dc838","first_seen":"2026-04-28T19:21:23.157124Z","last_seen":"2026-04-28T19:21:23.157124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/SpectrumVisualization.vue_vue_type_script_setup_true_lang-CO6w7rVC.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/SpectrumVisualization.vue_vue_type_script_setup_true_lang-CO6w7rVC.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-e30\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yK0nfTobhVvc0izHZdxyvqskFR4%2BZCEuQc1j3CecmyfpShQqWT40NtfOjTeVxwhyp5JtQPsO5ysRLWBltCwoB5QH9IpVnJBQvcdSdDWQH8VkdK8IkR8zUs0LdequGYF%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb6335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3632,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3631)","md5":"7188dc761b294ba0a33b9a42821cd2b8","sha1":"d4fd8ac3f1e9586882aec6a5f36cf461b8c0474e","sha256":"5d41bf23b5dbcbbf76bb1077b16db96026ca92c20209b3a3a3c6a293eb7b3e6c","sha512":"3d9866771f7be1f304cd06950f07b1de0ea1a1766a00e17fb7fe49a157a89bf6334e9471647cd824ca371632709c97efa03ce9f2269d643c8b87fd959b05c907","ssdeep":"","tlshash":"2f7194fc0608ba9fd5624d475358790ad40e53ee9f97ac80d7ae812dc52204dbeacb3c","first_seen":"2026-04-28T19:21:23.153298Z","last_seen":"2026-04-28T19:21:23.153298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.67.0/dist/dotlottie-player.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@lottiefiles/dotlottie-web@0.67.0/dist/dotlottie-player.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.67.0\r\nx-jsd-version-type: version\r\netag: W/\"16151f-2nsYvm3XujU+wKxQU4enHxblbek\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1617658\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\nx-served-by: cache-fra-eddf8230058-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 499106\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1447199,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"1d6bff821f5848fea9b80fda30715321","sha1":"f3f5f90f0c2b9132f98b23fbfc3a709bc0305dfd","sha256":"e9e2b1ead77fd1ed5c72f7a30d9ea0a843e148386db3aa6bba68b1803723894f","sha512":"bf9231e05e5567bdbba1463bbea3cbea04ead67ef99e863722a798e5c4ae09b06a60aec19d65969bdaab397343de9a2b67c0a0bdabb261df6eb853fe32af989d","ssdeep":"24576:3KfQseMNzayEKEQWF40oEczIj2XbDvt8vmCOnejUenbSqr0rVgohcObnV3KpY1pO:3VL","tlshash":"5b25d803b55b35bab401f927060dd6367763d8a0719971f5cf4e2eaa7cef8022986e70","first_seen":"2026-03-18T06:42:29.994948Z","last_seen":"2026-07-21T11:23:30.597938Z","times_seen":13,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":87,"dns":20,"connect":27,"send":0,"wait":28,"receive":129,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0f3fdbbc11bfd40b590beeb90251b0f20.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f3fdbbc11bfd40b590beeb90251b0f20.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9347\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108774C8B373336FE984E\r\nAccept-Ranges: bytes\r\nETag: \"FCCC0C8E1DA8CEA84F8332CC551383EA\"\r\nLast-Modified: Mon, 28 Jul 2025 10:42:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4247239917903556863\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /MwMjh2ozqhPgzLMVROD6g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"fccc0c8e1da8cea84f8332cc551383ea","sha1":"a7ec06738f7cc8aff344e8f90a5b10b693e5afe2","sha256":"2721fdf45ffc9f2c247ee46a0d04ff3c40ae5e5844364171e6889c66555648b7","sha512":"c3c8eacba3278a60e885b2cd09c4c5106f5e54ae58cd119a373c55f6daf48aa5f356830cd8eb75ab15a5a4f90c019047f45739cce2eb49b221c655360318f2c3","ssdeep":"192:a3CHg+6scVQ5zH9Xb7LxyTE31fJwA9Z/C021BnRH:a3L+6scVQ5DhvLxvSI/NSt","tlshash":"5412bf19ebee263f1a0b7f9b11702fab7c302dd19060489e17841d646fa1c6590d7b42","first_seen":"2025-09-07T17:41:21.965294Z","last_seen":"2026-08-10T18:16:57.048744Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3204,"timings":{"blocked":2905,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/financial/list?pageSize=6\u0026pageNum=1","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/financial/list?pageSize=6\u0026pageNum=1 HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXXTIrLXcyK2a7H9bi778Yi8BdJsg4xp0IXBbhyI9RdOs0vrrx3U38AGizrvOoe4lCmicmSM0NiKvkKuzXF4JXVzbJGKWwCWOPPaJEoJnn%2BWAou1jDuwCg%2F1vok6wbgIIR37pNBc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78ab0db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/api/v1/widget/contact?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /api/v1/widget/contact?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiIyNmNhZjg4NC03NTAyLTRjNDAtYjEwYi0yMTA4YTAxNjE1NmYiLCJpbmJveF9pZCI6OTQ0OH0.7e8Xl9x7YkFF18ccfcHrLy-YkY4kBFSx-4W3f1Kmsuk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: AWSALB=hmIqqMLSuuUqBg4o9SPd6jwV/GPVss5eCsr5u5Y3dYcuFbqwf3d033q8bZysxu3Gomp8mW+OwGNf9lDGlUDA4r5cQGTYoBs3CNm/V/G8qaDs1WGj2hb02Vxf8FHt; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=hmIqqMLSuuUqBg4o9SPd6jwV/GPVss5eCsr5u5Y3dYcuFbqwf3d033q8bZysxu3Gomp8mW+OwGNf9lDGlUDA4r5cQGTYoBs3CNm/V/G8qaDs1WGj2hb02Vxf8FHt; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"52a3cea793cb5621dc8ec46d3c0ea4de\"\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: 6fca2858-3b80-4257-a939-ebe5a155dca9\r\nx-runtime: 0.021743\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRDN3kM6SeP02iq%2Fcns2OahO0YmA9Po7lLbvFHKffc4NUTeYsNJrDmSwOTpPp129VLPU%2FhywoQRCEDIEnE%2BE4QLtKzq%2FsRGXMsiWANNkK%2FgvnVN5FF53klasm7pfuGVE\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c856e93b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"51513860779df2c5f64c22a3be5e2839","sha1":"19fc943c6eb0897db859a37265f1eec68a947476","sha256":"52a3cea793cb5621dc8ec46d3c0ea4de901a565e6b7a09aa366ad7e942e87b73","sha512":"b99b92b2890b2c143c9de1b09c00ee7ac45310176ae3d0ea3fa3545ecfde549ecce079dd26bfc42b6637b0a4633010e45bce576c9400292d0341533dc2eff5d1","ssdeep":"","tlshash":"3db01205cc140958c51c055277d03f05140d206387056cf040000f0f13a2b283954462","first_seen":"2026-04-28T19:21:23.1962Z","last_seen":"2026-04-28T19:21:23.1962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vox-bucket.s3.ap-southeast-1.amazonaws.com/ofcmwxyw68riokuywytai8lfswi2?response-content-disposition=inline%3B%20filename%3D%222026-03-29%2022.52.41.jpg%22%3B%20filename%2A%3DUTF-8%27%272026-03-29%252022.52.41.jpg\u0026response-content-type=image%2Fjpeg\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIA3B62XLIMHQRD554Y%2F20260428%2Fap-southeast-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260428T192024Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=07df22e869eea6db394a9aeccbcaa139a8fcc646de1370c9d0a56285ba459f72","fqdn":"vox-bucket.s3.ap-southeast-1.amazonaws.com","domain":"vox-bucket.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.147.186","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:24.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Thu, 02 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:77:53:EF:33:DB:8C:A5:F8:A0:3D:9D:6C:AC:AE:2A:90:07:A0:65","sha256":"85:29:59:6F:0E:BF:37:E3:B3:5A:54:9F:0A:BD:3D:A3:16:E7:D3:CD:98:F0:D5:96:A9:E9:B0:04:FF:20:AC:50"}}},"request":{"raw":"GET /ofcmwxyw68riokuywytai8lfswi2?response-content-disposition=inline%3B%20filename%3D%222026-03-29%2022.52.41.jpg%22%3B%20filename%2A%3DUTF-8%27%272026-03-29%252022.52.41.jpg\u0026response-content-type=image%2Fjpeg\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIA3B62XLIMHQRD554Y%2F20260428%2Fap-southeast-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260428T192024Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=07df22e869eea6db394a9aeccbcaa139a8fcc646de1370c9d0a56285ba459f72 HTTP/1.1\r\nHost: vox-bucket.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Um51Tby5gRGyRaNtx+3lvuF4GzD4kbXgRCcIhdIQjMgC1bxQYaqshiBBv0wEunq9nuCwWfNecoWgMATvJnWK/qykVgIkRUz/\r\nx-amz-request-id: KZMFSD14NF27XX5R\r\nDate: Tue, 28 Apr 2026 19:20:26 GMT\r\nLast-Modified: Fri, 03 Apr 2026 12:05:04 GMT\r\nETag: \"6ad07d887ecc82b27309970abc07dbea\"\r\nx-amz-server-side-encryption: AES256\r\nContent-Disposition: inline; filename=\"2026-03-29 22.52.41.jpg\"; filename*=UTF-8''2026-03-29%2022.52.41.jpg\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 12545\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12545,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 250x250, components 3","md5":"6ad07d887ecc82b27309970abc07dbea","sha1":"f1b54eb7476217e905b5d699ce02786219a38f53","sha256":"59ed6935269535e4c9e456d3edff080ec797fcfa65e702c0713bcc481fc4942b","sha512":"4da0bb8d5dc620bb79eecd2ffe3e0b1161cdb38e64da3974530a863bdc90563e030b94076a1c50a777e9e0a09e895c8ba91907df0586b6e4dc590c53bbc8eb09","ssdeep":"384:N4cvBWg8r0YahbAG5EcfllVsbcciOiKzE6Pc4m6P:+AWv0hOsEctlV/FxK9Pc4m6P","tlshash":"3542bfc3a3635b0cdb7369ba9908c784a1f2ca532b923bb36350d1459f92c7969c0385","first_seen":"2026-04-28T19:21:23.197132Z","last_seen":"2026-04-28T19:21:23.197132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2000,"timings":{"blocked":818,"dns":34,"connect":375,"send":0,"wait":362,"receive":1,"ssl":407},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/useCustomService-B-tCr7bt.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/useCustomService-B-tCr7bt.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqfESYKadDuM%2FE9iqY6MQARcz4RrSNcbkKIZDHhKVgsFosfWRA5offXSdeY82O%2FKetQxenRAAFTGwjlXmSp78NGhFgijtnCC0Gef3%2FqgQFUhcARsHZfRQPu9yHukT2nv\"}]}\r\ncf-ray: 9f386c6dfae835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d02fc59d3eeded50bc62959ab92727e8","sha1":"c44130c715148d706533b18abaa971c76da7c8e0","sha256":"5015f972718c426e470ce532b49fe6380e5267d1bf831c65aeb6a7c71b237edc","sha512":"d469796c23979e1e298005f5b0495481172a7ec6c3baeec5f6bad0a69013b5340b7857d46c3da76dd0c82e6bc32477518336ffb6091db88e7df78b61af145071","ssdeep":"","tlshash":"16b01252ac4453f0936587c30f126f783220010c210453312985c6b131d3493a205c74","first_seen":"2026-03-19T19:54:38.476553Z","last_seen":"2026-07-08T14:59:29.809133Z","times_seen":6,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-Cm8IK_3E.css","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-Cm8IK_3E.css HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-28e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDqNNGCs8ZGo3YOqw3tZk5IGpOvEZwLdfoiHlVj1wTtzGRYPwpIJWkYFAV8VW29WTkH9MxrXC%2BHDMQQJ7%2Bigm%2BEZulkTvmqs%2Bv6brmm8iMCbGDEaNxVS52wLxs44rxdx\"}]}\r\ncf-ray: 9f386c6dfae035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (653)","md5":"2c40e9ba955563e22f9cb4a8396e333c","sha1":"b95ad40f8309335aabe8abe4e024cbd586854287","sha256":"05bb7bd0ab840c751e08a4e8ab9119b24641870659f3093758e4f1c0d515c2ac","sha512":"90df2433d9de22713966f3c854df3cfcf5c256fcc65a404e43b1f97adb9179b1d1b31ba80ce1da3e7d2b158b242528afa6fa56aacc4b66ab363640fc4ad2401d","ssdeep":"","tlshash":"44f09e483384103c7c5780a3e81980cea3ddd156ef3b15cead1233048e976975911585","first_seen":"2026-04-28T19:21:23.198045Z","last_seen":"2026-04-28T19:21:23.198045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-Bt816wsy.css","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-Bt816wsy.css HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-aaca\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VYBsDhNE5zcgehj0DML2FyzPWeLIiEvx667%2FaGvT%2FvErXCxtXuzeJsTKmQFGVF35Jwrb6oc5Nay0ymrn9Yt0lkaWMDiZM5U0jsbi7fEBSC%2BpG%2BEwsOKXW1K9qAYFk%2FE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6dfae235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43722,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43721)","md5":"3e6881cdcb9b901565c36572dc91e96b","sha1":"2d285102cee4b9f945988c5701a43dcd5932b6f6","sha256":"4794b575eb066047b297b7fb318e3bc782d8096f31c162db8162fa612cdf9d09","sha512":"6aa52198d8e45139ecb0955f65290cebc68626101b5db2a373c2b30ffbb12b4a5d4c66ebc6d3718e4e9281e7281ea3b26a5bc85bdf0b937e2832b766fcd60987","ssdeep":"768:Zg6h6Ksxsr/+6vsP4EzkacRtwV0pC1KIP:pr/+6vsP4EzkacR6apC1KIP","tlshash":"ce13b82573a9143cfd77d1a7a494850c316af623ef2324deae423925cac739b3c925d8","first_seen":"2026-04-28T19:21:23.198858Z","last_seen":"2026-04-28T19:21:23.198858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-KaM-Llqx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-KaM-Llqx.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3900\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwyFmmY7xI2Axm8hLetaGHfFV2SG5IeRgRzKmB9zXRKiz6MVkw4DDWqHxTr67DtQWXnYaErvKszmbKT4s%2BaVPvId00x8H3p0NyA3ZRQSNhkb%2FbsBUx3%2B31qJrly3d9o%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e2b0035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14591)","md5":"f51e468dd1f4523f19461b48200e6f2c","sha1":"2be0ba60ae1ed2628da555fcb17292f3c4606859","sha256":"fbd5fb9babc009d7c1cf2dfaba599956d189ee035f54a7aa4d6ada327183a7f5","sha512":"3673a2a470cd7c3bc582c29ed774f0d9d493abe07550a49e1c443b38b26a14a6a1a8ddbca1260abd8af2b26da16f987b39b3447cdf99305c9867d9f7e1770b6e","ssdeep":"384:JX0yQwPEyP60qIEv1cy8Q6hCJxRqubyN65JbsxAC2DhQeSIDZ4yNRRvk+wrZVGR:2LsEyP60qIEv1cfQ6hCJxRqYVC2DhlSU","tlshash":"2462eadab2c0e1bb016f8685c2230b195b2257a0e8d6fc90e9f7983a21d9d65071f75e","first_seen":"2026-04-28T19:21:23.199899Z","last_seen":"2026-04-28T19:21:23.199899Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-KaM-Llqx.