{"report_id":"2367ac9d-1162-4d02-a8d5-6557d5d4adc8","version":0,"status":"done","tags":[],"date":"2026-09-06T12:57:31Z","url":{"schema":"http","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"title":"U盾⁣商⁣城-‍2⁣4小时‌交⁣易⁣发⁣号平台","dom":{"size":105040,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3055)","md5":"a803a8923d8e77420391f95ce160ba23","sha1":"46f9057e5219503aa2a68f7047b73cdbcee5b9ed","sha256":"5d2931d98db85ff66db43af62c8931f65b514da36e69a1f40f8d9faea0d5020d","sha512":"34fed871e3eb7543e7b949a1fae26fff080ac2509324b444411c9d8d079e9c83b3694e192d29a75a418d2ac4380be0c919648a899f308aa18e97c6c56fec2707","ssdeep":"1536:biRiA82HNiHzbI1eFe9AGa87bKVzd9ANmee7FA91rzbI1eFe9AGa87bKVzd9ANmA:+UA88sTbHQbokNx1HbHQbokNl6wNKQ","tlshash":"0ea34061c6f20067007790d099e2ab0bbfd2d60bc9538a587bfc9bd59fcfd56a853128","dom_hash":"domhash6e8a2fe35e1d80092e5fbffa2d54fc7e","first_seen":"2026-09-06T12:57:38.708353Z","last_seen":"2026-09-06T12:57:38.708353Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T12:57:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nmkdy.ubuy666.top","ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-26","domain_rank":0,"first_seen":"2026-09-06T12:57:34.264549Z","last_seen":"2026-09-06T12:57:34.264549Z","alert_count":56,"request_count":56,"received_data":6261825,"sent_data":30233,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/toastr/toastr.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e405974a64ab3f51e0a9cbcc9199149","sha1":"9bbb90da5efe3fc9659e645531141c85a5fa79b1","sha256":"b5b2d8a29915860388b7e415352a3085e49f4ad70fd90a50627a86d68c1a0899","sha512":"ed26bf2cf8fa4f16eba27854bbe168124aa0580e2f7efb8c5047d8bd0c4e361fbfa2f126d44fdf0185cc62e13e92e5959151824306f37a7d443c0b92aaca9464","ssdeep":"192:JJwWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoA:Jt45Kk7cZDItqLNA","tlshash":"a1829509691263658cfb73bc9a97800cfbba9323454996067d7c92d8af30614d6f2fdc","size":18203,"data":"","first_seen":"2023-05-22T02:08:44Z","last_seen":"2026-09-06T13:02:48.952668Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/swiper/swiper-bundle.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-06T19:21:56.978969Z","times_seen":15382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6117b35bb4b94ba857eb52bebc81bfaf","sha1":"f307aa30177650ffbc3cf8f715b5f0b7e0cd0e19","sha256":"33c24702addffedcbeb3a5cf836eecb8a7ebc7ae64a24c1c92b51ae5e08b42ea","sha512":"aba784dd2764a7aa01056d198a2f432dc46fe1b2ed01aff2803fd753220a3f93cf0508d7996bf7b4560a74fcb5aa7e4d145576a01bd94bcb93c3e6e02d006cbe","ssdeep":"192:MEHtB+Jg4NrdYuB2L33D3I1GgVUF88KDyFt/3xkZGA:X8JVbYsY3zzA","tlshash":"dad1869890f755b5067330b557abf6063121850b38a8cda5ffacc3405f8476e1eb2bea","size":6563,"data":"","first_seen":"2026-09-06T12:51:55.751412Z","last_seen":"2026-09-06T13:02:48.988042Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2930b7f9d6cc565d1cc8fdbd64def34d","sha1":"7d9c2c12427e20ba2ef7f12b9ba2feef28b297c8","sha256":"997a9dc6117804525304609039491003c3fd99894bc9b86b9632a9324c19bfca","sha512":"483b0da4e914184a33ef8cb62b0e191858ce878cebe2c0d082c1a2f181d6cb5f395cbd00f436754b7bd73abf481646e5ea5f371ecd08ed7fb37d3f3ddcb909eb","ssdeep":"","tlshash":"b42148ae7aaf106c6657b0780f9e22083074000b9509df62bd2cf6506fe2e6115fdee0","size":1123,"data":"","first_seen":"2026-09-06T12:51:55.753555Z","last_seen":"2026-09-06T13:02:48.989428Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/js/vendor/jquery-3.6.0.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-09-06T19:44:53.052072Z","times_seen":11270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/bootstrap/dist/js/bootstrap.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-09-06T13:02:48.975607Z","times_seen":2459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/fastadmin-layer/dist/layer.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f0a8e84a0bc3695657c749154c48384","sha1":"fd32b854b7dbdde010c22511eaf7b104a6626a59","sha256":"ce4a1d1ea39aa22ddfd8334f831a3a65aa343c5cad95e3b13cf839af8193f5a2","sha512":"c3fae5f51f05eab4668cfcba996366d1ff9ddf4b9810943f55e52fbb802bfc2e8a23d0a5d5bd49cc469b5fe9da264cea5077e69dd9f4438ef244294b23249517","ssdeep":"384:v1+9iss0R9YiKTtXSt/ildrGr4u46K+LxzCPTElH0j1VhpPtwo:v1gistYi0QtalA5KiFYb2o","tlshash":"5bb2d86a754034976323916ad10fba0b31b11d24d7078128f22bb4bd1dbcd99a2b7f5f","size":23513,"data":"","first_seen":"2023-11-26T05:15:16Z","last_seen":"2026-09-06T13:02:48.976325Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🚀 页面加载 - 仅从 URL 获取 uid 模式已启用","filename":"https://nmkdy.ubuy666.top/","line_number":1454,"column_number":13},{"level":"warn","text":"URL 中未找到 uid 参数","filename":"https://nmkdy.ubuy666.top/","line_number":1383,"column_number":17},{"level":"log","text":"✅ 仅依赖 URL uid 的完整逻辑已加载完成","filename":"https://nmkdy.ubuy666.top/","line_number":1497,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250423/88af0d309fa327e14b09de0749fecfbc.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.237Z","timestamp":1788699412237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250423/88af0d309fa327e14b09de0749fecfbc.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Apr 2025 09:44:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6808b674-11ec6\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71yTCFnrpBxXmA5BOuXrJcb5RS4%2FTxgZKxXJsb41WtrDWyrHdJDwY3o86e5WO4L6XykxSOy44Ga%2FO28e43D8U%2FldzUUow9kmm2DIbfSv%2BKvqeRjkVY9aEbIfrXmoP1S34q1lVg%3D%3D\"}]}\r\ncf-ray: a36da2de7f32dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73414,"size_decoded":74246,"mime_type":"image/png","magic":"PNG image data, 168 x 179, 8-bit/color