{"report_id":"1a72c6ca-6f11-409f-be17-75cd1e90c8c5","version":6,"status":"done","tags":[],"date":"2025-12-31T10:17:05Z","url":{"schema":"http","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":0,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"title":"huu – My Blog","dom":{"size":120069,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16585)","md5":"e39b4591da09ee8e30b007066a2830f0","sha1":"96b7cb69dedf8e025939d511908106ca9dd22440","sha256":"522f963a2ce138025f7a000bce8287ad19af50b650c4b6bc85a6445273aff573","sha512":"144d6c51b8d8e7b586dcf5423a3bc32d469baf4c787c06dc6ee34305b8b9014343b9163862fdb30eb1bf9a2ba8ca6e14f9301f7e0dc3ceb4a70326cbf22d5a13","ssdeep":"3072:p8CdjXCzbrDD44OqCf2ifqippxZfrXF3ft72297CKJas9gj+w6fV5CKM:Bd4DD44ofF5ppxZTXF3ft17CKgs9rw64","tlshash":"20c35be1ba3415362e7f46b5f05f2247b5b4da369a898472f0a8c4681e98cf700f7b1d","dom_hash":"domhash41c22228a25050e77c40e017018ef872","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":0,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T10:17:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2025-12-30T13:10:43.150086Z","alert_count":2,"request_count":1,"received_data":13932,"sent_data":395,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p.mrktmtrcs.net","ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":63178,"first_seen":"2025-05-16T05:58:44.985071Z","last_seen":"2025-12-29T22:20:24.33702Z","alert_count":0,"request_count":1,"received_data":40588,"sent_data":403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"quaxi.xyz","ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-12-31T10:17:05.260058Z","last_seen":"2025-12-31T10:17:05.260058Z","alert_count":0,"request_count":3,"received_data":144942,"sent_data":1354,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"t.dtscout.com","ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":54823,"first_seen":"2017-01-30T04:52:42Z","last_seen":"2025-12-30T08:11:03.803738Z","alert_count":0,"request_count":2,"received_data":3649,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"71025c7d359edb7d2773bdc0d7cedd1e","sha1":"ef89635a71f151a56085de6be71337f3279f9e6a","sha256":"5d748c0cfee976c6719c663d790ea55439ab4f0bd873406ee70d078c2c1a4155","sha512":"c89cbb875b9c8d1ea69a40031af3da3925a2333a952665fe23d8e0ddd2c5f256772debbee8ad8ae45ad0979dc3cffdb748dce63169328026ed7e527ca12080a1","ssdeep":"","tlshash":"33d07d28ce5304020063b8695949710911f1406b0c158801610c8f485ed952140abd6e","size":277,"data":"","first_seen":"2025-12-31T10:17:08.215353Z","last_seen":"2025-12-31T10:17:08.215353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/wp-includes/js/wp-emoji-loader.min.js","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0198f566432a182918135d93e44b1dcd","sha1":"87f44e0363f64ded39b9d6c651292f531fbc238d","sha256":"3151eff193ec46818498ed80388bd462535d1e0a11a22f9e53b208120e2a39c1","sha512":"cf02b1d0ee9aee22b74d5896df06aff3edaf74010667d12a5bb66b599ddc6e2de067f7584a336a705428e57cfa119f98d15d3fe8984ea521fddbf2347ced720e","ssdeep":"","tlshash":"8161969ae77a38dfb2f900f2697a0d47eb614435d6c8d038c9bda3141cb5893c274a46","size":3194,"data":"","first_seen":"2025-12-31T10:17:08.216318Z","last_seen":"2025-12-31T10:17:08.216318Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/huu/wp-block-template-skip-link-js-after","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9985b4397d2466e3ddcef9d98adacf","sha1":"a8f3cacd99c1372d2e1d71e4fcc706967a9862cf","sha256":"b8b56656e775db50163f0b56d1416ab554784c14c5d3dfb32e9d77ac489df319","sha512":"21b92b4af2d01129e9f3527d51cb01bb16804015f8c93abbeadfce301c3165df7717a577dd771ab5578b7ea367a74953ee2f62d2b62a6175a63937a1d9cd49aa","ssdeep":"","tlshash":"af2195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1286,"data":"","first_seen":"2025-12-04T09:48:13.866889Z","last_seen":"2026-01-07T14:18:17.601961Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5992534af71baf4983f6f7b82c5fcf7","sha1":"a233028f5d7ea0d20ddf00c03167d4ee3e4f21b7","sha256":"7c27802697a33c3f1b9cf7995f01c5d6caa544ce60e8828f16eb7eed8c878c58","sha512":"800422fe039555fd9e4db68cc43c1f6fdaf0a971c2bfda36e79f058ba95