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-KaM-Llqx.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3900\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgSqp1jTG3vdpJNbs%2B1il9pYpjcB05plHkQ%2Be9TwCszf4EtZ082ENUK3ua61gowNUoJ%2FW%2BNDJl8HngnjgHtIYY61GFKIT9wNPazg8BZ3p%2FhuyyhrVolgCGKsf6QiTRvS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb5f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14591)","md5":"f51e468dd1f4523f19461b48200e6f2c","sha1":"2be0ba60ae1ed2628da555fcb17292f3c4606859","sha256":"fbd5fb9babc009d7c1cf2dfaba599956d189ee035f54a7aa4d6ada327183a7f5","sha512":"3673a2a470cd7c3bc582c29ed774f0d9d493abe07550a49e1c443b38b26a14a6a1a8ddbca1260abd8af2b26da16f987b39b3447cdf99305c9867d9f7e1770b6e","ssdeep":"384:JX0yQwPEyP60qIEv1cy8Q6hCJxRqubyN65JbsxAC2DhQeSIDZ4yNRRvk+wrZVGR:2LsEyP60qIEv1cfQ6hCJxRqYVC2DhlSU","tlshash":"2462eadab2c0e1bb016f8685c2230b195b2257a0e8d6fc90e9f7983a21d9d65071f75e","first_seen":"2026-04-28T19:21:23.199899Z","last_seen":"2026-04-28T19:21:23.199899Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/css/32-2f8e8a53.chunk.css","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/css/32-2f8e8a53.chunk.css HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 72\r\nserver: cloudflare\r\nset-cookie: AWSALB=WNBQSA/jtV+ORqjr4pCxo5lZLMtM2Biw+t/g632yMJtwjY2Bnht8ZeK+dKDRP8u1PbcjL8Go8S29t4L/CtPG2LPHA2ilWQQ29LNA+mPQSOyONfWQZwbugwPjyX7z; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=WNBQSA/jtV+ORqjr4pCxo5lZLMtM2Biw+t/g632yMJtwjY2Bnht8ZeK+dKDRP8u1PbcjL8Go8S29t4L/CtPG2LPHA2ilWQQ29LNA+mPQSOyONfWQZwbugwPjyX7z; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=60\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndVbjfsjYwfNNzSN3teAiBrpZKKD1rWKiy4aNoih6ByafuLVXqc7GIhkbDb8wcVTu2odMjkpMXHsht3uCe0JgXL5FmDvFRAiRMQHO%2F%2Fjg%2FUE%2FiYwOeMGRZ1JkWCHVITp\"}]}\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:23 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\ncf-ray: 9f386c850d4eb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6afae3ea28975d0a41baeb4c3267df60","sha1":"79ae4679a0425755678dc6f6c7e6dcb95fe73bc4","sha256":"0a7ca23b9044a6a868b5979194c0204f48a0e04cf5b706f4c46edb6aad5f6cc9","sha512":"72477c3c431fc8888e87ddce0f2141d24584657bb9a9d37be7778e7d55dee34c53e09a728cfdb92c2907caba679ff01da4edd64c6f1394a51728e22fe4330037","ssdeep":"","tlshash":"deb0128014ad5f3f5032f00e0ef4d80e55003f4140f00e9013c6d43c09e2400a5071f8","first_seen":"2023-09-16T04:25:35Z","last_seen":"2026-08-08T00:07:06.314197Z","times_seen":259,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/api/v1/widget/campaigns?website_token=HJM6ZCcyajGBXhzTeBKGYToh","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /api/v1/widget/campaigns?website_token=HJM6ZCcyajGBXhzTeBKGYToh HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiIyNmNhZjg4NC03NTAyLTRjNDAtYjEwYi0yMTA4YTAxNjE1NmYiLCJpbmJveF9pZCI6OTQ0OH0.7e8Xl9x7YkFF18ccfcHrLy-YkY4kBFSx-4W3f1Kmsuk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nset-cookie: AWSALB=LvOR+Imhiz9pHWoS2wjri8OVdVGYvNSAQ9lPo3FAlc79qznHtuxcSJ4/+wJpkxfFvNlHaxZQRPQ2HHsd5g75U19BGEE20TvjIribNjhRBWzG3korQE5XLASIeYXJ; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=LvOR+Imhiz9pHWoS2wjri8OVdVGYvNSAQ9lPo3FAlc79qznHtuxcSJ4/+wJpkxfFvNlHaxZQRPQ2HHsd5g75U19BGEE20TvjIribNjhRBWzG3korQE5XLASIeYXJ; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4f53cda18c2baa0c0354bb5f9a3ecbe5\"\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: 45c477a3-94d2-4cfc-9777-577b0377290a\r\nx-runtime: 0.025285\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIz6SN9yCeVWjO89yBSx8MlavaHh6G5EKe8aoBOZ8jiqZ5Lky3xx9yQbcNcCb2ePGvs8sNowsiGI1uifjmuJBgy6E4taceIaBtrwJkVgG9Jb5KD13oapKYVyDMho6afj\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c859f25b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-11T05:56:20.42572Z","times_seen":315825,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":876,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.056adb1a2ae34471daa998b08b7d4528f.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.056adb1a2ae34471daa998b08b7d4528f.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2403\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB673237339ACFF2\r\nAccept-Ranges: bytes\r\nETag: \"6ED88C45B665C3040F6355A0FA67CA8C\"\r\nLast-Modified: Mon, 28 Jul 2025 10:23:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6232551686171913327\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: btiMRbZlwwQPY1Wg+mfKjA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"6ed88c45b665c3040f6355a0fa67ca8c","sha1":"43ea61ee069f7a67027f6ff315c6c6b0e618c4e9","sha256":"55fdbdbf15f9415a55996ec176f50420f289cb629f7b65335960b47874056a97","sha512":"4cdc68655fcc62dd8ae3f1157a1cf577e0c319826330350827ae83f3664664bf990e363c94fc30642ed8628a17f84279776920e8d272b602b77ef539bf1af646","ssdeep":"","tlshash":"84416b730bc6fc1abd0784bb44683a1b433df994f27c1646ac1ba06e011260c3cabbc6","first_seen":"2025-06-07T20:38:42.097646Z","last_seen":"2026-08-10T18:26:08.79009Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1628,"timings":{"blocked":1354,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0dca2867eee3849a6ab30a7d202871a32.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dca2867eee3849a6ab30a7d202871a32.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1307\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108757CD23C37379EBE70\r\nAccept-Ranges: bytes\r\nETag: \"4119A4119257947D75974EE50258B121\"\r\nLast-Modified: Mon, 28 Jul 2025 10:22:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16156932685160513603\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QRmkEZJXlH11l07lAlixIQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"4119a4119257947d75974ee50258b121","sha1":"3485b77d3dd2df3d105f88462a0baaa1f79b3e13","sha256":"689f4313c40e98326ad30bdd24ceb7bd273b32cc0c080ef1528d425937bdeb95","sha512":"6238658ee4380acdc610ca1786d13b3a0b8265a5e32514690547a0cd9d9db1fb940dde7c9170c71d5e887ae715fe6b4b85ca9712b216a0661deb749091c24d85","ssdeep":"","tlshash":"7f2186a6c2869b1fd97ba12a87e6c185ac972145a942235cf60448cd30a814cf9d165b","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-10T19:18:27.112621Z","times_seen":508,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":1105,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.062ab514bd06f4718ab0dd274127ce1bc.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.062ab514bd06f4718ab0dd274127ce1bc.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1181\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875EE2400303293B8A6\r\nAccept-Ranges: bytes\r\nETag: \"D6DEB1AA7365929E2CF751B88E56B5D6\"\r\nLast-Modified: Mon, 28 Jul 2025 10:22:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14726560562703307949\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1t6xqnNlkp4s91G4jla11g==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d6deb1aa7365929e2cf751b88e56b5d6","sha1":"e0cda9534a323c08abd29d3ff2a056207354b0f9","sha256":"efb48136213036c6ca1e9d0dcb46c97b5b0e92ab6d12b5ba7fe6b46eb8e8089d","sha512":"69b9e0fe30ade3046b5d9a04674af070eec5fccde45e1610f24b81909c5534e6413269e1a0e13bb6139a1902d31931b6ab83e3a1264a5b6e6155796dc0e52e67","ssdeep":"","tlshash":"c821c6fda34b6d8185134b33bdb7945ffcbabcb24021d2447604b85354760091e1edc9","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-08-10T19:18:03.63808Z","times_seen":135,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":1113,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/isObjectLike-BA6vMenc.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/isObjectLike-BA6vMenc.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-307\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CaWgzIkdDmeBIQ4kTkRXeMNAlf%2BEvw13ta0jpDNfYDxeiUjfP7Q0jO9y5b8FyYmkJyBGHuUCKc2t4cAn2ot0fq2B7wGaNXOZSWXes7eOQIdScJLTc5o7LnY0JiSVdcA\"}]}\r\ncf-ray: 9f386c6e0af135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (774)","md5":"6eef7f38148347759577237fd45bc116","sha1":"d100d186349ef93e27ee3134ccf91de119ee20ac","sha256":"0a3b57f8a17b2d9ff08cd9a8891c8f8c7b3531ef4c41b9085d77945bffc7a8ed","sha512":"25fdfa5135f7d7f5185e8331048569b0402f5b852b7fcf4dbf1ffc79dfda1e1bf355c0e4884db1ab2416b75945395319cbc55e5e480ae54e863156c71824b587","ssdeep":"","tlshash":"d10149d5b845f5b103365de0d29f2947f138b5bc41eff5a1e0b2c2e1a92a1289612f1b","first_seen":"2026-04-28T19:21:23.102529Z","last_seen":"2026-04-28T19:21:23.102529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-BysKq6iR.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-BysKq6iR.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-261a\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYYw4PTCwI7EK5p4ln9EImHpVhgRhWoYsQNvFm0SZMU2hRjORDhxDUdp7obcN8WgaYK7Tu2bQ93F30a2MWuuXg9v%2B1286%2Bci7GxOann4NPaD6bycOB7fFd3zTtXNN6iB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6fdb5a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9754,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5019)","md5":"acd3c0d037ac4c0387882aa2286847e6","sha1":"bbaf51584fb007ef45285256c69f070733226c9a","sha256":"6fdf5e6eb90bd732fb068d4ab879dd99ce5a62780c451aaf547ed748f1c303e8","sha512":"fe57f77c12dc5920e751e9ee4652ba57cda18667191b922845da83500d91442075950215a3dbc000280475db8e0148272d7c5c61e51bb8cb6ef01be2bbb2bdf4","ssdeep":"192:C6KyKOKAMXwrqWsswE8WPHlXDRQwrrK/1o43jDoD3+IlvUfj:C6KyKOK22gw8PFzRQwXK/1xzAleb","tlshash":"f31208e4b048b8b0125bc5c0d1925d71c618a996e43585f8f0b64d3f2fc663da87b7be","first_seen":"2026-04-28T19:21:23.106336Z","last_seen":"2026-04-28T19:21:23.106336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.057766c08906d48919834927082eb7043.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.057766c08906d48919834927082eb7043.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 953\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB673237399BCEF2\r\nAccept-Ranges: bytes\r\nETag: \"92F9D15BE55070C0F267E7B9609211DA\"\r\nLast-Modified: Mon, 28 Jul 2025 10:18:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12504633752802818255\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kvnRW+VQcMDyZ+e5YJIR2g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:27.096227Z","times_seen":1629,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":1072,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/common/getAllSetting","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1Lp8Vi%2FO98S%2FZyfFucFg3yNcCEXh8%2F%2B8bVOHKkYk19BiioYomEqZsXml%2Bn%2F0u%2FHK0MrDvTqhnmmUn3IWr4Ty1H4wnXYOWBV%2F1lJBN8uqPsyMgpPjMOeo3%2BNbXrsk%2BjekmBD0dGB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c71fe20b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14662,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (12568), with no line terminators","md5":"a748c3776d9f4ba3d6d5469e5924a854","sha1":"989be0c3748b0ea3c7085db92268b95cac6905c8","sha256":"fed15b27dae6e9d9a37f2557f58981c39cb3040627fb171c8b7b4f98085b5aa2","sha512":"6d1bef28bda74ee2ccf593654adb9ee6fc62eb5ec5024c3e5159f414384852ba4725249805411e835ee68313943ac2f9061dd4d71e1ea6f2c40d56800c634913","ssdeep":"384:2hngLbvcPyXLZaKzwNbia9CAM0TJH92kT6:2hngLbkPyXLZaKzXizTCM6","tlshash":"3362b79762d4c878c6d109cc80b7335f645c3caffb91acc994879c9cd45a9b2482ba9f","first_seen":"2026-04-28T19:21:23.205079Z","last_seen":"2026-04-28T19:21:23.205079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0ca54a58bb2f4465a9f4ef3f2effdb0b3.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ca54a58bb2f4465a9f4ef3f2effdb0b3.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB6732373993CDF2\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Mon, 28 Jul 2025 10:19:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-10T19:18:27.090853Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":1,"connect":270,"send":0,"wait":273,"receive":1,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.041bc019ab40d4d2080f29eb7e8c2f9db.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.041bc019ab40d4d2080f29eb7e8c2f9db.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41871\r\nConnection: keep-alive\r\nx-oss-request-id: 69F108777CD23C373787C470\r\nAccept-Ranges: bytes\r\nETag: \"C17FB2AD4136F0AE9C0F8CC76203B089\"\r\nLast-Modified: Mon, 28 Jul 2025 10:37:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 230717204766387871\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wX+yrUE28K6cD4zHYgOwiQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":41871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c17fb2ad4136f0ae9c0f8cc76203b089","sha1":"987ca3f5149a44ec1e31833672d5661ce1a6a708","sha256":"d4a651e74adee7510d4da40304f48c9dca2f2130dcf4ae2b19d8c64e334b5223","sha512":"ce9b251f36a25ae4efde9fecf88197198c7031a001afd7e2bdc08578df55e820a4556ac049a8c80f0715ab69c753264bc443867afe91a77e7c585d13f0f0fada","ssdeep":"768:YepL62JLS//jk7O0tUz0dgF8TXZEz55FB5KGfLzO6OHtDd4i7ACk/31Rnqu+7POg:zpO2JLdO0tKQ3ZEz5TB5KILi6ONDdf7f","tlshash":"6313f1d0ce9b3131e5061c57bcadb8911c7a902ca337fe2e30c7f4256f94995c858ab9","first_seen":"2025-02-26T18:31:17.555429Z","last_seen":"2026-08-10T18:16:57.104616Z","times_seen":133,"resource_available":false,"data":null}},"time_used":2977,"timings":{"blocked":2667,"dns":0,"connect":0,"send":0,"wait":288,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0953ae77d9f4f4ade88da0d932ce7742b.