RGB, non-interlaced","md5":"88af0d309fa327e14b09de0749fecfbc","sha1":"c74d28fb29fc478f02291258d12d45e0131679a4","sha256":"2ba764c505529f6bd0be47b92b70be94c8d52087137dfdc6ea4262718b059f76","sha512":"4a953e2ef6b626047647c4834ba8cf5501522dafb36d6ce40628f5ee7b54806914de74573809e3132dd6a8ce90e84cd1656a87e3e67db6e98f93600009a998b5","ssdeep":"1536:rdnyv3P1QT27sd7189FdAwy0HDq3msK/ckHcztueVo6aXkKQUYMIPwWSkQmF7:rdsKIDyiLswcuyoTiPMIr7hF7","tlshash":"62730263eaf976dda490c6b547819d4a2e0ac8f4571898d3c6e5ccdef21f72022603de","first_seen":"2026-09-06T12:51:55.685329Z","last_seen":"2026-09-06T13:02:48.939997Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1599,"receive":937,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T12:56:50.794Z","timestamp":1788699410794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKPsbN0fHv%2BRWOumwm7hRwExwec4JBHQPrRVxmEc%2FZYwLKo6aO30rNHCc%2FmFxhQvUsOAVcQEULqpNKaV%2BB3hCoK3a7M5%2BI5i9sPNFusm7Pt%2BHdd500lpr5ZITZFxw%2FPLDil%2BXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a36da2d5ed56dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105533,"size_decoded":13755,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3055)","md5":"d34a8e4960537624b0bba7d23130b520","sha1":"9df08c92d45449146491e35aa50be5eb4ddcc21a","sha256":"32024608dea3597446dec849ee0fc3004be0117bb8ce7262dfa14190829c9329","sha512":"a18a72011b2651bf6630f967029ab4ecc0e52e454c7b37812b0a447d1973e32344ac990cfdb543546349fab7aafc0d71e5649a0a82c578eb0c5e91c916a45e2d","ssdeep":"1536:wiRivQ2HNiHzbI1eFe9AGa87bKVzd9ANmee7+Am1rzbI1eFe9AGa87bKVzd9ANmb:bUvQ8sTbHQbokN31HbHQbokN86wNKu","tlshash":"cea34061c6f20067007790d09ae29b0bbfd2d60bc9538a587bfc9bd59fcfd56a853128","first_seen":"2026-09-06T12:51:55.669191Z","last_seen":"2026-09-06T13:02:48.983641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":55,"connect":16,"send":0,"wait":1083,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250917/ba6b7c86aedb404ef8dc1717612dd77e.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.226Z","timestamp":1788699412226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250917/ba6b7c86aedb404ef8dc1717612dd77e.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Sep 2025 17:29:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c99e92-3b6c\"\r\nexpires: Tue, 06 Oct 2026 12:56:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FpT%2BXreVeS%2F7ugPxjbpyXbx5CZpoJHM15Sc3%2BrVb4CO7N%2F%2BMOitks7MeSvIGyBOkeQ6LChf51S6xTQs1w871ZM7%2FdtZAJjGjrrNxLcTmw4cG6howpU2ZgcyQLvys25DhKg%2FkQ%3D%3D\"}]}\r\ncf-ray: a36da2de6f23dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15212,"size_decoded":15818,"mime_type":"image/png","magic":"PNG image data, 265 x 264, 8-bit/color RGBA, non-interlaced","md5":"ba6b7c86aedb404ef8dc1717612dd77e","sha1":"b46f4e69729be74f0489bc6d2ee48175079d041d","sha256":"3c5fc160f123cf1f0f4b7937e612c7eda676ee1efb355c368957a3f9e963bd78","sha512":"49ef6fecbaec506eeb5269fe0764762d6ffe80c08d5eb7a752624de5287789bf416ecd753caaf69e737f044c41b28745b4dea3984f9da3fa030425d6e85183d8","ssdeep":"384:KiIfQoInm8TfAzJ7Crm7r5Wpc5GykPdoU8Xjhz9Ii4:8mrTi7Crm7192PdkNy","tlshash":"f562d0ddbfd4151811a6e84ad3f786b442e9e38c7a907b3a3823a15730eb5064c6fe13","first_seen":"2026-09-06T12:51:55.71419Z","last_seen":"2026-09-06T13:02:48.9303Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260312/2c5469c5ed2f8a27228b500605384b7b.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.227Z","timestamp":1788699412227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260312/2c5469c5ed2f8a27228b500605384b7b.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 15:31:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2dc5a-6ec40\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8%2FY8haHYXu3808sw5laBIhWhjEGp2bOUJS32F0Tzm4FFhUKRXpPwHgt4BynwPZDGTo30KGwr2TnztybFxbnEPLpWTQwgi9Y1OM0WKmVobpTuKUYVyZKGQO5g250uxLiQcHWUg%3D%3D\"}]}\r\ncf-ray: a36da2de6f25dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":453696,"size_decoded":454174,"mime_type":"image/png","magic":"PNG image data, 673 x 651, 8-bit/color RGBA, non-interlaced","md5":"2c5469c5ed2f8a27228b500605384b7b","sha1":"6b2c3b284f9fd0e79de5842873d09f726a777579","sha256":"199942f919810d2f92cc1fb8976190b95b371e90da897ca3a981c915cb93623d","sha512":"45e2f87c72dd143fdb2fe3f6ccf90b819348ffc3f10b412e680cf25caeb1d5cc5a76e2dbbd546b66bd7dfcc9a590887a2ee5bee4758b771f4b7eb47f02d347e9","ssdeep":"6144:F9W1bTGy9mpiQ+VNxV9n8oHttLZklrUDmb6AgbUTBmNoda4L7DaK/lVYGqBdvZuQ:F4qyQoFXLZkpNb97VCXKTq3vZu5Ia6","tlshash":"e1a423c64858c5df5b8a97f0c183788402a6ec8445c7ec43e6a5930a19aef9e73dde4f","first_seen":"2026-09-06T12:51:55.678529Z","last_seen":"2026-09-06T13:02:48.96951Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1575,"receive":3580,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250906/f1a4451566928ca9d9144ca1e86e513c.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.229Z","timestamp":1788699412229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250906/f1a4451566928ca9d9144ca1e86e513c.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 05 Sep 2025 18:53:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bb31bf-d1ba9\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4b0o%2Fhd0af7EtQHJoIYmsdPu%2BfZB5pgAsJbTykEZ9r4gVCA3YyTY52XOyuHZYm7oT8sWA53bW4qAycTwVLfX9cX6rYt4w24tZatci%2FuqdV1mV7STL6XGsrEKgn9iDC%2FkXM%2BBA%3D%3D\"}]}\r\ncf-ray: a36da2de7f27dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859049,"size_decoded":853648,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2025:09:06 02:42:59, width=0], baseline, precision 8, 2260x2899, components 3","md5":"f1a4451566928ca9d9144ca1e86e513c","sha1":"1bd636617e36f0272b47a05f0dedcf100706b6f8","sha256":"1dc43380c80ce76e02bdc8eef36d88122f9898e972b7d23027b7ecb020588a15","sha512":"a69a3531b482fb4c6b5c1251764ac24c801a0f698dc5955e098507cf7b0b39d4498d5c15c721866eaf3421bd1cb8422516cf68e47d688238a10347e0f63d2af2","ssdeep":"24576:h+EOo5Xi2K8hWbqtUUcd9GQi8Z//wft+CkVLp:w/oi8gcci8Z//wF+BV1","tlshash":"570523125392f037e20ec3712d81cd299ebeac2ca3fd2d4d91a85d2925ae234c771bc5","first_seen":"2026-09-06T12:51:55.680368Z","last_seen":"2026-09-06T13:02:48.961424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1442,"receive":5526,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250324/9223510d4c5c46d5dfd61618e211407b.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.235Z","timestamp":1788699412235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250324/9223510d4c5c46d5dfd61618e211407b.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-4515\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=la9IxS0jSyGm5%2Ft2uPRUnpe%2FzGtIFSyVd3LovPCaxH8dBHL5zwUgq%2FhPpQSbGnIKWdVdKIkbJV1AoRBLCk8rkteWoWVZBipB4wM4XOtBlc4GrodxkwYj9hHfQFnaibFaXUZYGg%3D%3D\"}]}\r\ncf-ray: a36da2de7f30dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17685,"size_decoded":18259,"mime_type":"image/png","magic":"PNG image data, 342 x 345, 8-bit/color RGBA, non-interlaced","md5":"9223510d4c5c46d5dfd61618e211407b","sha1":"aede8e40a1d2881f6e76bd0764ef0bfe19f18a7a","sha256":"65b8c372800168298e21d31b6b6713d4a0a826aa4596c38fcb80c828bd3dc805","sha512":"ba744c6cf5d94a36019934bf7d3d60fbe782801daadc6c3280f34847d98cf12e5ca215468ca0b21f11c53989343690c17ef559e21363924611c4355363fe2037","ssdeep":"384:mPC5OgpBYKTA/cPpIzgjZ1kkzS7lkmznFzmsBrO5TwtwDNk:GCbpNZPpIEjHhmlkmznQlwq2","tlshash":"5f82d0fcd38619fbc85d2adf8c47aa5e5830c590d970209e1c8aa552240f6b8b2cdcf7","first_seen":"2026-09-06T12:51:55.683787Z","last_seen":"2026-09-06T13:02:48.938905Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1290,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250418/d6f58652cbb2823628912bf1fc1ae3f0.