{"report_id":"1f38cdf6-cb70-482b-a000-0d625fd79ce8","version":0,"status":"done","tags":[],"date":"2026-08-31T09:01:34Z","url":{"schema":"http","addr":"dpd.qzvbbk.cfd/com","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"104.21.71.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/#/index","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"title":"DPD Local","dom":{"size":31188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28732)","md5":"d67f4fa1b0937f9980960f1235d0d888","sha1":"809f45f188787f795a60f050775bc450f239fd44","sha256":"ac2d9deeb057506b3c97d2a19ea16a618ce3d4763677b3ecb47bbd749ef32096","sha512":"43a60b31ea2efac8d743d6619229bc458ac56394eccc000629c5cb2ca13085f8bc5df5bfbfbb4b44b24cdab3b58ccb2c53aebedbebd56821cb0c76baa6e3b2bc","ssdeep":"768:dwfor3mbj9B5lepJVKTT7uVf/BXTY/8MGeCreezXfwoBNT:ZOHle7kT7ul/BXTY/BGe8eeMoBd","tlshash":"bde24335a70500ee916bc5c8d225bf5532e7e36bc02880a4be9f06726fc7d61f6129e7","dom_hash":"domhashed049c0931037683e22aca9a858f3666","first_seen":"2026-08-31T09:01:36.798565Z","last_seen":"2026-08-31T09:01:36.798565Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dpd.qzvbbk.cfd/com","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"104.21.71.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:01:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dpd.qzvbbk.cfd","ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-08-30T22:33:58.562769Z","last_seen":"2026-08-30T22:33:58.562769Z","alert_count":36,"request_count":13,"received_data":1263818,"sent_data":6998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/E8Ho6ETs.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","size":84945,"data":"","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/DhqmAzot.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","size":183340,"data":"","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/DQdO6SN9.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","size":554094,"data":"","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/E8Ho6ETs.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:02.564Z","timestamp":1788166862564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/E8Ho6ETs.js HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 09:01:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7UV1S5CNUdWcuTxNuSfqB0pHuhcc3erPY2tmJJYi1rJ4zPFB2QYcdCOHNiR%2Fgz0F1TGDcbm9zlt2z69zfN1ceHr6zc8iUsiVeExyBjhKgvL1CE5UIGGNbxYavhKSNpRFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33ad92b0f8e569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84945,"size_decoded":30472,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators","md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T12:18:54.748958Z","times_seen":19,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/DQdO6SN9.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:02.568Z","timestamp":1788166862568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/DQdO6SN9.js HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 09:01:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rg%2FKhiknO9dzie4yjfiITQpJL8JRzqXZ6YsDiemTmKn%2FLk7BwpUjjuvc%2BJl1ONVjIge0Ho74aSFl9S2lUuac5j5jKyaDQ23ZAAJqv1VtS3Gp01f8QnmVM9RL5If3yNAx1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad92b0f90569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554094,"size_decoded":183556,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T12:18:54.747225Z","times_seen":19,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":503,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/Dw2Q-3X1.css","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:02.569Z","timestamp":1788166862569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/Dw2Q-3X1.css HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 