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0953ae77d9f4f4ade88da0d932ce7742b.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1788\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877CE63A838326FEBC2\r\nAccept-Ranges: bytes\r\nETag: \"8CC76617933BCD695F17C017E6B3ADC6\"\r\nLast-Modified: Mon, 28 Jul 2025 10:39:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5191124354457799973\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jMdmF5M7zWlfF8AX5rOtxg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 97, 8-bit colormap, non-interlaced","md5":"8cc76617933bcd695f17c017e6b3adc6","sha1":"b37a86568f5158dac679b43b4e068f41b9f103eb","sha256":"295954d495c5688999859288492283b10250c7f6064425db12cd4dc971ef5478","sha512":"d2e65d186d85cbf912a7a9432f4204be2733261ecd31ca162b1fd27e790733f382e33b0d594c0aab5a87c5cbb88b84d6c2524c618c58999c82b479d619cee8ca","ssdeep":"","tlshash":"6431187eb126191cee327ec736b8a160b41f1c664050f412835730e01f782674e09132","first_seen":"2025-05-14T11:04:58.562263Z","last_seen":"2026-08-10T18:16:56.994746Z","times_seen":84,"resource_available":false,"data":null}},"time_used":2945,"timings":{"blocked":2663,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/61863.0d8f4adefa29ba2925e5.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/61863.0d8f4adefa29ba2925e5.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69c6453d-2aa87\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 27 Mar 2026 08:52:13 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 03/27/2026 10:28:21\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3ccc7fd47d150a596f5adedfe0bec0c8\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":174727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3069)","md5":"6e81e01e073f974a0b912981ff90632f","sha1":"f4b1c0e9a1e21b1393c8995585dd370e1220de3d","sha256":"965492ef0df8d2ab82a480eb3c9952a1a73bef80dafb8fb77495fc2930649e6c","sha512":"ca661e3ec6584d936c717f58463263896bd27eec09143d95730121f16db2769c6487eab93a66652ede732df9b5bc61a12a6cf12ba683f8ff3894bfafff32c483","ssdeep":"3072:769GrBTxaeLM8GO2HTxvAc8wtMcYRsCRgTwfVxwsbSOnecjBi4z:7yGrhxaf8GO0REwtMcYRsCRgTwfVxws5","tlshash":"bd04d69132a6f02613e1c5e618750402f31a7889794b85acf5bdacd73c9ac4e72bdf78","first_seen":"2026-03-27T11:38:57.878612Z","last_seen":"2026-05-05T07:37:29.007836Z","times_seen":688,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/32387.b74023d149900e240d19.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:23.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/32387.b74023d149900e240d19.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"697c6725-205fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 30 Jan 2026 08:09:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 01/30/2026 10:48:38\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 5d164f66178a2fb6a6d983960df2489e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":132604,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"f3e0ff3394a6b3a081742c8e7f220ca1","sha1":"86d92ebcfa54ffbbf8d1491bd45ab0131830a03d","sha256":"08cf3608473c086a17eb67b87dfeeb2e125e2405538f20bf89fc7148f7769b4b","sha512":"8e007d9807242757db2b10b00143547eedaedc2525eb682cbae6f964b6d4471a98152b2713788719fe20b29742678d92a8cd1fdcc703b2881e3ddb608af2d455","ssdeep":"1536:YvqY4wv/eXX5nEIk5HPukSjX31GLks69y3tvM3O+jf3AdG3v:YyK2U6GvM3O0n3v","tlshash":"05d308e83996f6516ab7026700ef1817733c1a1b280c4960a615fd8e75b842fb17bfdd","first_seen":"2026-01-31T03:55:12.8802Z","last_seen":"2026-05-05T08:08:29.947184Z","times_seen":2286,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/vip3-Clwkmra-.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/vip3-Clwkmra-.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3236\"\r\nexpires: Thu, 28 May 2026 19:20:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xnpf7xPWpRfDHsdQGzAOcy7axH1HTlbrwVPX7VMrPWtc5Cz9FaTLj%2FqHgXa9NzamoeVn4pn9PtPb8PNTpguQwC3zfBFpbL1kmyIbR5zemaKb3iocXPKC5M2aistR5r6U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7ede0e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 40, 8-bit/color RGBA, non-interlaced","md5":"cd1e75bfdd36b83dc37fbf2b4042275c","sha1":"a1a3bd4b573036ff8382ea185f206a78a7c8e9f6","sha256":"ff7a86ff6bb4b40d8e3c603c83f41679fe705a2d5edb9eb18bc71fe0dbffa113","sha512":"8dc497695ef53282c42752adffaddc2ed7617f81b2afa10d64e7ee44ca31513d6598a25549700103718fc0a4bd8457e0965d9e7bf7621f2da30d018c14fc7524","ssdeep":"192:5SzkndO90B3yq8FBdJB66T7gKlz+a4edyy22aUBd+95HpNT75zGxeGvWkGA:gYndO909yFnTTjVwedypz5JRlGlZ","tlshash":"9e42bf0eff3eef52765ec350c9ddb26e02951e455980f0986ea65c9e82b00f4c8f60a2","first_seen":"2025-12-12T21:48:41.83311Z","last_seen":"2026-07-21T11:23:30.555306Z","times_seen":8,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D_twvx-Q.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D_twvx-Q.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-538\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imcGLvQka3590VRdqqz65uMREcFLjLSJW95pjbZHmu%2FALf15pFco5YShU%2BVHl4utSBScTPVTXT8VYjYBFhjmoMs8CDoAyW1OxCuTEG5ea9kvnuV9Fp2V4FzrC8vQjung\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c700b6c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1336,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1335)","md5":"9580315d4b456e697486147362227cb7","sha1":"ae5d2268a99c14ed182befd86b1abd42671bc278","sha256":"d857eec607ee2c167c6e9cb22bd239e95c8593b6c96dfa07eac06f63e54e1f57","sha512":"5745da19b1434c8aa0990dd2b429ccb7b2e91359430dba8237104731688428e727738a6819ab5ed19f3f90972a2c7a9fd57bfc3cacd2499fd3885056a0dace24","ssdeep":"","tlshash":"8f214280b809ef3a15e348a110202054545a3f8d9ab495d060eb67b177e7c58eb0f72c","first_seen":"2026-04-28T19:21:23.079436Z","last_seen":"2026-04-28T19:21:23.079436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/home-banner-1-DgYWOFJC.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/home-banner-1-DgYWOFJC.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-2306b\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRWzo3YWfKFwK3hcjjRhZqn5tZH398d0azPbRcytRcltzZaF6siuWM88HjN0jMfYzomG0m2JuTavChY8Y5fdlvaORwvMr0JlvSKi7mexUgjgjP2xyVbQ2D155K6D42Na\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c73bbd635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit colormap, non-interlaced","md5":"dd87a1ac5396ae2d36364292971ce7ad","sha1":"5fd20445b7305f09ab9ecb3d074ecca9d692dc81","sha256":"e39980b40b17d5f04d89591e022da2cb808d01694b3958ce87a10237c7ecb6f2","sha512":"90627774b17f6746bcc1b19f391c0cca5627a02da4c98a173a6ac732a8bc63b27341035d53fc5976b12898699ee93981ff7d181f615303245e634dbcf0a39224","ssdeep":"3072:6MalipyvtCHOfX2BH7oEVdITEBh3+cL95z0x7WuzavfOdbTu:6QpsqW2RrITEr+cPIx7BzavfOdW","tlshash":"dbe312ee6405944537c7b09593b8a9d03c62debe6424748a38bc72f1d8f01f96fa8dc9","first_seen":"2025-09-07T17:41:22.072513Z","last_seen":"2026-08-10T18:16:57.067305Z","times_seen":27,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0f22860b22a004d0fb821c01e6a564432.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f22860b22a004d0fb821c01e6a564432.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2959\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875AB67323739A3D0F2\r\nAccept-Ranges: bytes\r\nETag: \"0E3174571262658F0033C46F013B26C7\"\r\nLast-Modified: Mon, 28 Jul 2025 10:24:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7945829093309742317\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: DjF0VxJiZY8AM8RvATsmxw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0e3174571262658f0033c46f013b26c7","sha1":"59777997e75bd2d7e326094605836437e155cc86","sha256":"f0442eea43b2b788d523f0ed5c226bc2edb51fa3066c5682a020e256facf3010","sha512":"a14bfc010c3b99f0686588d9622f3a13bb80b8b816ae78f76453a245ae236c932e867ba06bb85150d30a4bf6e48a2d64d01db7f06b8c3ce81dea25ef99376086","ssdeep":"","tlshash":"e3516d925e588055f6a5715891df64c5bf5fba323e83eca618f116d028b3a48b35e500","first_seen":"2025-07-06T22:01:43.234066Z","last_seen":"2026-08-10T19:18:03.634243Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1902,"timings":{"blocked":1627,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/video/charity-bg.mp4","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /video/charity-bg.mp4 HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1540096-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31896\r\nlast-modified: Tue, 17 Mar 2026 11:12:50 GMT\r\netag: \"69b93732-17fc98\"\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncontent-range: bytes 1540096-1571991/1571992\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QXprmnn%2BNQV6iph2zUm2DcZExAn1n26310c2Oip1ByLwKh9CcMkkRmlBnIu8sjSdP9%2BD5TKyuZuu4uaIijBF2QgYTprUIaHisa0CVQcBO4qVDrkpqZVfhuOOnYUpTMC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c78bcc135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31896,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d20e38932c9c2f0741c3ccde9ce89f40","sha1":"1188ea127ca7ce7f40f24e592b33ae9e1da3c7af","sha256":"adc46edeb8b6ab0f22655c5852f65cdb4dd6efa40205b47df26dd0941ab98b16","sha512":"8c63ae459a300a145d7d928933a95bb815057d8ca9e8f9a15425167456095206a2829df7e63e2905cb802d45b41e725ca6bf0fe44c911a022b4181be0347ad33","ssdeep":"768:XskfB68IjnLdv8KsTg9agFFUT2zHw6rIBWN6971jk4LuKF3Is:voX6DgFFbLNU79km7Os","tlshash":"66e2be187b654043d1d4153882f6d302737cecaea512e38ba9c3deaf9dd43285e556e4","first_seen":"2024-12-31T04:27:31.662761Z","last_seen":"2026-08-10T18:16:57.099857Z","times_seen":100,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/pickAttrs-daFEhGF8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/pickAttrs-daFEhGF8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-90c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qq6%2BpjBVTGE%2Bpnh9qlkXjZ6JlXjpq4W4ZMZV%2BTa7QOOQIMNYfdfSvTNXDblBswpywy7C8RM%2BynfswX8XMDKqkJWxqykh8YSnneR8UJ213ukN8noKPT2yuiGvnxyPHJv6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb6035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2316,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"3b57557a6b1baa2fb404a94f519488a0","sha1":"1d9c956d40e6baf242656ff41ae36458f8f16fb2","sha256":"38d253338dd3df5b4c1472642f244b4096d1798ada21d0dbb589748048681c66","sha512":"ebd14671e7f23a4f32fc33729c40868f0a36fd41f28657fc3a842d217bafed7bbe8faf32f33b7700f1e069a7f120d520bec4c81d0f8f2f6be6b945a43ac681a2","ssdeep":"","tlshash":"27419653720921ab178703c361a72200e76da201330a8c193538369a73d95a6f57fe5e","first_seen":"2026-04-28T19:21:23.21166Z","last_seen":"2026-04-28T19:21:23.21166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/collect-BZdkYS3w.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/collect-BZdkYS3w.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5cd\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfZiIiEw2e%2BKfC2rXxk253RzGbbVsnJDddwry1WlKzJytnCaSx%2FeFNPc2n2cQV96ki2sr8fQOuDo0iUwM3JhzPy9sYT4J2yRTXnzq%2FmA35ufciW35tIsn46aiAIlZOo3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6ffb6635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1485,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1436)","md5":"6a18bc1fbfba4a13347c267be02077a4","sha1":"62356b76ada9986f1caa6863015048cea9c7de5e","sha256":"126182b3f71c899c15420822b35dc3250aa363432f71c4f42af1b07312c0717a","sha512":"d9df215d39af0cb2f228375fa2ecc68ae0498a7c8e4dd2692e007bef939a8ff6246e4ab74cc8863dfe15c58abbef231cd398cbd119d05ebac15aff02e56326dc","ssdeep":"","tlshash":"0e31c001b270673d75ff70e4219a65e0e2165c68257490aabe19f6c1cfa8892ac19a3f","first_seen":"2026-04-28T19:21:23.21271Z","last_seen":"2026-04-28T19:21:23.21271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/logo-BC6mTaGF.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/logo-BC6mTaGF.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-afa5\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ENsf%2FahT8doZfK%2FNCn93WAaaMHKbjEPOpzEBe2YDRQKKJWQgUyutvhIbls6JSQaYzGfPP%2F2BqVNXOwETEJ0fTBRhH2kTJmWRdKX6O9zibArea36DraMuGPHs5pwSup6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c736bcf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 152, 8-bit/color RGBA, non-interlaced","md5":"6816936c7bc9d025e4ac9fccdcf0f1c1","sha1":"718a92c937ac6b7a9c8aa7fad72f6702a85d7bf6","sha256":"bdf33921fb707fb2c578d8a7f1759708b26a0f909e56cca9cadbce87b50f47d8","sha512":"5c6221cef69ee1f9604512b5f56de1a2c7a28330df6c6d773ce8153e5213df9f79a5739e701aa44707018a136501fad8c05232a874b3c4513fa3565e7f5cc974","ssdeep":"768:mvCk1OdtR88GPsUcZ7aYKmlcSnnN4rEq3+JrNfGfZLVKvpWVreJpUPKLZU27I2oy:EUvPUcZ7acJN4rEquBNuLMvpceAiZUe7","tlshash":"4e13f11887ac4493157ca7e3e14b063fc8970b68a3f2d83006c75667689a777bc9e5e3","first_seen":"2026-04-28T19:21:23.213684Z","last_seen":"2026-04-28T19:21:23.213684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.067fa1cfd85fb49a99f789f3770b7b778.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.067fa1cfd85fb49a99f789f3770b7b778.