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.241Z","timestamp":1788699412241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250418/d6f58652cbb2823628912bf1fc1ae3f0.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Apr 2025 16:13:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680128c6-39db\"\r\nexpires: Tue, 06 Oct 2026 12:56:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYb9735flvnSy0UlElAyB25BYeolWlUaiJlMbfqnJF1%2FSH%2FHzJmIqmnKvzhvzQJntGoKol27Y%2BEkqL1CRiri3GexaR7DzZevxf%2FeQ5gWTyX1F31YpCNRVn3%2Bgms7JGmRsMDdfQ%3D%3D\"}]}\r\ncf-ray: a36da2de8f38dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14811,"size_decoded":15629,"mime_type":"image/png","magic":"PNG image data, 262 x 260, 8-bit/color RGBA, non-interlaced","md5":"d6f58652cbb2823628912bf1fc1ae3f0","sha1":"f7ad0e16aedd2efdca430e97f93c6de0d6dc3b66","sha256":"129e7f8d6e1e80c67fbb7bbc6f0930694c7bdd64a30df8aecb599b955f19a509","sha512":"b53cdd9b0a8d0c7df5e1355e1c6330cbde930ff2df72247b348e6a9f9f001c17d4b46d0a0a1a36bc569436ef2b7e68c37389a9ee81cc7358afd8c844f87a303e","ssdeep":"384:twR0d+VSB0gw0pdfPIn/Sxxij8DnGyWoMRIBt0Eq:twRJSehadfQ/2xijEfMRmyEq","tlshash":"4462d047642980a8d3878bde130013f954a747efef141cd2bb468fe40acbaa60ed9e05","first_seen":"2026-09-06T12:51:55.702643Z","last_seen":"2026-09-06T13:02:48.964694Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20240916/c60f21f7e6771f33bb0c94091e4e5262.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.243Z","timestamp":1788699412243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20240916/c60f21f7e6771f33bb0c94091e4e5262.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-df58\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nhb8Liw7uFgIb89nD1YPOOo2gI96Qz%2Fy1agoeqKarRkl%2FgNnbNy6DOmMuMBOUtOFNSBhbnrlJawRRNRDeAQd2gkEq3YpZpVs8TEXRIeuYfG%2BJO%2BKeqngxwHAu2FKfXjRMY6m7g%3D%3D\"}]}\r\ncf-ray: a36da2de8f3adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57176,"size_decoded":57789,"mime_type":"image/png","magic":"PNG image data, 265 x 265, 8-bit/color RGBA, non-interlaced","md5":"c60f21f7e6771f33bb0c94091e4e5262","sha1":"037dbb3307770a4537069560ed13ff1356fc4770","sha256":"ef46199d77521c7264714889523ff327e2bed5fe8bfa30c6e46811e952c2ea06","sha512":"607912b5099c607078f5a0f69412519ef5b5718898bb8f2f0f66d4dab4c5ba22b5915b483fda736205af5d3c13f0f072f969a32a6466d0fe58e0ea3c8a1b1c99","ssdeep":"1536:Kq316OQyQE/3904ag//8tfMxZNa21t/T5OUR:KK16ev9Naa/8toZNa21t9R","tlshash":"8c43028dd98af3b9042a4ebf64400ef5dfd0f845fd0936028e10eefb541ea6d4564766","first_seen":"2025-12-16T07:13:07.48822Z","last_seen":"2026-09-06T13:02:48.93152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1293,"receive":797,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/37e799c5720f97578fd568fb5c33f2a9.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.245Z","timestamp":1788699412245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/37e799c5720f97578fd568fb5c33f2a9.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-215b9\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTe4fEU%2F%2F5qoucPuWL4LrwrXE23LM24kyP%2Fn0Yf%2F%2FEosC8zTqoeBM08Jewq4A89goVVdF6XbCBxPx9TviYsTcvZ1NhKvxRlUlLkY%2B1ntW347laG7wfn88IB8H9XUb4b%2FxSQTBA%3D%3D\"}]}\r\ncf-ray: a36da2de8f3ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136633,"size_decoded":133567,"mime_type":"image/jpeg","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"37e799c5720f97578fd568fb5c33f2a9","sha1":"5d7f05df9a3cd67bb85c48361fbbd081eacaafd0","sha256":"faa499208595b434142e6363bf6bf6af0903a008e94890a93e617f30f11ee1ae","sha512":"b104dd0ca82d7543e083f36b79ef013ace5b013de28f78e102a6c7e4e4b060cccc2f3752d9a8832c237fbcc7f0563ae0dc71900ea969e66e487b68504bb8bf78","ssdeep":"3072:q4cbOnMlzD/6hUAIgyfL+F/Jd52M3s7LTx2b8t:Ui6yzyi/Jd52IYx2bS","tlshash":"3ed312e498a9b931f24c8ffd1d4a1e522e3a57ce475ced8a54fc01bc90d8e858e49988","first_seen":"2025-01-22T03:34:49.05909Z","last_seen":"2026-09-06T13:02:48.956498Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1294,"receive":1644,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/swiper/swiper-bundle.min.css","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.167Z","timestamp":1788699412167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/swiper/swiper-bundle.min.css HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0683-406d\"\r\nexpires: Mon, 07 Sep 2026 00:56:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXEPf8IG0Q5Y3kHjf3Y7w1LpBraC5KL7Ip4HXq1hVqSJYpfknv3dgpMI%2FV4E30Sv3MExoSp%2FdconN60EmzGSTLJP8Luk7Ia%2Fyjw1qIdu%2F8LSn3L63he0x2ulqtOKh4355SbhUA%3D%3D\"}]}\r\ncf-ray: a36da2de0f00dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16493,"size_decoded":5410,"mime_type":"text/css","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-09-06T19:21:57.023764Z","times_seen":13038,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/js/vendor/jquery-3.6.0.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.209Z","timestamp":1788699412209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /template/default/js/vendor/jquery-3.6.0.min.js HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-15d9d\"\r\nexpires: Sun, 06 Sep 2026 22:47:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPjZn5nyZG%2FeVsksCSEcH%2Fwc0oO2cejAMPNNxZGalzmRl%2B6LuNXIHOL%2BWRWQPc5Z0fKCUexTRlTyPngtbG7TB4Onv3VSTTKkIBwiof3Em1m%2FEAhY74x8BmG2MlEsZkipa9Oj%2Fg%3D%3D\"}]}\r\ncf-ray: a36da2de5f13dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":31948,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-09-06T19:44:53.052072Z","times_seen":11270,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260129/5477a68f9c6c1e5193ee64f92b0a499f.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.228Z","timestamp":1788699412228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260129/5477a68f9c6c1e5193ee64f92b0a499f.