dff7760b5b7762c2cbd1b54a6174f4aeb9a2aaac8725ee14604bd586b4297eb91caba","ssdeep":"192:MXHLyjKsbIGO5tlR/enXJPc/6+Kkemh+cMUBX3Pma26GBmx0MVpd:M7yjKsbBnpi6+KtHcbnPma2ax0Ipd","tlshash":"57526ca12180209183d705a6266ffb587435793abb93a83ca09decf8731cf9d90c7b53","size":13202,"data":"","first_seen":"2025-11-29T00:57:52.500436Z","last_seen":"2026-04-04T17:17:12.839597Z","times_seen":1198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fquaxi.xyz%2Fhuu%2F\u0026j=\u0026wk=5jzm59h1f9","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","size":2292,"data":"","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-04-04T17:34:37.706308Z","times_seen":2440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=quaxi.xyz\u0026_ss=7fjq38e6ve\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=pkep\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f7e39f9ee4a5e53debff9cd5101dd8","sha1":"ae06d0f7157c764697fe4159d960d185b252bb5e","sha256":"8de0c2def231bbd45d57d4149916de58c0b5ece5d3a779c01ff6ffc31471f9bf","sha512":"3ac8300a764ad469ac885ad4b4491099d114843879dfd25a0b449dff206744ab5a85b01733e6800bb4d14ac68ba08848d50c45d67049c5f2d29dcf85c6cf2eca","ssdeep":"","tlshash":"f690022964e180201ad9d750145a2244417107d819d051958432552411897809a5b9b8","size":52,"data":"","first_seen":"2025-12-31T10:17:08.214516Z","last_seen":"2025-12-31T10:17:08.214516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7e3ba5043107f12453294dc8bdf4e21","sha1":"d8de443fb2cd9b3a38d6a49caf13bccdd247f605","sha256":"93cd9bec593cb9c94226f115c689bbdbd206be538547a934593538d7a6646e9c","sha512":"d3213d301a48feae15f5c377e5af5dcaf48b23274ef0c58c9f24964bef41c8599bc261295d1a6f504b603c0743c99ffe87c9aa7bcc059906db972c1c2d18116c","ssdeep":"","tlshash":"1cb012159044002762444510002c268ca3b4d28036fc411073ccdd31405f94d79a2254","size":92,"data":"","first_seen":"2025-12-31T10:17:08.218405Z","last_seen":"2025-12-31T10:17:08.218405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0999628d755a92ebb18426d5930efd1","sha1":"1e8961380c61acad244233b35939cfca1597cd42","sha256":"df94a7ca9163ffb7942447d240445b6041dd16070aa0b518d601976ca4e1c95c","sha512":"a42c5358cf8f35e4578d98172e10f9c4fd68bbaac0d4ee98ad85b840cb0f95fda0ab18778c986014922dfeb4746dc3b0d3552946c7a4a9161a806775914a9884","ssdeep":"","tlshash":"9411b7c4b21506f401662a2dc4341bc9e2b9299cb6db1ca7cc0c8c2cb1b256f46b6f7f","size":1100,"data":"","first_seen":"2025-12-03T05:32:37.74183Z","last_seen":"2026-04-04T16:44:19.574774Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T17:43:51.800751Z","times_seen":131838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","size":39952,"data":"","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-04-04T17:34:37.684382Z","times_seen":2493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:43.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 19:37:15 GMT","end":"Sun, 15 Mar 2026 20:37:11 GMT"},"fingerprint":{"sha1":"65:98:57:1D:D0:E1:C6:FD:D4:EA:FE:DC:DD:B7:64:B6:6F:BC:2D:3E","sha256":"73:94:A9:0B:3C:AC:A5:A2:4B:D1:6F:F3:A7:32:53:C1:6F:62:A5:D7:51:1D:50:84:CB:3B:AB:DB:1B:B3:78:23"}}},"request":{"raw":"GET /d.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:16:43 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 17 Dec 2025 22:03:09 GMT\r\netag: W/\"6943289d-3392\"\r\nexpires: Thu, 01 Jan 2026 09:34:43 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2519\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AE3bAR%2BqXN0k3gCRZVUtNbzks0EgOfq15zvGB8xL%2Fuzr433V%2F3kk235JrjSKia6rAmVDWBO0OaG6jovaKy3SR39%2BR2gv\"}]}\r\nserver: cloudflare\r\ncf-ray: 9b6905e7fe26569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13202,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13202), with no line terminators","md5":"e5992534af71baf4983f6f7b82c5fcf7","sha1":"a233028f5d7ea0d20ddf00c03167d4ee3e4f21b7","sha256":"7c27802697a33c3f1b9cf7995f01c5d6caa544ce60e8828f16eb7eed8c878c58","sha512":"800422fe039555fd9e4db68cc43c1f6fdaf0a971c2bfda36e79f058ba95dff7760b5b7762c2cbd1b54a6174f4aeb9a2aaac8725ee14604bd586b4297eb91caba","ssdeep":"192:MXHLyjKsbIGO5tlR/enXJPc/6+Kkemh+cMUBX3Pma26GBmx0MVpd:M7yjKsbBnpi6+KtHcbnPma2ax0Ipd","tlshash":"57526ca12180209183d705a6266ffb587435793abb93a83ca09decf8731cf9d90c7b53","first_seen":"2025-11-29T00:57:52.500436Z","last_seen":"2026-04-04T17:17:12.839597Z","times_seen":1198,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:44.