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1110\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876AB6732373981D1F2\r\nAccept-Ranges: bytes\r\nETag: \"155F85DFE1FE971302126E81ECBEEDA0\"\r\nLast-Modified: Mon, 28 Jul 2025 10:27:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17537158629280557879\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: FV+F3+H+lxMCEm6B7L7toA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"155f85dfe1fe971302126e81ecbeeda0","sha1":"a41ab8f31d2461f114a1a0625ab6a9520c7f90fb","sha256":"b15f065d7ef77728658b464df170ed55c4592b33fbd5114a6c9ba6959c4fc9ff","sha512":"c6e452c6fe1d358a72107c34475ddf3de212e4bc2ef539bedcb655643313154b68ede92cc37c68e9a2c55adf219821059bfdf9a67f33572c49687f30dd8b34e9","ssdeep":"","tlshash":"2711ecd5b3cacee484b9380fd583059d0d98454bd1304bdc54bd5336d5914cc1a07f67","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-10T19:18:03.600857Z","times_seen":190,"resource_available":false,"data":null}},"time_used":2171,"timings":{"blocked":1897,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.0f033820653f845b287dbbb1d9818007b.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f033820653f845b287dbbb1d9818007b.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8993\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877CE63A8383281ECC2\r\nAccept-Ranges: bytes\r\nETag: \"EDCB0F25AAE394AFF3D6DD0E9AF9F4F4\"\r\nLast-Modified: Mon, 28 Jul 2025 10:42:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 818380554639602818\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7csPJarjlK/z1t0Omvn09A==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8993,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"edcb0f25aae394aff3d6dd0e9af9f4f4","sha1":"ca92eecae7e4274cb339d7eca6cebd3bb87a3024","sha256":"c05953456467c87d414e70bcd8908ff3fd7430c1c688e6b54b9ce174e5fee667","sha512":"89abde0806e880f1fdfbc69edef75725995d952acc7cb39ae39495a7e04a4b59cb4ce5960007c4fbfebcef47a10d90dfcb007b0e4e92924b0f99a15129f63674","ssdeep":"192:hk7ppEy4jChdKyFpP5/T7inI5ByIrvQI4kwKPNSS0:hyp1aWpPp7i8yIr4OJNw","tlshash":"0c029fac3edde4a4cf1b60a3c35172aab534ad4deca12b69606c2f5f35277c514744c4","first_seen":"2025-09-07T17:41:22.102613Z","last_seen":"2026-08-10T18:16:56.926866Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3194,"timings":{"blocked":2906,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akAYp0PJUsI%2FdzntiEp2Mjhu1PCbU7htqXaMgv8c0B%2B3UvopdjmxuPtbZaJ%2BBxIGWE1cfRKWh6HwxdvyezeSzx9ktDcDYb5gV7CRUvr3nIm%2FDv4YURjdMf58pdlHP4JzkMIDu1w7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c788ae0b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/home-VA_RSAJh.lottie","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/home-VA_RSAJh.lottie HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12217\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\netag: \"69f057e2-2fb9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVaO%2Bl9csrDnU4ZGAyBJo3AiAv3up3qpZTEO%2BE8zFoTmATXZqhQh4yzk4CyuU%2BElpqW7E7BVAMQQFnTtiX8rGju9oRjDtTWbi9xGQbj0tpCbDg24yBI53TKWj6aCdM%2Bk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c7bcd3835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12217,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"97fd063000570de23ed41d97e952eea3","sha1":"a57c2aa7d7b1b18344e7ad78fc25f722ff588582","sha256":"0524e248be59a03f093e680252b0eb5d5d6c211a24bb81f26b74e00e3e8cbbc8","sha512":"fac989db3451e2bf2c60db849f12d2c28c5a264aa6abd7daa99a8fbdacb7eea1aae5b5fb1e45e5f548f4bfb1b60fc68e446039d7e1c8ba646c8743a1602f998c","ssdeep":"192:8AJCyByxUjix/IzqpQJMyuBBR8mCyZiKMnvOM5eve0/w3xOMNKLR61fQgl:Jyz+URVTb2R5evWOkKLR61fl","tlshash":"9842bf6fd2a937e7e094fabcfe338064176878496cf73916ac28e5049e0b145c1dd968","first_seen":"2026-04-28T19:21:23.216653Z","last_seen":"2026-07-21T11:23:30.537768Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/time-frame-view-renderer.cb932d32cf206ea62e41.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:23.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/time-frame-view-renderer.cb932d32cf206ea62e41.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32f9-669a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:34:19\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 70de6b89dab54d79d0fb92a67fb313c5\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3070)","md5":"8b0d65afc83768b61b2c99b64a1cffc1","sha1":"4ed7ce4e37d786c0b025d644bc5054abcb33a87c","sha256":"0bcedea3705f8cabb510e103ef9f659a50faf10eca63130ffd4cb7c7ec6ae965","sha512":"66cf523847cff6e0ad785ef7e62999fcf841bd667b8813102a79d2924a6ed370515b71ef40b53a08d0ff56e168667570632a39487328c5fb366c0da52ebffaa1","ssdeep":"768:NXX3Udpgb6U/PLby/02ktrksvpagY1t7UxYhUu3QVg:9MktG77gZC","tlshash":"5cc2f9957160f0f462e705d9806f048bf63a3868744b89a9f2a4eddc76e854cb037b7e","first_seen":"2026-04-15T14:27:01.634758Z","last_seen":"2026-04-29T07:45:38.601781Z","times_seen":184,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/createContext-DTDk1Our.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/createContext-DTDk1Our.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-12e8\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jskNkbENEY8UOTzi%2FxLUXQ4TiVbUMzr6lth2vEWVhajP5nUFJNAvY%2BH7j9PCKpx2PJ8RpcINW0Lu9Ic7zWv6AukZmKER7Orn%2Fu7e5hQn0yiMxUOVM0cKuc9gcqHWBfJh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e0af035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4840,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4839)","md5":"1d3abd1ac11d033701ccf158ff36d372","sha1":"bc0d2b984e1f7b28e2d07d185089b33c10ad0c2a","sha256":"59c92399d44860b0238cb8c9eb87244647979df92a68ff374312d117a2f50367","sha512":"ace51beddcaf746fe8141bb1967e70ce80c93731e775bbecfa0c732ec007d2fb1d74cbde73f955d41a2771ff292e20cfde8a33c1077148cc8a50d3193f9672b5","ssdeep":"96:OQMhADesPaYFwQR7cGT8Kj/fzI3OBelfVP2bIsboYpHfv:O3hADLFTxJj/UOBLMwoQfv","tlshash":"32a141c975d6f47283765ce4806f8d0af17d18b5908ca08091dde6e2f8a982ac622b1f","first_seen":"2026-04-28T19:21:23.1747Z","last_seen":"2026-04-28T19:21:23.1747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/37833.8457808decfdb6b99100.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/37833.8457808decfdb6b99100.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-6bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a3214dc6d895d95017a08778e484eae2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1724), with no line terminators","md5":"26b2f4662fa34bfdfe2f9290d6a5a6f1","sha1":"a250999df0cc87843390fbcb11acaf3018d4db3d","sha256":"a0125d5a32019350b8402e4a4a383763e07af6bc46eac9321f8b5eb77e1d2220","sha512":"4e806a479287d3018f606cec1f1264efae96e39f519d3a308b20b3fbcdaaf1ae58eaeb520254c00cebfe03c95020499ae89e14f7fa1fcfee3fee85b80702923b","ssdeep":"","tlshash":"b331ae75d325a228bd6a1a276340e1ae319cf4477777921cd581b968c0d17fd3633398","first_seen":"2026-03-16T12:25:01.231403Z","last_seen":"2026-05-15T10:22:28.411184Z","times_seen":2680,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/pickAttrs-daFEhGF8.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/pickAttrs-daFEhGF8.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-90c\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZhydx1DBgo%2BuS7JwfNlYCKX3ZbcvHGL%2F7M9A4s5K4V%2Fib6iWK2Mm5H%2FjC6x5EzVLo0CPm19Tj6VRx56ZbKapatm5CsEU5%2BlmroXyQrAmS1%2Fl6i%2B8yMkVrcWzbeCQ%2Fzg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e2aff35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"3b57557a6b1baa2fb404a94f519488a0","sha1":"1d9c956d40e6baf242656ff41ae36458f8f16fb2","sha256":"38d253338dd3df5b4c1472642f244b4096d1798ada21d0dbb589748048681c66","sha512":"ebd14671e7f23a4f32fc33729c40868f0a36fd41f28657fc3a842d217bafed7bbe8faf32f33b7700f1e069a7f120d520bec4c81d0f8f2f6be6b945a43ac681a2","ssdeep":"","tlshash":"27419653720921ab178703c361a72200e76da201330a8c193538369a73d95a6f57fe5e","first_seen":"2026-04-28T19:21:23.21166Z","last_seen":"2026-04-28T19:21:23.21166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/partners-FqY_vTlj.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/partners-FqY_vTlj.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-6acb\"\r\nexpires: Thu, 28 May 2026 19:20:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nb67P6CStsomDs1G7Ng6eVyS3AA61ZvKRdiiZ4FzTlSYTzV8DBt5InOAgq3Mr6VHQyAjaOeSTb7jlBtk8p%2FdsTP9qWJt4AG9m0igF%2FjpuIo%2FnNBHuF%2BWhO%2FWKjJ36nmn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c74bc0235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2520 x 106, 8-bit/color RGBA, non-interlaced","md5":"e8831b7fd83c0e601bf149e6da93afcf","sha1":"6eff38ec6d094605dab7aadfc865cf7f5d8dd48d","sha256":"8192d2c786c3151f9c5f59294d9fd077697b0d8bc2e2e92c1df9087115e2c260","sha512":"b03ea3cbd271950d40095c6751ed077dab0d21471fa4a676a8a5f941b4eaba7405b3a3659dfdcbe15f3ae7e0b7bfdb5d73f202597bd1a60730083f28a6308697","ssdeep":"768:P2wqOLDDhW+uc6sSmjN45E4PebSyKCOYnQyC1T:P2w7V/uc6sSmjN8PebSNCHnJC9","tlshash":"82c2e0a605b1e7478d8f41bf7c722f532c03981991da68d0edade9cc9851fa70e67680","first_seen":"2024-12-31T04:27:31.711692Z","last_seen":"2026-08-10T18:16:56.883313Z","times_seen":121,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/bg1-DvCDFEGM.png","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/bg1-DvCDFEGM.png HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-Bt816wsy.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-17a58\"\r\nexpires: Thu, 28 May 2026 19:20:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WS%2F4bIuYi2krhv9hKNX%2F%2F8mflsqX6qJRKFAmp9sDmJg7%2BJHgdMK55V0HVEErDv4kyMKf0IRUIYB10IVgFNzQZ9KLGcdmoSWMjW44Mnw1Xjg2cndHjmmDqVl2HoF6XFsb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c753c1235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1360 x 544, 8-bit/color RGBA, non-interlaced","md5":"ce43fc1258ba2254357bcd472366e8ec","sha1":"344792e9aae654c681db9c3e5558ffa36fa3aba0","sha256":"f4135eff83c410fea086c359a193c3881816650cd1f1b0bb20a81ead1b40cba2","sha512":"8d038d7f9f296981b4916446d99bbc06f1591ab8263ebf26f93e10148ae1da290ccd543707819b0b5551e6c5597ed0eca9dc5b2c409dd380cc88432b4e7deea6","ssdeep":"1536:kGcQwwfT7lh2I4eiMJC6pMTeti5t7iBGO+HcS6THDNiIgqxh/1rSnnphGnW0swL:aQ/fHloeiMJppMbclAcS7qtrAMnns2","tlshash":"3f93021af8bfee25ce9e69d6603b2d72acc371b142c429b4a47d6dcccd8116edc12449","first_seen":"2026-04-28T19:21:23.218977Z","last_seen":"2026-07-21T11:23:30.593572Z","times_seen":3,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.01ba2b323da9945138df2c479aa7cc91c.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01ba2b323da9945138df2c479aa7cc91c.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 894\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10876AB6732373971D2F2\r\nAccept-Ranges: bytes\r\nETag: \"A53CFB070EEBB9A41E942328DB6F08B7\"\r\nLast-Modified: Mon, 28 Jul 2025 10:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5745280632666502230\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTz7Bw7ruaQelCMo228Itw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"a53cfb070eebb9a41e942328db6f08b7","sha1":"8bf5ecd85b99d18dc0030051da66844f5a979a1d","sha256":"a9edda4d36929c281cf08a07abaa09d9950fb9545c001851a82229e53af78472","sha512":"cea73e5fdf649fd0da5ecece5449dd71e0eff4e020308b7af8e03a9d3fea12dd14df6791eb44b1ddbcaa92de4a9b78ac511a04240253789e4bf10dbf38e34488","ssdeep":"","tlshash":"311167dbcfb108cb6605746a86f07135f742d19d1695d8fa413be6a102d3919564f30a","first_seen":"2024-11-06T16:41:01.091862Z","last_seen":"2026-08-10T19:13:57.822914Z","times_seen":230,"resource_available":false,"data":null}},"time_used":2425,"timings":{"blocked":2150,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76133.3064908a6d7305ba61a9.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/76133.3064908a6d7305ba61a9.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb87-7ba6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:57\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: dfedf62c2bc314e5806178de6a0ff023\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"1e33116d33238d719342fbabd86ffca3","sha1":"6e93f841a95eec8cc781008e03c7953e404f5481","sha256":"0237a34002ba43acc2bf41c9dc9532eba6a9d7c37b3a4580f71c6c1d5347ad32","sha512":"25a0cddb3f4b1fc08da410c1261af3c70f19f037ab0346069affbd17a33a821ec41955e38a05d7c3d22933d8c1aa86e504c7b43bcd0bc87296c2e1ed7adbff32","ssdeep":"768:1LY8jn/pG/tiHfepFKvq3Mu3cbSZuYsg6RnnJv7dSwg6NBpmi642UOeIz9XXBRlx:1LY8jnhG/tiHfe93QVnnJv7dSK7MTUlU","tlshash":"02e2a642e242606743f381ed0c354503a338abc678464dacb6a98def756cd4cb5bab7d","first_seen":"2026-04-23T10:22:42.529241Z","last_seen":"2026-04-29T07:45:38.594224Z","times_seen":96,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/17801.15c5c25d27a56a0df772.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/17801.15c5c25d27a56a0df772.