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Jan 2026 15:14:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b793c-116fc\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dK0cu0qSF22vdafLN4bSweMIFeWcOygVLOJkEdLaYDl%2F735I5QA6M7ZHR%2FP5NwKj5hriJM4ayMS7sWeDqGePlaC8iDcm5W7QKHhXasDyj6%2BRvTZ13m4HTJ1DQatFtdXMXP33yw%3D%3D\"}]}\r\ncf-ray: a36da2de6f26dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71420,"size_decoded":70442,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1179x1179, components 3","md5":"5477a68f9c6c1e5193ee64f92b0a499f","sha1":"5ced4f6530f066bba5ce40cb976467c1c4d8091b","sha256":"a82f16fed86a30867d97be15aacf2f648aa2d50ff63f9e5a44d67f778ae08ae7","sha512":"a227211128765c8c9a5e21ffa64e5e9a908e7cb8bea44c7ae750a5daa3e8b3c9a2edb4983d1f6016303eaaa66b831e08f745804b39b3259dc1fa35f3087daea1","ssdeep":"1536:bDs8ne3ZinVmVger9GDIDZgnvXHiKu+n97b6yMXhuaUT3X+7cbl/k9mH:bDs8ng6xY9GKgnfHiAnJ6purTe72lkwH","tlshash":"686302c2e7981503c75598f052ee076fe92522d9faba1d9249a079e20cd05253cefdec","first_seen":"2026-09-06T12:51:55.650667Z","last_seen":"2026-09-06T13:02:48.970507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1327,"receive":1011,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250423/cf625d24e6080aef1a3e8a44dcf34640.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.236Z","timestamp":1788699412236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250423/cf625d24e6080aef1a3e8a44dcf34640.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Apr 2025 09:46:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6808b705-22d36\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCb2OOtz3%2BBTQTUwXXUv4uk6SKRzcTjDiGBQRjV0q1A3AUWTabeEsjWp7dYWALegJhzf7Kf70QW4pduOlHu9Ge%2BZ4AmwnvYL6QWCP5x0UjGRPIo34pVUeojZQxy%2FaMrlw9iolQ%3D%3D\"}]}\r\ncf-ray: a36da2de7f31dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142646,"size_decoded":143496,"mime_type":"image/png","magic":"PNG image data, 362 x 315, 8-bit/color RGBA, non-interlaced","md5":"cf625d24e6080aef1a3e8a44dcf34640","sha1":"891669d057c426f6efaf8ceb6f6e724719d81f63","sha256":"10e155c4c6bf47f97e8b15a7d84db00637d99fc4a181712619d2b5ea9f8869eb","sha512":"1917295caed49f3ee3580b3a58e08cf90a4179f94bfbf91b3d2ac43af2f0b70854a2642cb5c7a4be6d5ebc079148756e22180c4c60045f9d3cb18bc141344728","ssdeep":"3072:gg32NQ+h4ONWCviqoKH+xqtVHYsfWJZWycYhd0sNOxhySIn8CTv:9MQ+qONuqoKHXV4UIck0sNaJvG","tlshash":"9ed312131793c0e9f342aa61a1452e27d8d29e22f034e76f19b7632bb31776c37546ca","first_seen":"2026-09-06T12:51:55.719685Z","last_seen":"2026-09-06T13:02:48.963691Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1988,"receive":1524,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250407/9505f4caddacc77b8353707b55879e5f.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.242Z","timestamp":1788699412242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250407/9505f4caddacc77b8353707b55879e5f.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-42439\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPhtV64HxWSnZkCR2TwJoVqZtXn%2BmyJjhdeMrClu0PUIpy7bPIKCDLAbGdk8ozqcIrhvfdldMvy%2FmKz%2FdaRN%2FCeeZadi1He%2FF2q%2FViQiDsI2GKTWoxFZ844Nz7M53KZbROLd%2BA%3D%3D\"}]}\r\ncf-ray: a36da2de8f39dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271417,"size_decoded":272315,"mime_type":"image/png","magic":"PNG image data, 682 x 449, 8-bit/color RGBA, non-interlaced","md5":"9505f4caddacc77b8353707b55879e5f","sha1":"4f9bb871115a487c023bcde4398aa77b3d7564e6","sha256":"eb621a446b03a61bd95c01240a8c9daf8b5d5959837f488d19584339cc3b876a","sha512":"c9e46b972d6d7df5d4c5f344075d987d5525ad26785219c451ac5dc64e78d36a0b835f5e0feb8a3095ab05b05b16d114d195ac49e8250b93114682c5651dbe2a","ssdeep":"6144:0OJb0zksQ4jDF25TvWpZWfvs73mvQX+Gn4APb4Nt6IpVyz:U3F2TepIVU4AzCt6Pz","tlshash":"2e4423b30eccf69128d454ae15ead7d456d42adbdb0b03330f11c363a84d1856eafab9","first_seen":"2026-09-06T12:51:55.728394Z","last_seen":"2026-09-06T13:02:48.947014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1372,"receive":2582,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/b120a2aaac99ac792dbe77a82e063278.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.255Z","timestamp":1788699412255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/b120a2aaac99ac792dbe77a82e063278.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-8639\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OaF7vadaLWpMbs%2FygKteE3F%2BzFyg77gaGKbrsMeb4kHgzsU6ZOV4xx2kp84CAVKfC68rK0hsAIVhWXkwd45wqih1rsBiZl9%2Bkn1Jhou6ofEsq%2BOvIfg1mTOX%2BsTsxPZEoSxiUA%3D%3D\"}]}\r\ncf-ray: a36da2de9f49dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34361,"size_decoded":34809,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 303x357, components 3","md5":"b120a2aaac99ac792dbe77a82e063278","sha1":"ebc53afcbc0c952f1508011f13c21e5c01ffe9b8","sha256":"c6ca9e4bee12a9d4837d973880944a64839eb33705ba323e7e539d06eca767d5","sha512":"181cfbc1b18d9cc62d62931f5f739d6f4cb8a2cb033b5bd06740ae42ee3fbddcff17987e0ffd6c915b513d851e7a5c8a2d9e0997a1963662a9fde5b7e77d62a9","ssdeep":"768:GE0IGxCrqcMrsvL6XI4PyhXoEJIauyCpgDoxGwkuLSC:GE/OCrq/rvPyhXoEJ/uyPDoxkur","tlshash":"28f2f1f68ebb2943ea654577f1ac3b436954cbe61b02f4bde0e608511978ed2d870423","first_seen":"2026-09-06T12:51:55.747739Z","last_seen":"2026-09-06T13:02:48.942185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1331,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/502fd0d98ecf4e98b02c9b9a2417d337.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.257Z","timestamp":1788699412257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/502fd0d98ecf4e98b02c9b9a2417d337.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-2b87\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zs4Dl9v6yzPqA%2FYlsvM2MuoU%2B7YDrWpl7yaAObmZ%2BxhlaQBvPvcTRws9futoMzsjV8bY%2B0Fsiq279dQ9ZCXAKJ5KkOOb2S9A%2BSdq0URvCnxM6hIJcrMlv%2ByovskPTT%2BKgXA9Zg%3D%3D\"}]}\r\ncf-ray: a36da2de9f4bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11143,"size_decoded":11785,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x168, components 3","md5":"502fd0d98ecf4e98b02c9b9a2417d337","sha1":"ce977584e0da3940f61d43bb7801be078183309d","sha256":"7a241bbda209b5039d8f6625bc3e2fc66374e8cb9a8fc4dcef5b38c9c407c3a5","sha512":"73fb8ba288fcbc21480400cf3d10fb87f1095e1a9bc8cb8a7881108cd974807da1c5031bc16b21672f457935b3904683f2c847a2f7bcabdefec63b78d86a73cc","ssdeep":"192:xIXvzeMYLeqAZ6Ka+f4svndaewQpriMJdNb8qt6BgJP4rdILYgrAesaNFUJKrC1G:GeMV1Ra+f4sHriUnss8sAesaNFUYrCJS","tlshash":"2832b010ff1054c37cf2fd7296519a76e2e0e24c4529905af419797b26b01738e8cbd9","first_seen":"2026-09-06T12:51:55.686753Z","last_seen":"2026-09-06T13:02:48.943264Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/ffc08e3f34c300989dc24a166abe87e3.