09:01:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NU%2Bkbx9UJFEEmm%2FbgsVWz7DoAq0czuctbWcAaVjaob8KEWyJbYTjD2RE334DZpFgCY8p1D17OeMC7V4rrey3TH1wrXeFdq8b%2BRB2SUuinoQtMK%2FYQjxaIX%2FXfgC1s%2BtKhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33ad92b1f91569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60381,"size_decoded":8947,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60380)","md5":"b68d450f564fa4095b39a4b7c57a0978","sha1":"58a3ea9eb890327d9c3a2e567eb0795ec5fbd376","sha256":"6a9cf39ffa1d41a393da1e5030b9b46c98bd11c4fe778081710dc6fbbbd0ed10","sha512":"0589959a1c2d7ef261fbc90d12ba4daa951e6bc1a786d0b33170561e739dd855252f9861f8cf1ff66e19ad2d8a7eeeb9125a7b471c5bf6f6cb87c3a68e2cac15","ssdeep":"768:1/fGmmVAL0uVYXEAFAtCbRgVaXp9jC8FpKdDm0pC59PwL3yVe0FpJvY:QOAuVYXt/tggP7a","tlshash":"de439561362c2038f97bd955b8d09bae3109f313d5235aeeee65a535cc870933b3269c","first_seen":"2026-08-22T02:48:44.572728Z","last_seen":"2026-08-31T12:18:54.74781Z","times_seen":27,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.qzvbbk.cfd/console/?uuid=277be5f7-6e26-4309-89a4-380fbf55c658\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:04.123Z","timestamp":1788166864123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /console/?uuid=277be5f7-6e26-4309-89a4-380fbf55c658\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.qzvbbk.cfd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Nwu6jqba8Iv3+KlgMONXzQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 09:01:07 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: FQGlhttRIju1vjFV1RD2QpYwTlI=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CCtRoBv3dAlheofTkhdEomXeMitfcrZmE%2FDLGGY%2FwK23MWKJFQLFggKcRExL2ltGXWmKTQhKPVX8JVr%2FOhHkmZHwMM2AKxldnQAIrMXiE5I02z2I5bkqm7B%2BnNuP7BAyg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a33ad9486f6f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":645,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":6496,"timings":{"blocked":0,"dns":3129,"connect":3130,"send":0,"wait":228,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/OwDWr5DG.woff","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:04.412Z","timestamp":1788166864412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/OwDWr5DG.woff HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/assets/Ysl5gP_N.css\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:04 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBeKyIH3t40oMTtppJnTCy9Fx8KjZwSC2DTDBl44VQpINV4O9rXNjvzqZLlfsnF29z6uPbtpmven0YHNOgL0mSCz2yAMpWSL8tWKtHAV4SpkRuo0HDC7bD1clDQqEQuQ%2FQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 09:01:04 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad9369851569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":60719,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60042, version 1.0","md5":"32319d6149e2659c974fef61dfd5cc42","sha1":"e2aedccccdbad3f63b14e27941c59e7ba533cc51","sha256":"c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3","sha512":"93a8d50361921549721c1313a53b122fd14fa7470c801bb1a785a72d0c022da4db26b650eb776ce0f9a2e4971363efc84095f0a8a30e57751d9a580454295e9a","ssdeep":"1536:yqdSnqzzEYachE4HiGuwH9wxpzLDFV6aP:yGKch0GFH9AxDH6G","tlshash":"7d4302dad28b50059c2ed4b12acdf4d8fe0516f58cdd75688eb4d1a823efddd9949030","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.745901Z","times_seen":2129,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:01:02.129Z","timestamp":1788166862129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/ HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c; Path=/; Expires=Mon, 31-Aug-2026 09:11:02 GMT; Max-Age=600\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7m7rfU93ejWK5nEmGRc%2Bia5Fg6W2vlVCxEHOrZFNl3OAMJfBGwCpf9lMjZS8Vlmult3uyPa0iAwvd%2Bc6z%2Feskpg5qY%2B0dpm4nhMB3tbsM9M%2FOIFaCJLJdV0zXpI68gxc7g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad9285f60569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vt","value":"73682620-7c8f-404a-9cfd-de19a258172c","quoted":false,"path":"/","expires":"2026-08-31T09:11:02Z","raw_expires":"Mon, 31-Aug-2026 09:11:02 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_vt=73682620-7c8f-404a-9cfd-de19a258172c; Path=/; Expires=Mon, 31-Aug-2026 09:11:02 