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e5c53c-19360\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 20 Apr 2026 06:18:36 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/20/2026 10:38:12\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9bf805bebedc2bcdfce30fed9f34be27\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":103264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ae28448cb02ee3491028f82c9e212b5","sha1":"840f868063e33818424634685f83f5dc9c54fd85","sha256":"6d8af262e85da3952f96074c40841361fe81de28292a6654a4b6a5c8c0d9a1b6","sha512":"615657ad93d0166da77c83a566e60f1d4002b7a4a1c811227c935f2a4ea91b16e01893aba5c708e2a1b40c39c6e773c08d99e62560bcc1c8df301a3b9f1b3821","ssdeep":"768:ywlwokCcAfM0x/2bcVtmUK6ogvY0FGhgiU4vWQs/WQ2das9:oIVtmUK6ouY0FGhgi1vjs/WQ2day","tlshash":"dea335bcf95192bb5e9b587f4398f6697648f943fd066f86bf00c00020c6ee710e5a5a","first_seen":"2026-04-20T12:30:34.890238Z","last_seen":"2026-08-11T04:48:35.748314Z","times_seen":6415,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/notice/list?pageNum=1\u0026pageSize=3\u0026orderByColumn=notice_id\u0026isAsc=desc\u0026key=INFORMATION_NOTICE","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"POST /api/notice/list?pageNum=1\u0026pageSize=3\u0026orderByColumn=notice_id\u0026isAsc=desc\u0026key=INFORMATION_NOTICE HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HgnYGzqhLfBMQ7qQsEQ3GBEom2UU6dL4zflaqac2dcaFWEgUir2c5YB1laugJlMce0T2VVoDFwrQikxgk57mqxCKoYHVG%2F5vACJnDNlI1xi6CuuI5jmuTtIA3%2BxsV2zrudi3yP6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c784a80b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10635,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"171ee3f24eba4530a1293c8c323b6237","sha1":"1cc8b481104487986897e9e61c0e6c516a069b10","sha256":"aae0eef2741d13696fc24af7dc2a5fe996e1f1cba7b0c19191f2811e1460fb20","sha512":"4ae2379b755e4d513f92c64f10d6d5b440cd3387862f14fd9840f411f01830db364f959fc895c4984cf6fbe3203aef6555128a39bae867cfdadc629a99bbd52e","ssdeep":"192:CudAtew9fwJxvjbSpkFz5pS9QTa4vjxoq2Wn07DehtH/yNvjc:CLkyg5M9HVWn07DYtH/l","tlshash":"0c2207276b781b69099342ebb71d37deb32e147e5b610aa1798dc83cb0964b4473bcc4","first_seen":"2026-04-28T19:21:23.22102Z","last_seen":"2026-04-28T19:21:23.22102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/78124.975fb41d42ae2d51c08b.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/78124.975fb41d42ae2d51c08b.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32ff-bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:03 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:34:19\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fa13fad40eafd8c11a170b75b9bbf196\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d41e2d9340f0acb54930ab3ac629035b","sha1":"543a7964ec708fd72f33fd1e5ade7f185832cd98","sha256":"fc71e7aea9892d509794361261cfa1aa19e87f31e89548399eeb05a041de477d","sha512":"a3dd70c85f122c9cc97275462880cfb30f0f8959c1346593c92b9cfa1b73fee7fb83ef73dbfd36f3f317d22008729044e9a856748f65e8444f56aa0d241bb1a3","ssdeep":"","tlshash":"37c0120790472b6054a3cafa0fa034516524eabe881147e855919bd1d97ee1c651342a","first_seen":"2026-03-24T10:38:42.744841Z","last_seen":"2026-08-10T18:57:37.822113Z","times_seen":2203,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/91550.d905f6e60b282987b3eb.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/91550.d905f6e60b282987b3eb.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad11-3ec1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6840c63ae246a3186a18b3b4fe0c5599\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3063)","md5":"21260fcdd0340fb36ee260ae7e429445","sha1":"e9308cad65d9e791d1c42375adff1b281b10ce21","sha256":"7a0bc3ec97e204e312c4bf7a12df68c0c2a199c2166b8b54d6c67a25adb66910","sha512":"b8a5070802ea78ab852c7bd1f7084673411d2e6d2b0c9df6ff5adffbd5e8a2c9ac1d9b25f0d0a74bdd9d0447a2785c14f8d5381aec8258b01b0e75209f08af2f","ssdeep":"384:tcwOev+zZoeDOR0zOlfHRFx0Src3/izW/x+B7SM96ktcXWp/iWRSlqtrGqj07sei:tcwOeMZXk0SlfHfx0Src3/izW/x+B7SU","tlshash":"5e72c7c9b5e1f08943e66ce0807f440bf13a6c68314ea0a8e3e9c4d66d7658e9177f79","first_seen":"2026-04-07T11:13:01.734765Z","last_seen":"2026-05-05T08:09:20.493452Z","times_seen":1012,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/52653.b6e0332c914a3e30ea56.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/52653.b6e0332c914a3e30ea56.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0f-2f68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:55 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: c161961ba27ea0830ebffe57baf2322a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12136,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3070)","md5":"e36f230a63e1a9bcdbd81db22bf9a79e","sha1":"8a5bb3acf4350fb0072256616f77bb1a02fd9c4a","sha256":"cf452e7c6b0bb28eff6f75ae3ea679d03389d3e3b4ba5e8f2783bc40cf568e3c","sha512":"0caa6ec87a711d2b1244e30b45e99fa665e34813f01cb45298c4a0d61c6b84db618ca274100d0391ae4db6295f7b9b7bcaca1ece3eade948e471c73dce5508dd","ssdeep":"192:WIqc4iO9WvUkvL+FnTN3q/Kt2Jjfxi9nulrIjUeSlbSkDtHa:xGkUkTGnTNa/P9xKJjUeaSct6","tlshash":"0442d8b9b2677117c3a09097d4b69043732c259078498c74ba702dee39d8c96f5baf78","first_seen":"2026-04-07T11:13:01.690968Z","last_seen":"2026-05-05T08:09:20.493983Z","times_seen":983,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/packs/js/sdk.js","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /packs/js/sdk.js HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26123\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Oct 2025 06:57:22 GMT\r\ncache-control: max-age=14400\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\nage: 107910\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ujcb86iqJgMbR6FjLPKd%2BBWGy3c41TFmReHAN8P57b0ebtvfJ3xITvo1PMSy5FJEmztQCQb6XiY0vobCTNZENlzac8lrY%2FbWwoNkK%2FGQPwGPv%2BLQwSDtbHx34Lrvg%2BbQ\"}]}\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Tue, 28 Apr 2026 19:21:18 GMT\r\nx-cache: HIT\r\ncf-ray: 9f386c69f9ad56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88356,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65475)","md5":"de56740c85f773b4723e598fd84cf835","sha1":"8878a6f1aa74add0f08ce6f9111a6bb04b0447f0","sha256":"3924a1a242ade9dbec1c64af8f9076f0a0096eea08d82f483c91c9d8e1c0bf2c","sha512":"eb3a7990d22343184275f91454a580ca2cd8a3a5d7536a343dacdbd09a69f9fcd4630a1da4823a65224a7500dafd90b6eeefbbee56fc0a46dc0b544bd96288d4","ssdeep":"1536:KObC2TkGck0H0m030D01wryf5kvQv67W0MgifpMjNEjNP000mf4fgXa0Vkx4r1Nr:7dck0H0m030D01wryf5kIy7W0UpMjNEZ","tlshash":"6083c7c9f2d2b0e503e76ae501af660eb27a9d54b40a95d0d761e5d0a8bc98f4037f3c","first_seen":"2025-07-31T16:26:05.394936Z","last_seen":"2026-07-12T15:00:50.604669Z","times_seen":74,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":55,"dns":29,"connect":1,"send":0,"wait":1133,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index.vue_vue_type_script_setup_true_lang-AUZ_HxoV.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index.vue_vue_type_script_setup_true_lang-AUZ_HxoV.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"69f057e2-241\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXmvqcy91I%2FDOm3hdlEswTAJW7doDmI%2Bxien%2FCqz5sMDFD%2BoEOzRkFf%2BhaDWq18n7gTsoph6Tobi1ExiXoX14E%2BP2J%2BpN%2FVC6ZHVkY80V0x6wAeMBeUSPPAag06CJFb8\"}]}\r\ncf-ray: 9f386c6fcb5035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":577,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (576)","md5":"d68e23f11410358f3802c98ab0403380","sha1":"c680ac5f36c96ecfea169651956f27a1709a4f4b","sha256":"179f567f655d157758b93cc4fc31da876cbdfb71fdf070fa500b4e2b067015f8","sha512":"403f43aecb23100c2071a3bf6567e05553d251ac2aa26bcd4eeb5fad2cba08f6d043b51b5a8b4928e9c8a55f10105a1cf50a85c1f57701fd000df21a4260952b","ssdeep":"","tlshash":"baf0e10aec60faf9a98f0c541d320128012a17ad7971d4e195dbc65472102f1eb6e204","first_seen":"2026-04-28T19:21:23.116342Z","last_seen":"2026-04-28T19:21:23.116342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/hmac-yXOAIEY2.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/hmac-yXOAIEY2.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-54a\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2Fn9T0FoOwHSgHmrzZZBWm3bSkPqncqnxw4yGxl78Gwv7KL7kxRg77yWb2aVpRDThOuHeb0uiYiNdoQXBMO58LykxIJ5FdmavVxMi7thypSDF2zuT3ZoJuS9t3hfGnof\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78ecd035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1353)","md5":"83afcd976aa2802647cc5809a4a548c9","sha1":"56164838ccb6ed0a9a6a6e6b5d677da0abb3d80c","sha256":"d6a942f21e4c97411f98c178f05036c3677fa8e0b1d02a14b20fee49fab7f3a5","sha512":"c8f36519e5f653233178710b9c646690a03d4371ba5d6632f012e65b587b02e64d31e6e514b94593b772bb99cf08d4d82718132a0a0131e523601b823771fd8c","ssdeep":"","tlshash":"ad2101e0926085a0436990d61e108471e07080d7a943683cb2bddeddf425566e9bea3f","first_seen":"2026-04-28T19:21:23.135411Z","last_seen":"2026-04-28T19:21:23.135411Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/common/getCoinList","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCSs7F1jwYYHG3IvrfANTogY3YENjkWo7BqPRn0ITZES04gAF%2FEeOnAPbM2v3KvNl9WmpYEBlyFW56Nc4tm1oTi1dlqKFkDDyRSKcjYs8o1nh0AJ2H0b6hrsE87HwuEH%2BMzBnDWE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c71fe19b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41249,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (41233), with no line terminators","md5":"512ea21031256d689c7e16d47a2d5aaf","sha1":"7926a5a1301acd85643b8b56a26e5e4160aea298","sha256":"e18687a87be61e3897467b9f77d05154b6821d8024f43062a5e3dae897ad3292","sha512":"f41c6eaee13b413bad0fd8ce85d4a3f1b19667627fe69680cfed1deb82e3eec9346ef1f931175cef3a3ccd25e907bbae2f52bd642b91eace4496b9e1c529ba3a","ssdeep":"192:dXWtRoX5OXMyXX2tXhAX/JpnXJTTXLETXKLuRqaKgWbcLQNGCy9bYh5n30rmiNzN:UZre30Y9rQqcpUCFJh4","tlshash":"63031d56622588bdc4bec4d55dbf3e07648d363fd6d0ce0ad5ce89888acceb1550ab0b","first_seen":"2026-04-28T19:21:23.225293Z","last_seen":"2026-04-28T19:21:23.225293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.voxsig.com/rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBL1dKR2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--013c6ec9a097f9437e77ccc3ff35f4603c3ead5a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RTNKbGMybDZaVjkwYjE5bWFXeHNXd2RwQWZvdyIsImV4cCI6bnVsbCwicHVyIjoidmFyaWF0aW9uIn19--46d8ca4c5ace57493b6a1637714ed6d6a9d0d690/2026-03-29%2022.52.41.jpg","fqdn":"app.voxsig.com","domain":"voxsig.com","tld":"com"},"ip":{"addr":"104.26.1.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:23.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voxsig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 19:15:42 GMT","end":"Mon, 22 Jun 2026 20:15:41 GMT"},"fingerprint":{"sha1":"04:0D:D6:21:68:99:F2:CE:81:B8:94:BC:07:67:7F:1C:CA:22:EF:3C","sha256":"63:DA:75:04:44:92:FA:71:FD:BB:16:92:4D:E9:58:E3:89:5C:4C:FD:E5:A1:F9:97:44:E7:EA:66:A7:83:3B:E3"}}},"request":{"raw":"GET /rails/active_storage/representations/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBL1dKR2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--013c6ec9a097f9437e77ccc3ff35f4603c3ead5a/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdCem9MWm05eWJXRjBTU0lJYW5CbkJqb0dSVlE2RTNKbGMybDZaVjkwYjE5bWFXeHNXd2RwQWZvdyIsImV4cCI6bnVsbCwicHVyIjoidmFyaWF0aW9uIn19--46d8ca4c5ace57493b6a1637714ed6d6a9d0d690/2026-03-29%2022.52.41.jpg HTTP/1.1\r\nHost: app.voxsig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 28 Apr 2026 19:20:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://vox-bucket.s3.ap-southeast-1.amazonaws.com/ofcmwxyw68riokuywytai8lfswi2?response-content-disposition=inline%3B%20filename%3D%222026-03-29%2022.52.41.jpg%22%3B%20filename%2A%3DUTF-8%27%272026-03-29%252022.52.41.jpg\u0026response-content-type=image%2Fjpeg\u0026X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=AKIA3B62XLIMHQRD554Y%2F20260428%2Fap-southeast-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20260428T192024Z\u0026X-Amz-Expires=300\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=07df22e869eea6db394a9aeccbcaa139a8fcc646de1370c9d0a56285ba459f72\r\nset-cookie: AWSALB=mBS+ObR8mG5uTKbXhh/UIp1zwUlqVueraOlytxeOaHaS36v07p1lbprAjM3EdqL69O0jFPz4j1gFjW2YVdbCciAfVUH4TF0zpZVdZDN3i/lmuIx3Ovu4/Lj2YhLL; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/\nAWSALBCORS=mBS+ObR8mG5uTKbXhh/UIp1zwUlqVueraOlytxeOaHaS36v07p1lbprAjM3EdqL69O0jFPz4j1gFjW2YVdbCciAfVUH4TF0zpZVdZDN3i/lmuIx3Ovu4/Lj2YhLL; Expires=Tue, 05 May 2026 19:20:24 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=300, private\r\nx-request-id: 07592323-e6f7-4196-bb28-3104087e2d61\r\nx-runtime: 0.021142\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bTHLF1lu2fFblbX2lC05iqR1FWGOXNkehCoWclrgacvdDZh5NUbIk%2BmNtHjYbjG8kMUMOvwxRAiGQvVXt6czXNZ8lACJ39y%2B79r3R0pOA%2BlJgJ0V44gVQK6xVDL1DCF\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f386c8a5a3a4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12545,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":876,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"app.voxsig.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/73023.fd990e181d115221d18a.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/73023.fd990e181d115221d18a.