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.261Z","timestamp":1788699412261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/ffc08e3f34c300989dc24a166abe87e3.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-677b\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhaWBC%2FeTP9MKILSpT6SCf8n2U1Bdmqt88pN94RfHEZJd50kPsAmQtrIkMd%2BLyB5cc3ae6rYXptW9ITvq%2FzOxa43xtPsw2wzV8gxjiLGDb2IjN9uv9f5k1FXT%2BpUgI7x2KzdCg%3D%3D\"}]}\r\ncf-ray: a36da2deaf53dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26491,"size_decoded":25083,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"ffc08e3f34c300989dc24a166abe87e3","sha1":"70b0c1ba6259cc13efac872bc9503fa805b767a3","sha256":"e1cb83a658366fbd3f848f1393c431a8b17b6c301d734ddd1abb842497f6e132","sha512":"cf87543ec587290500565739921ec454a43e6718d3a4ee87a61581104ca64cc04d8404b829c67080dd140317234b4393934c57f6c76968e186a0d172cee9a9a6","ssdeep":"768:WyEutjVCf3ZGgKY5ds06uoTjWAYAFKEWT:lB3Cf3kPYf6GAF9WT","tlshash":"ffc2e080ef95ff0df904c270fa8b3454bf7490b5d6b334b63e4ba60f4164b15292489a","first_seen":"2026-09-06T12:51:55.675736Z","last_seen":"2026-09-06T13:02:48.974627Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1403,"receive":1144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/swiper/swiper-bundle.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.216Z","timestamp":1788699412216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/swiper/swiper-bundle.min.js HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0683-2315a\"\r\nexpires: Sun, 06 Sep 2026 22:47:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvLMSOf8qVFaH8ZlcQ%2FCYISzZ4%2B44ImL70DEex83PdHMgs3chL1OXj%2FP106dWIbvhg6pt0YVgflXOq%2F%2FXPZORhE%2FUby58G8%2BOCr7ZQ927Xn0Njy%2FxlninwzKhPHj0Q8KObV%2Bvw%3D%3D\"}]}\r\ncf-ray: a36da2de5f19dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143706,"size_decoded":40920,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-06T19:21:56.978969Z","times_seen":15382,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260605/3f8884e268658e1656bf992cce11b994.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.225Z","timestamp":1788699412225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260605/3f8884e268658e1656bf992cce11b994.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Jun 2026 11:52:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a22b88a-1318a\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tN2tn5sLmp775oBYuQMbciE%2BctgjhuKZ3NXyFj9D%2F1pdwi97GWNLX1vsLD2qZK4B3lPYWsjZ8eiiZNAYVtNIPTutSRExS2WsLUW8FwcWvN5DrNDhwpv99s0xLTbOGxaMUzfTmA%3D%3D\"}]}\r\ncf-ray: a36da2de6f22dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78218,"size_decoded":76196,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced","md5":"3f8884e268658e1656bf992cce11b994","sha1":"2b3b60278e4468a2284b1a57d2286b5d174bbf46","sha256":"c2ad6e452609e335493928d4c2d980ecf39545463cee477c3f41743224c72554","sha512":"c57457deb66003adc9940a320ffc16a0224497ad8b4e0ede21b4aab3fc10a362af9952d37f194c9884d17e77f135ff1346e457c343c76ebd657a5272e714a566","ssdeep":"1536:MOAg1457MnVai+xFHRnq4bs0PwYDi00e+0uNlf4mT9mbONj4+xv9MSIOhUR:L14RMnVaiOqAsYDipvHbwmcbONhv8R","tlshash":"ce7312022894aa94ea175810fbf3c1d50f5a61d0d8eabee46d6255601f8ff8cfbe71c4","first_seen":"2026-09-06T12:51:55.689855Z","last_seen":"2026-09-06T13:02:48.968452Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1406,"receive":1044,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250727/0faa5377ee7c675515f1da461260deab.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.232Z","timestamp":1788699412232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250727/0faa5377ee7c675515f1da461260deab.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 26 Jul 2025 18:50:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6885235f-45e2\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMhgABAzNIDN03DmCSK4cLkCH9JLINrr790ZlbN%2FIsmZIOi6o1y0m2Jvgna72d0LAsIlcp30%2FSZOX0%2F86CfdZju6DG8YQmR0qNX9YkdU4bxK15SoFnE4WE0rAZUyWwGp%2FGKfKQ%3D%3D\"}]}\r\ncf-ray: a36da2de7f2bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17890,"size_decoded":18706,"mime_type":"image/png","magic":"PNG image data, 113 x 119, 8-bit/color RGBA, non-interlaced","md5":"0faa5377ee7c675515f1da461260deab","sha1":"f870c12e3b1ae604145d74c9154c53efa8946109","sha256":"007dd477fcd7dac88511e970eaeb1ff1b968546c4b53ca66d0afbf10cf8438ce","sha512":"a5b1b9327146673b5e23ea8553401954f6949a0ca7093969fcf81dd64eb59ec57d3616dd56bb706820800cdbc2e0062a947a3836bd0e99f2aa00bf1915ed8593","ssdeep":"384:sqewyzClaxqq//qQ0ZmUHBtbnNS1QBeoUGOTGRA7pP+86AL8QEH:ALbiQ0rHPnHBenGOiA7x+86RQa","tlshash":"e982d0f622b042c343558da2021a77fe54bd57fa61c4fe9909311275cf0ce7a9770aa9","first_seen":"2026-09-06T12:51:55.715999Z","last_seen":"2026-09-06T13:02:48.95333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/6b433f541e3d0da03b11a40ecbf60b28.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.244Z","timestamp":1788699412244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/6b433f541e3d0da03b11a40ecbf60b28.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-4650f\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WagbJiXQaBqS6UY323Q4ZFbU0kNAhF2G9%2FkTmqProPi1cVznSo%2Fu7Ptpm%2FF1f1cbxcWreALTvhTb75Ahu0VtO5X%2Bsk0bYPQsENZfPjp8EmvBCctU5vBl428iebfwQlIXMWHkrg%3D%3D\"}]}\r\ncf-ray: a36da2de8f3cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288015,"size_decoded":284735,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"6b433f541e3d0da03b11a40ecbf60b28","sha1":"0c7077daeb9e24aced1dd0ebcbc12d5591ef19ea","sha256":"8bf6edca3633c2db8a775216bd6b7939faa2893cc50961eccb2dfc3ad3d4d214","sha512":"1c3da2b3d3ce70b4ba92360dda81fd3cb3b0538d4189e1db8093e1badedf298d11424a0f1c941731ee3810ed5b7c96641a5b573095fb1e89923d150c10f19d5b","ssdeep":"6144:aLgE2GCMAp7bpz2JGGQ8bav6Ie+4/kZB8Y2ftPKkAmFn17:aKGCN1lH8b1YRBL2lPKSZ17","tlshash":"5a54231b540d1c1396bd13a6f1c7d1b0a8664061bdf3e876ab832ee4a4edd3235b83d6","first_seen":"2026-09-06T12:51:55.656668Z","last_seen":"2026-09-06T13:02:48.980491Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1337,"receive":2664,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/e67bf271036c4235457073c46f258b5b.