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrktmtrcs.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:25:16 GMT","end":"Tue, 24 Feb 2026 22:25:15 GMT"},"fingerprint":{"sha1":"B1:B8:C8:FB:D8:BE:16:F2:FB:48:B3:17:B3:16:C6:A6:D3:7C:6B:5D","sha256":"58:4E:5B:73:64:D3:A0:B0:A4:BA:45:97:C8:DB:73:B2:47:3A:B6:A3:8B:B5:21:4A:41:5D:DF:62:81:07:80:F8"}}},"request":{"raw":"GET /mm.js HTTP/1.1\r\nHost: p.mrktmtrcs.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:16:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 20:03:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jkc0RT8FORj5rc5X1eB5vwpfJPkeKue6u%2BRm9DZ6Q8qe3Sek4z6w%2BAz0kBSHwDWEoX9K%2FOllU0%2Br3AEUrbojPztGtumW3BOC5vWFs6U5\"}]}\r\nage: 5105\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"682e3177-9c10\"\r\ncontent-encoding: br\r\ncf-ray: 9b6905eb3801783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30767)","md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-04-04T17:34:37.684382Z","times_seen":2493,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":29,"dns":10,"connect":1,"send":0,"wait":6,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/favicon.ico","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:44.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.quaxi.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 00:06:18 GMT","end":"Wed, 11 Mar 2026 00:06:17 GMT"},"fingerprint":{"sha1":"05:2B:18:2A:AE:1E:2C:61:7B:38:1A:DB:4A:7A:CD:6E:41:42:AE:4A","sha256":"5E:AD:C0:29:7A:A2:CE:BE:C4:0C:60:B8:98:3C:14:E2:3C:5D:1A:FD:4A:CD:17:02:B8:B7:86:D8:74:A4:F8:41"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: quaxi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/huu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 31 Dec 2025 10:16:44 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-04T17:39:56.781903Z","times_seen":115748,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/huu/","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T10:16:42.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.quaxi.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 00:06:18 GMT","end":"Wed, 11 Mar 2026 00:06:17 GMT"},"fingerprint":{"sha1":"05:2B:18:2A:AE:1E:2C:61:7B:38:1A:DB:4A:7A:CD:6E:41:42:AE:4A","sha256":"5E:AD:C0:29:7A:A2:CE:BE:C4:0C:60:B8:98:3C:14:E2:3C:5D:1A:FD:4A:CD:17:02:B8:B7:86:D8:74:A4:F8:41"}}},"request":{"raw":"GET /huu/ HTTP/1.1\r\nHost: quaxi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://quaxi.xyz/xmlrpc.php\r\nlink: \u003chttps://quaxi.xyz/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://quaxi.xyz/wp-json/wp/v2/posts/2446\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://quaxi.xyz/?p=2446\u003e; rel=shortlink\r\ncache-control: public, max-age=0\r\nexpires: Wed, 31 Dec 2025 10:16:42 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 31 Dec 2025 10:16:42 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":119505,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16585), with CRLF, LF line terminators","md5":"7bd41a81b7a3004e32041a77a35d2833","sha1":"a4c2d62258285f7bc6d0697d99b532060791a3e3","sha256":"a6f0b80d8b46d531577e69a4420cef1c9ccaea380097884124fb432f26c99870","sha512":"3ceebc1c8c4e7c680c5a8caa1960eb8022074b3226ee1ff33126b73e908e172af29df31e5fd4771551b0b3f8cd38ab727030b0fa7a009307692bfd693d85bfb0","ssdeep":"3072:MGQdUmzbMDD44OqCf2ifqippxZfrXF3ft72297CKJas9Bj+w6fV5CKs:Ud8DD44ofF5ppxZTXF3ft17CKgs90w6g","tlshash":"9fc35be1fa3455362e7f46b5f05f2247b5b4da369a898072f0a8c4681e98cb700f7b1d","first_seen":"2025-12-31T10:17:08.212324Z","last_seen":"2025-12-31T10:17:08.212324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":349,"dns":51,"connect":142,"send":0,"wait":429,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fquaxi.xyz%2Fhuu%2F\u0026j=\u0026wk=5jzm59h1f9","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:43.