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-102a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 097b05844b456f1508ca873882462626\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4138,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4138), with no line terminators","md5":"c2ccfc1d8935dec38580e758457b8ff9","sha1":"18c81f1a6e7090055f99c6e2464f317b23559eb1","sha256":"bd7210a171900d26e9dcc6fd3f75972670c267bab297d23e5aed8181c8951be1","sha512":"20a1f84029b6dce251ae1f1c1a9ce9cb8520a281f47bb58b27f193d457b2d4d18c2cf074c18e9f89c2aef0271c22cfeea7e194908394547bc1c76416cd69da88","ssdeep":"48:DAGIPAGIOfKI5wsV5ksVDU6/0IMIB5CUY3w0JMeFDWIm+RhX+vmRA0rE5WNw5mNv:Dkf5F5JAcJfTQRKgBRhX+uRARemmZ","tlshash":"2e8158bf067c45983922470157629b147178d3fb652248bbc37539aa4fd1eacec32f68","first_seen":"2026-01-14T17:24:20.986498Z","last_seen":"2026-05-15T10:22:28.379716Z","times_seen":4294,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.08ac7b00758a145bfb09cd82469ac248e.jpg","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08ac7b00758a145bfb09cd82469ac248e.jpg HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 147634\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10875794D103834AB512C\r\nAccept-Ranges: bytes\r\nETag: \"DB3ED2F748412FB9FEC2C3EF3846BE0D\"\r\nLast-Modified: Thu, 23 Apr 2026 06:20:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5740932815994604259\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2z7S90hBL7n+wsPvOEa+DQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":147634,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1450x966, components 3","md5":"db3ed2f748412fb9fec2c3ef3846be0d","sha1":"15cd613c4876a75d35ddab1e0c88afc434b8285c","sha256":"cfcadc5d5c162ffd883772955536d20048a9025ee037e3073f29d1f56d32bf66","sha512":"77f610727dc0d7f226ff17db38c6a12f8aeddce4cec6a33211fda9180c61446b6cb769dbf8307493083bf7f2c9852d95819a6c0371fc333ba68d89169a075d75","ssdeep":"3072:T02YS4xyq+4IJK3hPqBqIePly+hmSg4igc4rSNrg:T0jSJq+n8qBqIehFhrSy","tlshash":"3be312d688220636f4a54d718ff026a4fbdb6db77a10a088c651a517ccf5186ffc30ba","first_seen":"2026-04-28T19:21:23.226827Z","last_seen":"2026-04-28T19:21:23.226827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":907,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: AWSALB=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R; Expires=Tue, 05 May 2026 19:20:20 GMT; Path=/\nAWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R; Expires=Tue, 05 May 2026 19:20:20 GMT; Path=/; SameSite=None; Secure\n_chatwoot_session=jr40ff2bV8QbiGb%2BgKA4g9VipWgFaVkjemgLUzxL0M5CiLYXUvtjpRK8nt4OfTalDQh%2BJzbwmOzWu%2BPQLn8PKsWWjPowqizmgl6vDX%2BIAWz3b63c6DK8EiVf3bFrr5zj0hek99lh8hQG%2BSlXMQlzWLh6OPXEegppGqGNvA13j%2FTsUX3RQNbC0GUe4ce9JJTk3OreX%2BwymVpvgpz8FwFQTg1RftAPfLZCOhUjSEmK8j6SNO1HXjFTpM14rWqm0aX91TGdNXJkoxniWJ70UtBmSO%2FGoHGjwxSi7Q%3D%3D--QF8rxA56Kqy3%2Bcyp--F%2FsQt9DIXODZbRb0QcBODw%3D%3D; path=/; HttpOnly; SameSite=Lax\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlink: \u003c/packs/js/widget-6c7c091a5c491401e722.js\u003e; rel=preload; as=script; nopush,\u003c/packs/css/widget-91db6852.css\u003e; rel=preload; as=style; nopush\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YQn%2BOxw4ynTu%2FW%2BjDxUIo5uzIDStpVLJFKJdWF%2BQV%2BNU1dGkfx0c1Qzq2pBhplYYXt3MuJswYsoTEsJUUZOqt%2FLebSKKFc8sqCH3oBwFqpU%2FRveWpQBnfOrkj1FW3Fj\"}]}\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: 2623fc3d-f808-4776-8ff6-7fda38de5784\r\nx-runtime: 0.088493\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9f386c7168eeb1b8-OSL\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=112,cfOrigin;dur=96, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]}],"data":{"size":8042,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2757)","md5":"82377d7134e24a633b29991fbf832ad2","sha1":"6519ce527882c8c12166d854b9dc127d5cf9beaa","sha256":"5eb69d17e850663d695a0b1f97afe4c16884e1f641fbb1996d253126e2f2d987","sha512":"1a67acc69dd70ed8fe402b271441acbff3a0d402ee1a9e7db0681722988cda613d54b34aeca01048584066b21d6fa30d38afa6789b724df194695d9da7ee6a4e","ssdeep":"96:cCdVEwAlGIeIRMEhfiIxYQxLzX/EEMJ1fST/GFRunzfokVSa5Iz95+8Lr5ubvIdY:vPhhKJauBImVgXvWeH0P8q","tlshash":"baf12fde89780efc05833d41999bafab29a87027f9eced61bd8ccf4013c97151275968","first_seen":"2026-04-28T19:21:23.227757Z","last_seen":"2026-04-28T19:21:23.227757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/video/nft-bg.mp4","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /video/nft-bg.mp4 HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 623702\r\nlast-modified: Tue, 17 Mar 2026 11:12:50 GMT\r\netag: \"69b93732-98456\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-623701/623702\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHVMALnBwIUtQtUJT%2BLvRYHaKrsF0X0J6y6P6W3%2BbSpe1i9IV9itACcrTvGDwTXtX2NMHrYVQkDxWAacwzTwSYBlMY83IgCtHeTynUei6jiEtvqLSdyelgPOoCWvZ2B6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c780c8035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":623702,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f9778bb6dfb9bbe45bedbce30f4a98b9","sha1":"d438d2ae13443d2d2dec3ed84854ee69542ff416","sha256":"02e0fc63779f051e74d19dd97a3772eab8d1fe0f015b91d67ddfc324b6896f4a","sha512":"a80483bda28c62da3938a4c0e03bd22757866ea092c315853f9b591d7492ea138df4ec64f84733aae4fd8e15ef89414caffa633a90631f0bdf1402910525266a","ssdeep":"12288:wZmpSwyreFlKZNY3eTOUuQb2PzDuW/Nxiyb7KfSQCHdFxW:pQwe2WOUuxhP7Rt7W","tlshash":"a8d423af71a0be40f9e4db7d1ef18b95026be73c53fb0293d4ab64e541ca4ac2c55290","first_seen":"2024-12-31T04:27:31.743293Z","last_seen":"2026-08-10T18:16:56.912293Z","times_seen":65,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/27509.859ec4d2364de631a2bf.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/27509.859ec4d2364de631a2bf.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb81-8df0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:09 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:22:04\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 09a646df8071bde4673350ee30a8f14f\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36336,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3069)","md5":"52ebe02f11766655e0da856772623334","sha1":"5e3e168c58e2dc04abdebef2c0191b3e30bbe83b","sha256":"784407da0b265498b3e9edda8c6aad5d154b5752ee7f19019d8a33f7f103cacd","sha512":"e5ff2fc6914335afa913310827e15d6abf29b263e58098f27fe116f1b413132e3ed12fce4277fa36c1c5d3f950e9b2023c8fe22e8a6a1f5d0ca311ffa9f61df6","ssdeep":"768:vvep6SHPhMc3edVuniDmsj0Ew09fAggyAKJV8LBmcl/thLm45ypjuqkU8b8DNMFH:vBSvJcVuKXR20VDcYCqGZ","tlshash":"a5f2faca31d6f05573e990eb84ba1083d23d68857c48406cb61cbcce791d96a73a7f7a","first_seen":"2026-04-23T10:22:42.447856Z","last_seen":"2026-04-29T04:31:34.48618Z","times_seen":47,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/40260.2ae715334e6e29ae2cec.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/40260.2ae715334e6e29ae2cec.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad11-21c83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:28:52\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: bb1584837cb71b6c31dcc2bd65fab54b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":138371,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3070)","md5":"3ad1b8b9c3af50e9fb7005ee06099074","sha1":"fa5eba1c946d5dfe03b00964a036177536c0b9af","sha256":"5f0e9cc7021f310b294712e6dd5a0222d9454e3a396165c230ea7e8f9778662b","sha512":"1bfff4216517dd81c8c55ffa9e77a99372338ba26eaa525a3e25bfb816cfb2d458f070fc4022546d2a6f84f2ea896e03a3d94979fd045691e7256208b0ee1f82","ssdeep":"1536:04ecrc2hMNlbPWqfxN+fUE44ld4e44IJmuJY7+fHfvWr05KNyhLcSbWd4+o:YCxdswjaWyn","tlshash":"20d345b217f406f473b80d5293f77e591b3c74a359882c52d2a4d9a0dd40fc2a96ba3e","first_seen":"2026-04-07T11:13:01.812743Z","last_seen":"2026-05-05T07:37:29.095781Z","times_seen":520,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-kkGkUi6n.css","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:17.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-kkGkUi6n.css HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-4c2a2\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6dfCSptdMvVoqUGxSFZqf3rC5d2E%2FtXAKo1iZ1zFls%2FgjMsA1UeqBnvGQIATAHBt2zhlJqra5P5E0981m2giye5P68cGFJGpCVhhyJnJZE1WXnWCv38rOHvlN2YeaH6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c67d9ff35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311970,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b79f3c852730afdcada1346eb2a18df","sha1":"02fdd6b71a5b4fcb5c35bd086e29ea784019162e","sha256":"ba7718cc9e0d09b6282fb374b55a31da2fd05e21427afee4a1b1f0eb4078f098","sha512":"64d4f0b6ddbfac8e23dbbfa20a8aaad2a0c8795f80aea6c90562292b27de6cba203301d8185faa3c47263cca39f30dacc5494356ffee73af47f608b7f555b988","ssdeep":"3072:H8VfTKoDId/4D3vNIClDsIxuVSFAKy1m/kGQ:H8FmuD3vxsaFAKytGQ","tlshash":"5464f858a690147cbf27b176d7c796dcb23cf671ee12dae5f10161190ac37fa022362a","first_seen":"2026-04-28T19:21:23.230046Z","last_seen":"2026-04-28T19:21:23.230046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/CustomServiceButton.vue_vue_type_script_setup_true_lang-BVwY95Ct.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/CustomServiceButton.vue_vue_type_script_setup_true_lang-BVwY95Ct.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-17d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJELjxq%2BSEz2x4JZKavFwqAeZvhsrgbjGBz5pHENNJJlQvtZFAmavCceKtOzmmWBbBgbw3MWx4ODNYpUpBMpIiLCZDWSFdR267MCD7zjG6iBmqBaIUsCnuOErwKD1N%2FD\"}]}\r\ncf-ray: 9f386c6e4b0735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (380)","md5":"b9e7157b42c5ae53b706d4936fb32103","sha1":"ec1aaccac99f684374c6246a8f9098bf943cd34b","sha256":"a520078f89cccfca686e66970453ccde1a7e3646c12ffb40c61dd55041e3f462","sha512":"99172ea386fe4c3654f8d1b893af1368f28cfed192a273dcd00c6c60bec7e83ce395bfd88418b1422dd7f299bde88e28e47d20912c1b627aa2a823a9fa59999c","ssdeep":"","tlshash":"08e0610414417ff8c57b9a511b274a092126047c16581165d98ac56436f30d3ea2feb7","first_seen":"2026-04-28T19:21:23.094136Z","last_seen":"2026-04-28T19:21:23.094136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-DE8HP17O.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-DE8HP17O.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-3215db\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHwSPC%2BRzWwoasEq847JcVJbOnowbq37qkGzaa3%2BPJCFoUNrTAZqBVeP%2FWtX7iua72ZEAoOJXCIEvqnvvjtEYswOwx4leZAzQDBkp%2BCVSiv4ux8LtJjPc43ooLnSPFPz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c78dcc935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3282395,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27005)","md5":"48ebba827e6e97a4467797c94aa47f92","sha1":"5d73a3b9f8878c48b1abf40ff0ebb22bcc9bac0b","sha256":"944a62a05b9717bb10481c500aef23c5317b73c339e4caf340c08e471de2f991","sha512":"56cc85818a2cb2cbef046182ba38972f72c8c04885f5a7117b5c94d4f93fcb6710510a4b85a3d63c9f55de30b9e44187e5bd8dd99ca001972f0c8d2c5b8dc690","ssdeep":"24576:pwsHnhHup+GQJUJH9I2Lih5XIHjslpMIFnw6n6+ZQI9AtbaVUL6p7jMePdFZIT:pw41up+GQJUJH+PXmjslpMIFnw6n6+ZM","tlshash":"e3254ad4b252b06506d201e8646b124bf07c5ca1b048c4e9f69cdef63ee6a5d81aff7c","first_seen":"2026-04-28T19:21:23.185992Z","last_seen":"2026-04-28T19:21:23.185992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/localBatchGatewayRequest-Kbzne3ii.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:21.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-Kbzne3ii.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-CvghBqvW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-6f5\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4N%2FkFXW983BcFtFpxfU66lOjtL495i4iR3fDPrLoX8x4wI5Ew%2F3WYRThJrY4t6ER%2BvtnTaVg8vbucWtd9KKyfpP9v%2F4QJBq45Dnvo1gdcM71m2wGsssUhy%2BbrgPluih\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c7b6d2535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"24e8dd103ab9a5d042bb35eb5fdb6d45","sha1":"8084b6a0f0f87442ecfea88e4a800a3a24da9ccf","sha256":"bc94df981383e4d012bb62c4d3d91c92bbb5d6cb2164c96f814499971c714d16","sha512":"bfe16ce223b0faf34950f8cee5a788e5580ed2a38133218c77664b4591105c9efdc7eb058a771ca95d17434b7f0a4bb37a79c30480285d94a3e21906bd365e9d","ssdeep":"","tlshash":"6c314188b619ec7d856e2d30681fa484e4342806a42f8471d64f75f7df319c1ae6fe1c","first_seen":"2026-04-28T19:21:23.182554Z","last_seen":"2026-04-28T19:21:23.182554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/en.7277.46b4379d59a93bfd7278.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/en.7277.46b4379d59a93bfd7278.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d358e3-10fb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 06 Apr 2026 06:55:31 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/06/2026 10:32:47\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1fa0ab8d1e12ce98642c0fb392712ffb\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3058)","md5":"71e8113d69ebd28608e036cc48d36ee6","sha1":"3d7b55d9379e984cec7f210624566ae39375fc68","sha256":"c883784f9697c52953713d3f3ba35118e69cd1a5fff4000e46084d22a3973a71","sha512":"8b6c786cb0ddd0e4f62e7e7dc0d4c2484514295d200bcdb4382a74f1d0e04e2589b1a961a499c6a93277e80512df2661b47f2ed2602589e1ccad1098d64eac59","ssdeep":"96:Ycdd3tyTURzoP2ZDC9G3H4i0rR1i34xkDEzj/:Y03IYRseZ1H4i0rq34x2Ezj","tlshash":"4291db4bd1c001e96fb5e7183b5accd13ad0b0a04075e4ca57496f65c2d7ef4d8faa88","first_seen":"2026-03-11T12:55:07.279369Z","last_seen":"2026-05-05T07:37:29.078502Z","times_seen":983,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/76133.3064908a6d7305ba61a9.