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.246Z","timestamp":1788699412246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/e67bf271036c4235457073c46f258b5b.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-2bd2\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqV6huZxOZmczYJijW8fhCstkVIEt0XF%2BIiJ%2BQnzDF8qfiGcPNZjNEi6%2FKmV7ViI4pEnFATQvwWdGoD5KPaCgzQPe39WvkGeHhdcRM0JZrql1aSBy4eAjI7FprP7TzOIepCiIQ%3D%3D\"}]}\r\ncf-ray: a36da2de8f3edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11218,"size_decoded":11131,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 376x377, components 3","md5":"e67bf271036c4235457073c46f258b5b","sha1":"29e6e3f5750f9156fa1fb3a14c4bd65ad0dd5d59","sha256":"3c541c7a3fc5258173ac92a4eb6bf024b233609f0ac3c272cb7921444dcf3156","sha512":"dfc38bd7705800063458270707b2f1a5e72232cae870b6ae837ec5aeac45787cb1fa04ff72bc448fa9cc6552c8f9f696c4b07a84b65ac535c4efd2f6557a055b","ssdeep":"192:A8B8jl1J2YVv33qGCT9BsIjPbWzIRRzTsYmRq2MblT4zNuxhP+b8R1:Avp2eaGu9nbPRFgYgmWNuxk83","tlshash":"7932b0b597e77398f458737a2720064e99c9bc20d2dba7e983c27d029d7de12de0710a","first_seen":"2025-01-22T03:34:49.048655Z","last_seen":"2026-09-06T13:02:48.957656Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/370be3b519c8006b97e1bb444610b1d6.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.250Z","timestamp":1788699412250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/370be3b519c8006b97e1bb444610b1d6.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-373e\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KoK6liLlmYqy9i5gnBru4RViyu8er6GOaq5iCpikMuGwy75yT94UfU1xmEskdjpKLVP7ktGYYMWxXVrxModfuwCRQgq%2F6%2Bb5sEYVOD6BfE%2B2Xy%2BxyUIK6DyER7d9kWnVj4e7mw%3D%3D\"}]}\r\ncf-ray: a36da2de9f42dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14142,"size_decoded":14716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"370be3b519c8006b97e1bb444610b1d6","sha1":"254bb223e75c9b8601fdac5413e2fc61ebc62343","sha256":"466e92fb2e4d7a6011e94b1d087c9b492330b90ef9469f06b624b8b057006dd9","sha512":"1ca90a720ec2469e51c57478bdafb4f6a934071f556156a804976c10df5b7da12ed7103e1628044dbe5d2d99004760a0b50aa12a3df7624e3734cf4dff9d1c6b","ssdeep":"384:3FXtkCogD5NEmuzhZ7FRJprFmJvW/c6yJg:VdkCoQChZLrMU/c6L","tlshash":"2552cfe88865462cff24d7339889a021ee6d1c6c6e6cc04ef6f42ac69f0f819980d179","first_seen":"2026-09-06T12:51:55.734228Z","last_seen":"2026-09-06T13:02:48.941031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/b6c2651b52b21f79d7fa91a28e9c0412.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.251Z","timestamp":1788699412251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/b6c2651b52b21f79d7fa91a28e9c0412.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-2fa7c\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKLOdIFBTmWwlrBltUQJQOIn1VrNzEXxmfAMSO9FrX79E7zvbzH%2FdLPgg%2BoUULl2b6gjD5GAjh%2Fu5irgVkJ9MAk9%2FwvnnlXhQBQTkTmHqJV6FPUiMyEk5w8q2H3fNhcY3%2Bg4Bg%3D%3D\"}]}\r\ncf-ray: a36da2de9f44dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195196,"size_decoded":196065,"mime_type":"image/png","magic":"PNG image data, 270 x 377, 8-bit/color RGB, non-interlaced","md5":"b6c2651b52b21f79d7fa91a28e9c0412","sha1":"dd2cb537eb83693e2d4e90f96dc8794a12aef531","sha256":"c7b1414ba7ba5918c868bbcff357afed31dc20f2ad2977d179b344db87c603d2","sha512":"0a53df336346992623b6d383e0e21d71e62f0aed1a3c1d8c4dd130c6dd19af554b139b43ecc92f44cf7755e9af93c06fae20f9c9ff6e3e477faacf71182e9ddb","ssdeep":"3072:NgmQgQJjazvq9R7jS76pJ1bPHttXVWJudK5d0+jcSDO0OQqBaiqyDgwVTWW3G95A:NFfQ99RXJ1bPHtVVWMgdrBDehaiqigw9","tlshash":"f814230dbe6e9f22e427045507190fb7323161b243560b0445c8edabe6eb37639d7b6e","first_seen":"2026-09-06T12:51:55.736695Z","last_seen":"2026-09-06T13:02:48.972567Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1404,"receive":2082,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/282b56ec1a9f27d1db1ed349971f7037.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.256Z","timestamp":1788699412256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/282b56ec1a9f27d1db1ed349971f7037.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-99e\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0SI6trMTQ23tL8jp2dUM%2BfmwAFD%2Fg5ehu3n%2BegQdiBcaa9xcot%2FAWz8VJ9Q3Z02Da6SW%2Fu7lkyiQQVtlP0RS7Xf9LQ6eLl65g2hmo%2B%2BXLpaY5Q04bsVQe6aLkipK1FN3OkIeQ%3D%3D\"}]}\r\ncf-ray: a36da2de9f4adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2462,"size_decoded":3262,"mime_type":"image/png","magic":"PNG image data, 204 x 192, 8-bit colormap, non-interlaced","md5":"282b56ec1a9f27d1db1ed349971f7037","sha1":"01bff4cd0ee02e5d711ef7c6fa93efbd005dc98a","sha256":"f46d09257d25a8caf7775c8c67ad2da25291943d4a641e5f6cf6b86d51438065","sha512":"60db47e890e5a479f65fb83d8e4ed185838681f74751d5d4a8a7baa7a19faeed2f0d9b4c7695466d81472b432cc995036ea402beb67af9ee3d3cdb2a287cb8cb","ssdeep":"","tlshash":"b1515d5cba208402cc8c68ff6b574691d3ba7220cef335d52bed92121de110587773b2","first_seen":"2026-09-06T12:51:55.673881Z","last_seen":"2026-09-06T13:02:48.934156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250419/c6584910e4275dcbb091dd29d1ae3cd8.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.239Z","timestamp":1788699412239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250419/c6584910e4275dcbb091dd29d1ae3cd8.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 19 Apr 2025 04:51:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68032be5-110b4\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxL9hY6Z%2Fp6ujIK7SniComyBaTSnyXOB1SHdzdrT2JqBLw%2BFOxwPzSsw%2FUPZUvm0NwaD1coahQj0P5dmoAS4zljC86POL6mQ0079prp3T4YZvPITsFDiruKnbdebYueIpwh57A%3D%3D\"}]}\r\ncf-ray: a36da2de8f35dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69812,"size_decoded":70488,"mime_type":"image/png","magic":"PNG image data, 280 x 272, 8-bit/color RGBA, non-interlaced","md5":"c6584910e4275dcbb091dd29d1ae3cd8","sha1":"81848af3b8abdf1bc3e65a213514a658eb05d20c","sha256":"3a193d516cc4d1a7f0cda0b13387c0b4b45c39c725d27fab4aba487fe5b34801","sha512":"9059b7b280d6be26c5f715efac4b9b38e945be896c38d3fe27442b84798f4208fa949c119cfef66088a5ecae657ce4622c0ece8ed87ff0919a32e0cb0d06a9ac","ssdeep":"1536:VDlvwE/icuEm9cKiU2IaVcPKxzcxz/SNHstbhkU7ZgL85Ayj:llvwE/ictlKuIcRRGzN6cnj","tlshash":"17630238b5095c36dca626abfcdcb8703697501618c78e9fc840f6ba61ca575ab0ddc3","first_seen":"2026-09-06T12:51:55.670768Z","last_seen":"2026-09-06T13:02:48.978622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1443,"receive":955,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/f883a7f73dc49b34161e30d8050674f8.