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":1740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"8bd131267af0372651771a75eb4ced76","sha1":"5e36a2f79023423e281a5f05662b2962f58ddc01","sha256":"b7fbe1e796e21d2e51bbd8c9296eefac4c393c05a33de90b2b00964b4ae04916","sha512":"ffdc4daca62dad0b621d6381341efcdfe09d933c75e1b982ff27abcf4bfeef30d9e8a01c45ca4f4aed8877d29d85a0dc8d3c9cdee82864504721e1815231fe86","ssdeep":"","tlshash":"8b41259205930c16132343a2dfd6a201d2f1d603c14ffc4479fd10ae4fa4a8599e7f38","first_seen":"2026-08-30T09:26:57.975241Z","last_seen":"2026-08-31T12:18:54.745166Z","times_seen":19,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/DhqmAzot.js","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:02.566Z","timestamp":1788166862566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/DhqmAzot.js HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 09:01:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8esk1dgpxIuleizpoOgkLi60EtXHdoRhWs60nvYrAVL7Mdtr7s7TnGT9kfPOGFASYtm8wjrz2lR%2FlE0Ee%2FFYt8tN%2FJMsSr2j7lGaXgdhEgVMjemSuOCjnzjKoe7lP7hG6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad92b0f8f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183340,"size_decoded":67204,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T12:18:54.746552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/D6WjOvV9.png","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:03.563Z","timestamp":1788166863563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:03 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 31 Aug 2026 09:01:03 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwjSmbJWVsySTXuU4Vicv9Ke1fGLXj38%2BGvhDDW8zVagKQ6Wtg%2FDX%2FZs00a5oSVdFkjiY6lhO5BdHFASjpnvXWbb0fKYEuyTiUOYkEIZWSL9hP21NBRSyCbaolf4%2BlRkXg%3D%3D\"}]}\r\ncf-ray: a33ad9314809569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21426,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":372,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/BOnPfxxG.woff","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:04.410Z","timestamp":1788166864410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/BOnPfxxG.woff HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/assets/Ysl5gP_N.css\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:04 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=783zLVY2m5OYL0OP0AanDLkGic54NeTQ6i%2Fr8gLjjyphH0qcPnJaVTZaeaGV6g7n6rZaFGRAUvl1%2B%2FOh9WKiVPdyVM%2FNQntfXpGL%2BmyltQGPSMi4sd3PyMkqlhXKxyjJ4g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 09:01:04 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad9369850569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60781,"size_decoded":61466,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60781, version 1.0","md5":"20398ebf2986259c88014178d7044844","sha1":"02422f7f86e44268579b2b3694ca72eaaa8a301a","sha256":"9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0","sha512":"e353fbce67c1e46ecfc04c74e56d06f8916149d071700fee9cce2976987f2c5a5878dcd434590beeb02c417e9da0379696695f49ac9561ac423eb3d592438133","ssdeep":"1536:/mNyBIPLRqPeSDzYi5G0ChYnizF7Bz/bad7bSByIdPSE9:+VzRqbHT000iwz/bO7bjo9","tlshash":"3053026d635f1330ad5cb62770e8ea782d16fdbc61c2e9020351b2ca0e7a265e72d35d","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T12:18:54.749552Z","times_seen":2116,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/D6WjOvV9.png","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:04.415Z","timestamp":1788166864415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:04 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 0\r\nlast-modified: Mon, 31 Aug 2026 09:01:03 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpXqI%2BZJsk95Gd3pPCr81RhsZc7FiP%2FZsOrIXIVUfZrmYzkF8Fnzto00uaUky50QpbMvuxnYDG6wcn3sZoyuXTdBstL2vfwbvoE3cgl2H0%2BYcQbBsAoZFX8dVjr4IDOrYg%3D%3D\"}]}\r\ncf-ray: a33ad9369852569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21425,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T12:18:54.744476Z","times_seen":840,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:01:01.604Z","timestamp":1788166861604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nlocation: /com/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqfSyPVP7%2B%2Bpdtl07464asIcAPNTe19SFfz3f1kIKpFb7%2BfUlhjz%2BADc0Pf%2Fwz9s4Zr2xX73YTmmlK0WES7qKkq7Ztvh1J0Mr%2F1BLX9vxyp0UvebvRC%2BuUmAtiTnoAgvXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33ad925cf2f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":96,"connect":17,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/Ysl5gP_N.css","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:02.571Z","timestamp":1788166862571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/Ysl5gP_N.css HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:02 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 09:01:02 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2Bxq%2FI5hAhVk2Z6zVLL6e0oABwQSfWk0HuH6deqzwGc%2Bv6AgS02Vu7EkJahkhiSd39FclJDcN2x4vroHTtg%2BpSFhupBX9rDbYxM9RlCEgP0TcjrqYs%2FW6ENsV2eLiOTJzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33ad92b1f92569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72646,"size_decoded":12659,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24bbaa2d9a54ac50885af44427e3f442","sha1":"f8d69b5393ba572ccec98e09d1673c2bd0037f25","sha256":"d625a8a7223f626b8f0ed13fd8d9c3c4f21f0b29555ee1412c0459fb3ead42ba","sha512":"4692960f383cefe5e8c1b2ddfc43fcb24ac2ff16099bd2edbebd0ef881e05a37412b80b1389f352f098b5965be45d4033e591d7dca7fa1c2175f26746bbecb87","ssdeep":"768:rltO/xR1ySZjKKl1Qq5cZ+lMiRhONG1dJkG34mqWPlz/hBhcaa+V2:rlg/Hll1Qq5cZ+M+AG1f3IWPlz8","tlshash":"0b63c7b9775c2014f87bc99716e466cd01246326f113439cea27ba358ecf6933e72ad8","first_seen":"2026-08-30T09:26:57.979502Z","last_seen":"2026-08-31T12:18:54.748388Z","times_seen":19,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.qzvbbk.cfd/com/assets/fS-WSyLf.jpg","fqdn":"dpd.qzvbbk.cfd","domain":"qzvbbk.cfd","tld":"cfd"},"ip":{"addr":"172.67.143.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.qzvbbk.cfd/com/","date":"2026-08-31T09:01:04.417Z","timestamp":1788166864417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qzvbbk.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 12:20:32 GMT","end":"Fri, 27 Nov 2026 13:18:55 GMT"},"fingerprint":{"sha1":"72:08:E2:B1:51:85:3F:92:DF:BB:23:38:E3:30:7A:4D:29:53:31:B0","sha256":"EC:58:91:96:3B:9D:6F:62:7F:27:7E:39:C0:A1:91:11:38:01:13:2A:EB:D7:E1:A2:C7:CC:59:B4:36:63:1F:BD"}}},"request":{"raw":"GET /com/assets/fS-WSyLf.jpg HTTP/1.1\r\nHost: dpd.qzvbbk.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.qzvbbk.cfd/com/\r\nCookie: _vt=73682620-7c8f-404a-9cfd-de19a258172c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:01:04 GMT\r\ncontent-type: image/jpeg;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nlast-modified: Mon, 31 Aug 2026 09:01:04 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0CAw70Mob%2FQTCJz2xIGswJBmDpLDOAARCD4XwDaEhK5KhfbHdhhyIzJUAXGejAZmLR%2FMpdsciE%2FDOrNCG0mopb2Lgo2fqE3CUukSvsS7Ho54t0thVUlvK31H1kGa2RLvw%3D%3D\"}]}\r\ncf-ray: a33ad9369856569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134719,"size_decoded":135360,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"c9366d3c96a7e0b114309b0c71cf2ba0","sha1":"582b2fea1bd70cc908b82e33d07ffbafeb7a303a","sha256":"7e166c9fb31e3358ced873ed61e59da1e2e849a5193e27d5c4dab3a5a8ed1e44","sha512":"77d145beed6247975a6e419bf3606e9336fb06f22e552546b01ef82e34e5b7fc278113c49848d3f25148bf2fb772b4fbb4a381d4d0faff177727e61a78473909","ssdeep":"3072:JRiYiMREGUNgNtLewB/jxzWxE4Zn9T/JVIt6XnuG4D2zHCOr:aYiMqGAsCIFzWxE+9Nytkr","tlshash":"0bd312e45ea45412f401ee7a4cf05943c2423ee77bc5da48b38b3f10baa41619eeb8d7","first_seen":"2026-08-22T02:48:44.583554Z","last_seen":"2026-08-31T12:18:54.750854Z","times_seen":27,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.qzvbbk.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-30","alert":"Phishing Block","trigger":"dpd.qzvbbk.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}