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/76133.3064908a6d7305ba61a9.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69e9bb87-7ba6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 23 Apr 2026 06:26:15 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/23/2026 10:18:57\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4094ac82e97cf6c0d40b66edc273e951\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3072)","md5":"1e33116d33238d719342fbabd86ffca3","sha1":"6e93f841a95eec8cc781008e03c7953e404f5481","sha256":"0237a34002ba43acc2bf41c9dc9532eba6a9d7c37b3a4580f71c6c1d5347ad32","sha512":"25a0cddb3f4b1fc08da410c1261af3c70f19f037ab0346069affbd17a33a821ec41955e38a05d7c3d22933d8c1aa86e504c7b43bcd0bc87296c2e1ed7adbff32","ssdeep":"768:1LY8jn/pG/tiHfepFKvq3Mu3cbSZuYsg6RnnJv7dSwg6NBpmi642UOeIz9XXBRlx:1LY8jnhG/tiHfe93QVnnJv7dSK7MTUlU","tlshash":"02e2a642e242606743f381ed0c354503a338abc678464dacb6a98def756cd4cb5bab7d","first_seen":"2026-04-23T10:22:42.529241Z","last_seen":"2026-04-29T07:45:38.594224Z","times_seen":96,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-D7erznEp.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-D7erznEp.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-168\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xearqXFN7llIIsRT29nblP%2BJ6Cp%2FwKEyms8i%2FSmRXi9OeafnlNeudFFPHnrC1JeHVJMsydQ3hfdyKFUpuDyeIIJQDTvCIUzECgBmi2NrXYfAbtBWJHVm53l4rKmDmpD4\"}]}\r\ncf-ray: 9f386c6e0aee35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (359)","md5":"60048ff6dc26a6657fa8bb24dca4d769","sha1":"3aef89cc927b1fac5ed2ac378b30cd2421720cb1","sha256":"d71df4ac2973bf5aede888f1f15af1f1a28c13f9209de1ff2e42153342c8ff07","sha512":"bdfbcaa9493e8ba15da04422e223adcdcd1e25c8bb9bd458dbedaa048257b381622798d1ee42193cba991623a867dea0438d6e654c19cbae45e3667f9e259ff9","ssdeep":"","tlshash":"e6e0d88e456762fe94718c8f31c42ec6884fca7daa3b1590b92fc6110e06ac1b07a711","first_seen":"2026-04-28T19:21:23.096852Z","last_seen":"2026-04-28T19:21:23.096852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/favicon.ico","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:33:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69f054c4-3c2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UshoSmZuYRviCFNjTEVo5yjHYxEhnR6EjoZMJbMwtDky5T2BZYsrZyv4qpnC%2B6s3ARtwe3%2F%2F0OCuNJw%2B7VhM4DzmFZRYzuwIolU9WAokCfJIdqM8apXvg5YWcjz6NhrI\"}]}\r\ncf-ray: 9f386c727ba835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"163e22e12ddeea5e8def52880317037d","sha1":"39754b44190af4f2a675fa1b1c1052d6c6ebd5f8","sha256":"d579ab934fe97ad23f3a020b29df5c4bf192f4a19f1391c38f49cf2fca6cc810","sha512":"ca97ebdd2939da9b1b72182b154c1578bc6b1131e14208510839ccca4819186a1e58d2445bfa2b0144d9e84e0f7a6bc337cfa084b7e2b750a7aee78b2923579e","ssdeep":"192:SCgYWA2y+1ZA5JKShWZat0x32jqBf+zWqSqvdXoGq17/7mT:ZgYWAKIiSgo0RKqBfcWsvO9x7O","tlshash":"0462af1ebfec0cd5d4195a33914a7f9ab007c3d1552ae6238a324c281f3a7862eeb053","first_seen":"2026-04-28T19:21:23.231079Z","last_seen":"2026-04-28T19:21:23.231079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.059d7c8946a88403db8cd14ed9c43dc75.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.059d7c8946a88403db8cd14ed9c43dc75.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1279\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877794D103834A1562C\r\nAccept-Ranges: bytes\r\nETag: \"C26269EA502DA4720D8FDB4D86AC9333\"\r\nLast-Modified: Mon, 28 Jul 2025 10:36:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13462380131927509834\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wmJp6lAtpHINj9tNhqyTMw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c26269ea502da4720d8fdb4d86ac9333","sha1":"07ee784e077b5641365cd89ba2c720f7b4032ea1","sha256":"4f3922270cb0a6b838ae97cc69da3777d3a2e703e0900100bec085f9423a4ace","sha512":"27c105da01702685ce6786d1f20a1d8ca7e1af16804993600b2d51c459a1746ff9f46de9458c72a99c132aa56dfb3ce419754003422df1f44f795bd3a6cacf5e","ssdeep":"","tlshash":"6121f8de52146c78a7313609209b44809afa42dde9a0b5571e4d8539af205db512bb1c","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-10T18:16:57.048194Z","times_seen":104,"resource_available":false,"data":null}},"time_used":2936,"timings":{"blocked":2647,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obobs-res.oss-cn-hongkong.aliyuncs.com/echo2.03af12dd863094985a56f4c323fb767ea.png","fqdn":"obobs-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.03af12dd863094985a56f4c323fb767ea.png HTTP/1.1\r\nHost: obobs-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 19:20:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1363\r\nConnection: keep-alive\r\nx-oss-request-id: 69F10877AB673237394DD5F2\r\nAccept-Ranges: bytes\r\nETag: \"0A10E1D22FAE250089BD04FE6888152F\"\r\nLast-Modified: Mon, 28 Jul 2025 10:40:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 425657815942371163\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ChDh0i+uJQCJvQT+aIgVLw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"0a10e1d22fae250089bd04fe6888152f","sha1":"78b9c2ab6cd91e6f372d9aecd41c54c83201942e","sha256":"68d2a6718f3437d0748af718c9aa41360e81e05ea51abdd468a1a85cebff2ca5","sha512":"2a9c741b55f2742464acd2a084d53b7e9d8b3a1c934ce3bd58e8f250d359ff292b6d637adf8c88f416001d678008a9f88b3c0aa55018b45af8e1c086906e83d0","ssdeep":"","tlshash":"142108c80f8659bf5356f07ad72703c6e01f63e8c346464155e60d421bc8994ac8c981","first_seen":"2025-04-01T12:16:01.565792Z","last_seen":"2026-08-10T18:16:56.94701Z","times_seen":204,"resource_available":false,"data":null}},"time_used":3176,"timings":{"blocked":2904,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/video/charity-bg.mp4","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /video/charity-bg.mp4 HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1571992\r\nlast-modified: Tue, 17 Mar 2026 11:12:50 GMT\r\netag: \"69b93732-17fc98\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-1571991/1571992\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1tu7Oqn%2B9X6Zd5MxCZRK8jae5jmzMClxdedy5wP8pvIhUt%2FhQLpSGjeqmbtinpEACMzAoVelMF8Wr6IuRNkeuUy6hqsyMVOCGs0cfmzFIRGt3Gc7QlfcZfACJY2%2FSRd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f386c780c8135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d79651ea43fe9e3c9acde396cd862b9d","sha1":"8833ce1ba020ecfabc403bb693359c0d30179709","sha256":"b6fd66859ead7410ab5295f87c668212ef056ee67e5cdc770b567577a1fb6cc0","sha512":"6ddd77b4d1384c3e61b526ed4ffe311515704db2912cda9e5b493717f1d8807f9a848c2beafc37074bf0016f662aa3cbd7c9e37869bfa57271f863caf00fccba","ssdeep":"768:tdiWvZvUDf5Wr8zo2rc6+fJcne7Or50/s2VTZaeWZze:fiavUWCl2fteW0gZaeize","tlshash":"7ae2f1a937a50c89cd8d630d8dfec73fc54882a89e07155aab765c9f0711560f2ec49d","first_seen":"2025-08-06T17:57:19.98819Z","last_seen":"2026-07-24T23:32:32.642678Z","times_seen":18,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-v5iI-2eJ.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:20.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-v5iI-2eJ.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-DE8HP17O.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-2276\"\r\nexpires: Wed, 29 Apr 2026 07:20:20 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=scrSPjhQlVopQXIZfi0lRc%2FyFVzvksUTgJKmL5Ybwh2lz590ti7jfy%2BRVvvUvkBTYssR4TsQf7lU57XnR%2BLk5dXFjd1XNfaOXXUSX4BEsUnwjmjRjYlEsc6BtY99RkT6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c786ca635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8822,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8327)","md5":"c61f13f9fc712a2247d628ee85b32c17","sha1":"05cc8f4bcb78de1423b4b2e65ddb9f595716278b","sha256":"b1a10be0d39de65408751a9bf292af5233937887e1837b058ac9347b886b5b4c","sha512":"6dbb11e3929b0c5f2a3bb8397b9bffd4a8f2be1c63f3185ef995f5d93f857e1ab675ea8fcea188d1f50684784148c5122100423cd1ecaafd4192f77c53a54609","ssdeep":"192:YcXziZkxrOAyv54CoY9iax03kbILzMyc1iSecoHVo6WcdHYMb+uh+u4Heyz3VdDS:YcZM4CoYvx/igiSeHVoJcdHpb/hYekxU","tlshash":"fd0293e472af85f462c41d8c78231a118014946ce41dd0b9bfae5dfad69e7818ecffa1","first_seen":"2026-04-28T19:21:23.245212Z","last_seen":"2026-04-28T19:21:23.245212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.onlinesupportcustomerservice.com/api/v1/widget/inbox_members?website_token=HJM6ZCcyajGBXhzTeBKGYToh","fqdn":"qevorinex.onlinesupportcustomerservice.com","domain":"onlinesupportcustomerservice.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F","date":"2026-04-28T19:20:22.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinesupportcustomerservice.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 07:58:23 GMT","end":"Tue, 14 Jul 2026 07:58:22 GMT"},"fingerprint":{"sha1":"F5:64:E7:0A:45:90:FE:99:54:78:85:C3:96:8F:CD:3A:E5:E6:6D:B5","sha256":"49:EE:29:2C:DE:1C:A6:04:D0:23:3E:FC:C3:33:39:E7:02:EF:DB:93:1B:04:43:9D:56:74:8C:1E:DB:D5:60:26"}}},"request":{"raw":"GET /api/v1/widget/inbox_members?website_token=HJM6ZCcyajGBXhzTeBKGYToh HTTP/1.1\r\nHost: qevorinex.onlinesupportcustomerservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.onlinesupportcustomerservice.com/widget?website_token=HJM6ZCcyajGBXhzTeBKGYToh\u0026referrer=\u0026url=https%3A%2F%2Fqevorinex.com%2F\r\nX-Auth-Token: eyJhbGciOiJIUzI1NiJ9.eyJzb3VyY2VfaWQiOiIyNmNhZjg4NC03NTAyLTRjNDAtYjEwYi0yMTA4YTAxNjE1NmYiLCJpbmJveF9pZCI6OTQ0OH0.7e8Xl9x7YkFF18ccfcHrLy-YkY4kBFSx-4W3f1Kmsuk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSALBCORS=zHZyCxY/iLSRl2Zxfds/bHJoRehx6FH0KX8wC2AdkNjl9n9m1dyuARZFRDntsTSc73FTSfPESVQA4DturHvZrfo8T9Pl9i4gsVHO3gogiEz/BKXo5STMVCw2hw9R\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: AWSALB=dRIjN8KGt7haKNLj1e1Vq7EyWWVsz2y4oNa0vW9/ot1UmqQcbAcVjPCXADoKZabuOQxqXituIXkQ9yFiqIHwgPKFRmHUxGQof/r2d7DUVn1jvKr1joz66GfGeTZO; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/\nAWSALBCORS=dRIjN8KGt7haKNLj1e1Vq7EyWWVsz2y4oNa0vW9/ot1UmqQcbAcVjPCXADoKZabuOQxqXituIXkQ9yFiqIHwgPKFRmHUxGQof/r2d7DUVn1jvKr1joz66GfGeTZO; Expires=Tue, 05 May 2026 19:20:23 GMT; Path=/; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"695483a6e5daf822b38118c4b73e2040\"\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nx-request-id: eb22daa8-55d4-4e16-a1ab-aea3444daefa\r\nx-runtime: 0.030490\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlvH%2Ftt40HXI%2BiWiZC6epBNuIq9l4FSHi9G%2FkqbSTXsto3MZ0%2F2GXUvv9SbNwRHCIE5pfS9pTpyYswkWOHJ3UbpUwozKgFCU5hnlIgYNbBHgAESYfu%2BEp1RdBuHp%2FvBm\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncf-ray: 9f386c856e87b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e5257d002ce63366be9e5908eca33db5","sha1":"27b8229bd254a8092aa5bcfb6606231aa3a86956","sha256":"695483a6e5daf822b38118c4b73e2040dae8c85ad13aa4817d29599d902340be","sha512":"cd6a9162c0d3c8efc54202bae04e253d38a523ce6849edab8ce28d15f32c2f0c6f77bd6b68af38c51a747229c061b392f2a37faf967c9d9776fcf57a2eece34c","ssdeep":"","tlshash":"9db0124110402123bc00024aa403d99115c1141368cedc0cca44de04b1006ecf114617","first_seen":"2026-03-19T19:54:38.418647Z","last_seen":"2026-07-08T14:59:29.673257Z","times_seen":4,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/tradingview-copyright-new-data-impl.37bb76b8623214e531b8.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:22.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/tradingview-copyright-new-data-impl.37bb76b8623214e531b8.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fc-108f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:00 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:35:49\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1f1f9c6ab0eb3e6c1d597c6c02600ccf\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4239,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2220)","md5":"71fb2f2a628522d653df71d6d515d35f","sha1":"5c6e136e8869af648da586518a1042a170ee74d1","sha256":"bfda92ec38ee62992f4a941af73dd3ee9c9c631f52a20ffc26b6a279ed9cc84a","sha512":"4ea0aa96aa7b71b59b9899864787bc5f4bd3d2cba2c53177ea5c993becdfa823b2aadb91a015feec00c19f05f1186df9db7f5686da3f253564373053ce6f4d1f","ssdeep":"96:psIzPbXCm2bpHXHbgpiJvIoODRrnfnXk096vY9yPJ:uQXCmuRLgpiJv+DRrcm9o","tlshash":"9f919686e501d69c175b8de4dc2f21a0520f31da794ad3e4e926db3261226e4ec37e1c","first_seen":"2026-04-15T14:27:01.633037Z","last_seen":"2026-04-29T04:31:34.483217Z","times_seen":113,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/73023.fd990e181d115221d18a.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/73023.fd990e181d115221d18a.