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.248Z","timestamp":1788699412248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/f883a7f73dc49b34161e30d8050674f8.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-1531\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVB9oIFDB0yeK6Zi8JwT3A5VFjscifMMpyRLrxh%2Bmr%2BrYoVV0Vwu8zFt8%2BDEu6tzjbn4SfnErWxSwIT5UXi2eABuUhq8m%2FEV9uIwl3iLF08IwNNP6%2BBdwZa6GwuE99HdB5opEA%3D%3D\"}]}\r\ncf-ray: a36da2de9f40dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5425,"size_decoded":5985,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 252x200, components 3","md5":"f883a7f73dc49b34161e30d8050674f8","sha1":"c7bd31d6efeb342fa26437f4f7c1d47988bdc7f4","sha256":"f4dfd5cb8aa3b4d1898b542e404e726408f2f3218b6e14c54450ace699248821","sha512":"3441ddcce89430b195d7bb57f1ff63abe1b0eac1bd58b25b44bb0d52bdf6c90352a1a76f2d9147d7eb89dc8b81c321f6f2dfa380fa86e35034528c0c400beac8","ssdeep":"96:m0tizkxn69yJFgGfNBbiF0vDHXYmVPPBt3+j6s/k1d7XcJ6775M:mrx9sEoXYmJTs/adr/tM","tlshash":"ccb14d27d7e6830ae51ad778b05d5800e677c8526af44363bca8f222653fa56cd0fd05","first_seen":"2026-09-06T12:51:55.672367Z","last_seen":"2026-09-06T13:02:48.947751Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/324a73218cd2804a5f4c5a54c134a0f0.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.254Z","timestamp":1788699412254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/324a73218cd2804a5f4c5a54c134a0f0.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-1936\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8p3cHN267RrWZ27BhSkn%2Blsof%2B7b8KdpbhppXh65ZfMKTx0Bh0tOTd9TiyeqrWUBRlm6gV6Mp7DJc6MEZ3B90y7Pk5iidr0YA4QFxSo1K7tStoQdBAwwPFTRTCKg7qym5RQDeQ%3D%3D\"}]}\r\ncf-ray: a36da2de9f48dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6454,"size_decoded":7089,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"324a73218cd2804a5f4c5a54c134a0f0","sha1":"11321f25de3d83ce1ba4d1fdcd5d12fd59b13e20","sha256":"358df4577236379c8b75ced5483b4fa42ca4fe15b5aa635824f3050279fc0110","sha512":"97c988e9b27b1f42191b5e3a8f936393cf28bc90da07dfa11b60ce3332bc088c73e0455dc66876a3eebbd743195910580f266c6369225bbffc27b0a0b47625e9","ssdeep":"192:kWG/Lek1U3zf/qHFpTzzL7TqXiJOL/LZl:yyk1UDfiLT/YT79l","tlshash":"9cd1affc21ed36f7cddec77193f48a1a89ea45b4f7de8b131345615302a56a2d91e001","first_seen":"2026-09-06T12:51:55.706339Z","last_seen":"2026-09-06T13:02:48.98269Z","times_seen":3,"resource_available":false,"data":null}},"time_used":952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":952,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/fonts/Inter/Inter-Medium.woff","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:55.482Z","timestamp":1788699415482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /template/default/fonts/Inter/Inter-Medium.woff HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/template/default/fonts/Inter/inter-fontfaces.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:56 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\netag: \"67fa0683-11278\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yrknOVhVSXFPqmMdZKugdOySRZWDCGsWucny8jT%2FXug2mIC05IouwDmWfWN6REPay879NiHYZRoiP%2BDl3pIrbVfy2%2Flr8fae0iNwY2jZb6%2F0eO5HYWRmr9692OcjhS08j%2FwBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36da2f2cb39dfec-OSL\r\ncontent-length: 70264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70264,"size_decoded":71012,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 70264, version 0.0","md5":"0d776a835fb10e6a6ce46f4ac1a0f6a4","sha1":"eeabdc62db721a721cfd73baf33bd751e6a0c4c3","sha256":"0a7beabfcc96e52f26a05c225823b41859a81cdfb3e7d8c6eb08df3b6c8c1c5c","sha512":"14ee9bfe3d30462d98b8a146a0b73ea899441fc3b236035e5efffad22c508183ab9a7e5e6e11a1e914d8b14a38f02b488812d81a88b76ca4f1bcfc9c5be20033","ssdeep":"1536:myMTd6KpHsUwl2kMl/Jf6HtomsZ7hDAiqrAj6TrbgzZ4ynG1bN:AR6KpMdl2l1N6gPDQ+6TrUqPB","tlshash":"626302d7292a949ba3389e00676826630779f01ddfe0dc3b9535e0ad78975fce6810dc","first_seen":"2024-08-19T15:03:15.163704Z","last_seen":"2026-09-06T13:02:48.93644Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250526/9ee9342eb6d15b204f226b48ce722912.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:57.080Z","timestamp":1788699417080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250526/9ee9342eb6d15b204f226b48ce722912.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 25 May 2025 21:06:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68338650-12a3\"\r\nexpires: Tue, 06 Oct 2026 12:56:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVEv856woqMRQ0HaVC3CiL8j%2FbdaiVMCqV8WoAM3faboPVj93kCZbaHgXV9XAVt25M%2F%2BuNNOkhB17fRKOEHrJaduMGG1AJU1Qh31Q%2FX3bxKjZeEe0flswVITZeWZHF8cbdVGIQ%3D%3D\"}]}\r\ncf-ray: a36da2fccd2cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4771,"size_decoded":5592,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"9ee9342eb6d15b204f226b48ce722912","sha1":"f76cd650006e1e5b29a8fc7a8036f35e831031b6","sha256":"1a69e253fdc76fb4254f2fc0ed19e17da54284de64e230efd71afe290bd8f704","sha512":"df434e6957b293f13efc68fd85d997fd2200716520cd69514b3057d2e58458073930a1f2531157ead0f6e0451597ab1814eedfea8a4fe4fb38f2699bbabbbbf1","ssdeep":"96:lxRqTY11UUqWllmkqnANSlhqJQRVUI386BcHMCsGqKDMolcoc8Ac:8FWfdqA4hqJQnUIspMCsxKDblFc8D","tlshash":"c8a15b7d5af2837e21991f395cc58035e70718faab42b0da2689393b3942517bf5c887","first_seen":"2026-09-06T12:51:55.667524Z","last_seen":"2026-09-06T13:02:48.950189Z","times_seen":3,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260605/e9a24c194a072657b394166840498f1d.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.224Z","timestamp":1788699412224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260605/e9a24c194a072657b394166840498f1d.