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 16:30:40 GMT","end":"Fri, 27 Mar 2026 17:30:26 GMT"},"fingerprint":{"sha1":"EE:6E:B4:B9:88:07:D3:25:5C:F9:6D:C8:5B:09:7C:37:0D:91:F0:E5","sha256":"3F:E4:11:CF:0F:3D:45:BA:19:B6:42:98:24:21:FC:C2:EB:1C:21:CC:09:23:A5:83:15:EF:89:C8:0D:BC:77:40"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fquaxi.xyz%2Fhuu%2F\u0026j=\u0026wk=5jzm59h1f9 HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:16:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nset-cookie: df=1767176203; Domain=dtscout.com; Expires=Fri, 10-Apr-2026 10:16:43 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure\r\nx-t: 0.527\r\nexpires: Wed, 31 Dec 2025 10:16:42 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uA6CxRoqu9UEg%2Fi92FX7gf%2Fv4CfRfbp0A%2BOnElomSSepZsLWcodEVYcWNAaIRo9VlTt6UPkL62qkC0y8y7M5ayQn2q2hNCpSfi4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6905e8f82a5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2077)","md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-04-04T17:34:37.706308Z","times_seen":2440,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":17,"dns":5,"connect":1,"send":0,"wait":269,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quaxi.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"quaxi.xyz","domain":"quaxi.xyz","tld":"xyz"},"ip":{"addr":"195.250.27.21","port":443,"asn":211126,"as":"WHG Hosting Services Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:43.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.quaxi.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 00:06:18 GMT","end":"Wed, 11 Mar 2026 00:06:17 GMT"},"fingerprint":{"sha1":"05:2B:18:2A:AE:1E:2C:61:7B:38:1A:DB:4A:7A:CD:6E:41:42:AE:4A","sha256":"5E:AD:C0:29:7A:A2:CE:BE:C4:0C:60:B8:98:3C:14:E2:3C:5D:1A:FD:4A:CD:17:02:B8:B7:86:D8:74:A4:F8:41"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: quaxi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/huu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public\r\nexpires: Thu, 31 Dec 2026 10:16:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 08:44:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4949\r\ndate: Wed, 31 Dec 2025 10:16:43 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T17:43:51.800751Z","times_seen":131838,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=quaxi.xyz\u0026_ss=7fjq38e6ve\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=pkep\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.11.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quaxi.xyz/huu/","date":"2025-12-31T10:16:44.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 16:30:40 GMT","end":"Fri, 27 Mar 2026 17:30:26 GMT"},"fingerprint":{"sha1":"EE:6E:B4:B9:88:07:D3:25:5C:F9:6D:C8:5B:09:7C:37:0D:91:F0:E5","sha256":"3F:E4:11:CF:0F:3D:45:BA:19:B6:42:98:24:21:FC:C2:EB:1C:21:CC:09:23:A5:83:15:EF:89:C8:0D:BC:77:40"}}},"request":{"raw":"GET /pv/?_a=v\u0026_h=quaxi.xyz\u0026_ss=7fjq38e6ve\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=pkep\u0026_cb=_dtspv.c HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quaxi.xyz/\r\nCookie: df=1767176203\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 10:16:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-t: 0.136\r\nx-c: 0\r\nexpires: Wed, 31 Dec 2025 10:16:43 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDXnOHBdgeQE3bl8gmNWZ0W886PRRDw%2BUFhsyqSKEi23CNB8E7k054ctsdrGDmwhgaq9fPMDj4yirTEMyJMO7qw1uEegBLuGhD8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6905eb09d35685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"96f7e39f9ee4a5e53debff9cd5101dd8","sha1":"ae06d0f7157c764697fe4159d960d185b252bb5e","sha256":"8de0c2def231bbd45d57d4149916de58c0b5ece5d3a779c01ff6ffc31471f9bf","sha512":"3ac8300a764ad469ac885ad4b4491099d114843879dfd25a0b449dff206744ab5a85b01733e6800bb4d14ac68ba08848d50c45d67049c5f2d29dcf85c6cf2eca","ssdeep":"","tlshash":"f690022964e180201ad9d750145a2244417107d819d051958432552411897809a5b9b8","first_seen":"2025-12-31T10:17:08.214516Z","last_seen":"2025-12-31T10:17:08.214516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}