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69df32fd-102a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:41:01 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:29:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b44a557165d55a73adb0316eba311c0d\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4138,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4138), with no line terminators","md5":"c2ccfc1d8935dec38580e758457b8ff9","sha1":"18c81f1a6e7090055f99c6e2464f317b23559eb1","sha256":"bd7210a171900d26e9dcc6fd3f75972670c267bab297d23e5aed8181c8951be1","sha512":"20a1f84029b6dce251ae1f1c1a9ce9cb8520a281f47bb58b27f193d457b2d4d18c2cf074c18e9f89c2aef0271c22cfeea7e194908394547bc1c76416cd69da88","ssdeep":"48:DAGIPAGIOfKI5wsV5ksVDU6/0IMIB5CUY3w0JMeFDWIm+RhX+vmRA0rE5WNw5mNv:Dkf5F5JAcJfTQRKgBRhX+uRARemmZ","tlshash":"2e8158bf067c45983922470157629b147178d3fb652248bbc37539aa4fd1eacec32f68","first_seen":"2026-01-14T17:24:20.986498Z","last_seen":"2026-05-15T10:22:28.379716Z","times_seen":4294,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/use-id-C7LPS0AZ.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/use-id-C7LPS0AZ.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69f057e2-98\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnZIhMnr7A3rdJ1p%2FU6Fh5AgcJOm44qsnDlhbkbF3UrN8DaFkk76iOJFBwxv7n3mgRt%2FNEKIArB09qGZIZQ8irqTGG%2B7BP9E201pOTUjNxCK2Pnyj212e6hVuv%2BCK15r\"}]}\r\ncf-ray: 9f386c6e2afc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c5995049e4a316ed8b60472e0127eebf","sha1":"5f761c47265fd3444bf4a31ad362a857946d4c8f","sha256":"0f0ffd239f997d704273e6d76fd485d2bbfa8e81ece0f26556ddc8c676d76a1a","sha512":"24421ed663ee57558738196807c91eb3ed63ca51b48ce2d10bebcea1985eac5594d7ec8ba730774262f38035f608cd0cfb56f66c8da82edccf322c8a56677fa2","ssdeep":"","tlshash":"f7c08c49784860f426190dd4e22a066a822a781417aaa9a0f266472a19b126663baf04","first_seen":"2026-04-28T19:21:23.075539Z","last_seen":"2026-04-28T19:21:23.075539Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/collect-BZdkYS3w.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:18.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/collect-BZdkYS3w.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qevorinex.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5cd\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrRimjVUeAUB79W%2Frohb%2Fyd2nE4ue16o%2FKlGKd1YaztJOrxwEUqH9V4dYs%2FDv41Rj9oFWH3HG6poWn3K7AwiYR84VQUhRyP8E1o7o18VypYgCwkqbLl7AWSMoSA%2FN0zo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6e3b0635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1485,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1436)","md5":"6a18bc1fbfba4a13347c267be02077a4","sha1":"62356b76ada9986f1caa6863015048cea9c7de5e","sha256":"126182b3f71c899c15420822b35dc3250aa363432f71c4f42af1b07312c0717a","sha512":"d9df215d39af0cb2f228375fa2ecc68ae0498a7c8e4dd2692e007bef939a8ff6246e4ab74cc8863dfe15c58abbef231cd398cbd119d05ebac15aff02e56326dc","ssdeep":"","tlshash":"0e31c001b270673d75ff70e4219a65e0e2165c68257490aabe19f6c1cfa8892ac19a3f","first_seen":"2026-04-28T19:21:23.21271Z","last_seen":"2026-04-28T19:21:23.21271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/index-udjr8jGi.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/index-udjr8jGi.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-5ec\"\r\nexpires: Wed, 29 Apr 2026 07:20:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pmAT2VoqVRo0jB7F%2B%2BrcTHpSmM1kjD0b%2F0HxkoTrPNEkIzSQKUlHjwR0fL0Jz1fVKnbTEYBOd4v8aSkoBikDZSQtzbVgKhtS%2Bh1MIGyiC%2F%2FDIZFYCSGcSIK89iB0Nri\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c700b6d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1515)","md5":"9c19cf492a189409d23bd6b8e1750f1f","sha1":"ad23b51ffd12e8c5244ab3e403279b6242e41714","sha256":"e189f2b362d691bb91d4191473e1b56fc45ae5255365dd27e073fcaba06dc81c","sha512":"0ceb0cd124b62bc649bae600fa1b1f4e4292fcf4a55c610b6abe525926b027feef1b75f0585740cdb7b7b95007120a7b6fca191d79bf83de0ae093a74d492902","ssdeep":"","tlshash":"d431ca4f2c55b776abb29c2371861d5544178b7cfebb3c3056a4ed62182f08410be26a","first_seen":"2026-04-28T19:21:23.091006Z","last_seen":"2026-04-28T19:21:23.091006Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.qevorine.com/api/common/getAllSetting","fqdn":"webapi.qevorine.com","domain":"qevorine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 23:33:31 GMT","end":"Sun, 26 Jul 2026 23:33:30 GMT"},"fingerprint":{"sha1":"54:1F:B0:D2:CF:1B:96:AB:B8:70:C6:CB:E3:2E:52:D6:90:45:F9:A5","sha256":"6C:0C:D4:1A:0E:09:C8:EE:AA:E4:FE:3C:0D:D7:3E:1B:8E:4B:ED:43:88:9D:93:AB:A8:CB:21:DD:A8:84:DE:6A"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.qevorine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nReferer: https://qevorinex.com/\r\nOrigin: https://qevorinex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://qevorinex.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aE4hjPTBqMwvcG5b6xbm5r18%2FQ6MBsLsQYABCWGuNmZkE7ashbFwmkBI27ud%2BPO1%2BZHIh8CH6JWQvGaue6St1apBI%2B1iQHRXewUfNpZRG2FBQZUKwoyRFUb29NnGgKLzpwlDWMP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c712ca5b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":16,"dns":1,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/3193.bf0956124aff296d9619.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/3193.bf0956124aff296d9619.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0f-42bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:55 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: dafd306a15885e5782c9399e61b69115\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17083,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"1b19c2a2d96cb336c07d6d8a6dc51755","sha1":"0ec49b2d679f7b6092dd039f15fd979b7754dbb0","sha256":"8ed9e69ea55c0438d2f03b7bab105c9c7045c9b51320db349d9d15d3ca30e144","sha512":"1d2feff1c96fb57db6d755978c7dd844698ca93aaff2bce6307c4497d29ab482aee60d993f5394dcd539fb042b0f8c6f08328a125e3614a504d203ce41cf3a28","ssdeep":"384:bxjVKZysKJy2r9Ey6fr2PrIINayMwsF/lrQDfP7yXP0wRmNXoQ:rKZysKJfr9B6jQ/EyMwC/lrQjP7yXP0Z","tlshash":"6572b68931c2f06557a32866443f5009f33c1c58350e98a4a362dc95bdf65aef27bf7a","first_seen":"2026-04-07T11:13:01.74205Z","last_seen":"2026-05-05T07:37:29.133653Z","times_seen":394,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/40260.2ae715334e6e29ae2cec.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/40260.2ae715334e6e29ae2cec.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad11-21c83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:57 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:28:52\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8b830907ef0539377b8d0d3809477342\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":138371,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3070)","md5":"3ad1b8b9c3af50e9fb7005ee06099074","sha1":"fa5eba1c946d5dfe03b00964a036177536c0b9af","sha256":"5f0e9cc7021f310b294712e6dd5a0222d9454e3a396165c230ea7e8f9778662b","sha512":"1bfff4216517dd81c8c55ffa9e77a99372338ba26eaa525a3e25bfb816cfb2d458f070fc4022546d2a6f84f2ea896e03a3d94979fd045691e7256208b0ee1f82","ssdeep":"1536:04ecrc2hMNlbPWqfxN+fUE44ld4e44IJmuJY7+fHfvWr05KNyhLcSbWd4+o:YCxdswjaWyn","tlshash":"20d345b217f406f473b80d5293f77e591b3c74a359882c52d2a4d9a0dd40fc2a96ba3e","first_seen":"2026-04-07T11:13:01.812743Z","last_seen":"2026-05-05T07:37:29.095781Z","times_seen":520,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qevorinex.com/assets/eye-Dgk2fP9X.js","fqdn":"qevorinex.com","domain":"qevorinex.com","tld":"com"},"ip":{"addr":"104.21.73.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qevorinex.com/","date":"2026-04-28T19:20:19.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qevorinex.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:58:38 GMT","end":"Wed, 24 Jun 2026 10:58:37 GMT"},"fingerprint":{"sha1":"BF:A3:7E:E1:5E:CD:19:93:52:E4:AD:C8:7D:A8:A5:9E:B3:74:5A:A7","sha256":"F8:B1:59:F5:4B:C8:93:20:5A:63:7C:D2:B8:98:50:47:73:40:AC:18:45:B9:72:B1:36:6B:EB:E5:44:FA:14:45"}}},"request":{"raw":"GET /assets/eye-Dgk2fP9X.js HTTP/1.1\r\nHost: qevorinex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qevorinex.com/assets/index-D-ctkCWj.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 19:20:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Apr 2026 06:46:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f057e2-62a\"\r\nexpires: Wed, 29 Apr 2026 07:20:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtPq9EIRCM5iRy%2FXgOtjx6C88kLODcIFq5djYHusWkrvFN7vsklcUbZZkq7MZ8QVgrJ2%2FOxQ17wPXoAK5YOhDtbvAxYVnZjZCZntrFILc13lb8M%2FbDhsqeb2nfu0QWZO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f386c6feb6235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1578,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1577)","md5":"53e216064cf97b09616aa14eb3396d24","sha1":"b1224a9eece1f8ffd41298b301bb72adcea6a33d","sha256":"ed9d835ff4272945bd0b1f2f6d4bc88f803530288d34052ade10238602c524f4","sha512":"da088d7697d8b1aab1c49f75487eb05967e510d2db5b267ce049bed8cec608447fc6c051980cb63b5502300bead1f91faad5c4dd3b9eeee554cf81e0f99b0017","ssdeep":"","tlshash":"c631a8bd2242bbed6136ca623413762ad4701b75af795687fedb2244f3a24052dc286c","first_seen":"2025-09-07T17:41:21.984938Z","last_seen":"2026-08-10T18:16:57.05751Z","times_seen":32,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"qevorinex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/2336.769b8281bc49972387e6.js","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/2336.769b8281bc49972387e6.js HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\netag: \"69d4ad0a-2932\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 07 Apr 2026 07:06:50 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/07/2026 10:29:34\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 69c905a2d2ac243927669f8c990f2bad\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10546,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3065)","md5":"1bfc76782e679fb9b16195a690bc706f","sha1":"abb5759ea460ff8908556a735f9fc2978915537b","sha256":"5cc409510427950a0a3b158b510235e984243f6a56bffc8792d68a1220206bfe","sha512":"af12e690197808af9244fe11ae3acfc349a805ada9f64405cab098f2f3e1997610dd92ba1eccd17d03b015613c3d6aed3118afadceca579cf196bd6b9dfcab73","ssdeep":"192:2WArDmcu8VfxJQjkgarjQBUq+6RR7ANO7o8qE2F:L89vQjkgarjQ2qNRR7ANOk8qE2F","tlshash":"79224254bb93f1a211da75da483b040af23a289c262430a47391c8dd4d7da5a72bfb3d","first_seen":"2026-04-07T11:13:01.644591Z","last_seen":"2026-05-05T08:08:30.150538Z","times_seen":581,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tradingview-widget.com/static/bundles/embed/34414.31d6cfe0d16ae931b73c.css","fqdn":"www.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22lineWidth%22%3A2%2C%22lineType%22%3A2%2C%22chartType%22%3A%22area%22%2C%22showVolume%22%3Afalse%2C%22fontColor%22%3A%22rgb(106%2C%20109%2C%20120)%22%2C%22gridLineColor%22%3A%22rgba(242%2C%20242%2C%20242%2C%200.06)%22%2C%22volumeUpColor%22%3A%22rgba(34%2C%20171%2C%20148%2C%200.5)%22%2C%22volumeDownColor%22%3A%22rgba(247%2C%2082%2C%2095%2C%200.5)%22%2C%22backgroundColor%22%3A%22%230F0F0F%22%2C%22widgetFontColor%22%3A%22%23DBDBDB%22%2C%22upColor%22%3A%22%2322ab94%22%2C%22downColor%22%3A%22%23f7525f%22%2C%22borderUpColor%22%3A%22%2322ab94%22%2C%22borderDownColor%22%3A%22%23f7525f%22%2C%22wickUpColor%22%3A%22%2322ab94%22%2C%22wickDownColor%22%3A%22%23f7525f%22%2C%22colorTheme%22%3A%22dark%22%2C%22isTransparent%22%3Atrue%2C%22chartOnly%22%3Atrue%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22valuesTracking%22%3A%223%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22symbols%22%3A%5B%5B%22BINANCE%3ABTCUSDC%7C1M%22%5D%5D%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%225d%7C5%22%2C%221w%7C15%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%226m%7C120%22%2C%2212m%7C1D%22%5D%2C%22fontSize%22%3A%2210%22%2C%22headerFontSize%22%3A%22medium%22%2C%22lineColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22topColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%20.6)%22%2C%22bottomColor%22%3A%22rgba(0%2C%20240%2C%20255%2C%200)%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A%22100%25%22%2C%22noTimeScale%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22utm_source%22%3A%22qevorinex.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22qevorinex.com%2F%22%7D","date":"2026-04-28T19:20:21.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":"TradingView, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Sat, 20 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"23:87:1E:8E:DF:2E:DF:50:A8:DD:45:10:C1:4B:01:C9:B2:61:AA:8B","sha256":"42:09:59:71:96:C1:0E:B9:2F:9D:82:A3:0D:A5:B1:21:6A:76:72:A7:8B:19:14:80:BD:DA:CB:13:D1:7E:57:3F"}}},"request":{"raw":"GET /static/bundles/embed/34414.31d6cfe0d16ae931b73c.css HTTP/1.1\r\nHost: www.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 19:20:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 0\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2118568\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69df32f8-0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Apr 2026 06:40:56 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'none'\r\ncdn-proxyver: 1.50\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 04/15/2026 09:35:48\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a1b7c20a7b3977145abafe986c176870\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}