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Jun 2026 12:06:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a22bbc9-5a0cb\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3hIW7r%2FlBg82s9gB4DwrYi6tMHqzlkDqhbiCCL6s8h9kHyuofr7NNpGeuiNiZypIr8yMezsIb5T%2FYw2McyBRABDHARxAYHFa1sf%2F1P4HqrdFqKQ0l3veqr2W1L0pnEp%2BIBDTg%3D%3D\"}]}\r\ncf-ray: a36da2de6f1fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368843,"size_decoded":366749,"mime_type":"image/png","magic":"PNG image data, 707 x 615, 8-bit/color RGBA, non-interlaced","md5":"e9a24c194a072657b394166840498f1d","sha1":"ff1ff82154f19bbb838bc613256f7dc30aa7d89d","sha256":"e088bd98a22993a715b74414b4fe00fe12c7dcebd09c87e16401fb1744890531","sha512":"cb4bbc9b1d9614303b963de43c4dd04cdb87bb993fc2a70b16dc53ddcd8b780096e01022c8a0bb82ab0a112edd52a93d1524fdcfb8fecd0840df9cb46e78939b","ssdeep":"6144:DAisuqDYKzbcNO9TxW+Ib9UpuekoDGExfY8PIIbxSbQJKFPQP5sZuysLT6e29Su1:MhlDnkOjW+wyTDjJY8zb2QJfP8uyk2eS","tlshash":"627423a3171877035ca96abd6752f73891803e0fa00f3538bbde54d6eaf7c592190ad2","first_seen":"2026-09-06T12:51:55.724827Z","last_seen":"2026-09-06T13:02:48.977504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1268,"receive":3101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250818/33a0fc8e7517de059e1d81b7039e7e25.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.230Z","timestamp":1788699412230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250818/33a0fc8e7517de059e1d81b7039e7e25.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 18 Aug 2025 08:40:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2e6f8-23be\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHMbql3Miut9PWKE4Skas4GRi7Z5CDhzlGlUAdZn2vbCZ5Ig%2BHIYSE9k3EOs3sQXR01ti7WSYeABp%2FVBJJJjyPDGAZt11dCWg2qCEQe07Qal2mhFX9BqUnATIMqelT3Rwiajag%3D%3D\"}]}\r\ncf-ray: a36da2de7f28dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9150,"size_decoded":9962,"mime_type":"image/png","magic":"PNG image data, 167 x 143, 8-bit/color RGBA, non-interlaced","md5":"33a0fc8e7517de059e1d81b7039e7e25","sha1":"e638eaefc99bee672ae37e2998f870e4b9b27947","sha256":"ab317cb2dd0658f12bcceccc2ea45ac0cfce0d177bf604918a3f153ac07af18d","sha512":"23e2ac6e193e1d33d925f0b90725c5898cbf3c91ad75f100340df0afebb08f4dd258768069b5b9ea54831a527b901252d9a09ed1901373261b2353b47b8d2e54","ssdeep":"192:RVv5Cc814omVQ1M0aOcrtvRQJCnyJLw5Hd2f7KcwJDLyCY7B6hx:nv5XDomEZaOatvRQJ6A8Pa+DJD6oD","tlshash":"0012bfeb98b2864e8e5861d24d00b540d8c51d1777e7b0bff6d34bb2c5d71c2a48a985","first_seen":"2026-09-06T12:51:55.691829Z","last_seen":"2026-09-06T13:02:48.937536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250606/a5cfeee60657b67bd6de133972335a21.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.233Z","timestamp":1788699412233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250606/a5cfeee60657b67bd6de133972335a21.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 06 Jun 2025 03:42:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684263c1-dc3e\"\r\nexpires: Tue, 06 Oct 2026 12:56:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ii72qxE6laPuTMACzNBaY8SiwqTCdbcp8QQ8oAAGj7cOh%2FxUzW6CBcGxV5JF%2BuoVGTttkkJ63bV2Q5x3kKCm2TjMoHwNTIqqfPUSLti1gCk12kTAUDyFgseadNYls26jm62u%2FA%3D%3D\"}]}\r\ncf-ray: a36da2de7f2cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56382,"size_decoded":56012,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 996x597, components 3","md5":"a5cfeee60657b67bd6de133972335a21","sha1":"8c53a3f0423ff5ce8c486d0e4a2157c9cef5301c","sha256":"e0540a6327aa0ccabb8dbd01f6434d81337e46ea3ece372cbfbed4a8c07bbd2c","sha512":"e8302b7764929cd10a7a742bbb4f7463f0d0802b8dba352815ca94f0804255dd38877b8269cb1855f6a22dca57053a4fa9edf637b1da628033a52d6df4e07c69","ssdeep":"768:pQB6Ey/+Rqv6tBODBK/QoFVXumf1bM6ilnpLhIUTy/hOV5G98dV7YlVYUbnkm2RZ:eJy0qCGU/TemBM6kplrTt/Em7x38Ib","tlshash":"7d4302a527110aaad72701f890b186e1b636da17bd50cf0462e73bb74dd80e9dc763cb","first_seen":"2026-09-06T12:51:55.717923Z","last_seen":"2026-09-06T13:02:48.954521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1168,"receive":1180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250420/73c4ce1a32149230c9424919381de5a9.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.238Z","timestamp":1788699412238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250420/73c4ce1a32149230c9424919381de5a9.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Apr 2025 00:20:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68043ddb-1c397\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFxr08d42rZXgMQI261oLmZv9mNfgbxTYef9aA6ujh6OfiqqI9RAFiLPgXSCYDNAtzac%2FIKqO%2B5EWBXamHEipDuwWLwKUGdGxnwlNyltk1rEelKEQFm%2BPBlrZd2iGor5OkdGfg%3D%3D\"}]}\r\ncf-ray: a36da2de8f34dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115607,"size_decoded":116452,"mime_type":"image/png","magic":"PNG image data, 276 x 274, 8-bit/color RGBA, non-interlaced","md5":"73c4ce1a32149230c9424919381de5a9","sha1":"662ec209c7d712bf589a96c3cad724a69ed44ef3","sha256":"2e7f0f48b577a641ca338bfcf70336de22c51f38560967232ffd72a120928879","sha512":"ccc09ec77b28c4de74f6bc2369d646f6843ea411f8f17254789e96f95c15519e03b90f6199b8309d302d94d86d83b5393eed386620fadecdc1b241a7a6cc0219","ssdeep":"3072:VOAfG83VddAOfzP2oHVyj+F9z7Rsr4f8C+qX+pn+hnzJ:VONeLr2oHE+LfEqgnazJ","tlshash":"4eb3122c001f37eaaa537a47e9ba941528b52059d49910f2b1246887f9f7b3bf8187c7","first_seen":"2026-09-06T12:51:55.693228Z","last_seen":"2026-09-06T13:02:48.971504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1278,"receive":1527,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/7084c94bb58d4078f31a086b0f613d4e.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.253Z","timestamp":1788699412253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/7084c94bb58d4078f31a086b0f613d4e.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-9e9d\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRqw%2FvZ38gT3S8ipEjR13Hpf6XY0qsUlECEMC%2FZ2FdJC8z4hqReCdBplsTemA9qDwORheXs0uEtR72yemQy6k95X2ZEQGjmKN%2B68x8PJNEABhFnbAd2dPsRysIDXBkeC%2Bv65ZA%3D%3D\"}]}\r\ncf-ray: a36da2de9f47dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40605,"size_decoded":40654,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x640, components 3","md5":"7084c94bb58d4078f31a086b0f613d4e","sha1":"c69176ca38774cdbc056d329f83ea5f767c489a4","sha256":"2aaf34344fe8feaa75083c3aab0e9ad18139cd5e2a77fb922621cdbb21ddb44d","sha512":"fa93b018fe7c93644aaf88be83309930f919aac9170c4771eb3e7dffa91c69598029868d210caf39264350886bec34eac333dcf8c264c12f85bb126af56e3225","ssdeep":"768:mwFXBnYEt/xUQEpprK9VHV9ty7i+bv11jGrhM43y/JqhDwPQkgMB:/x1EKH1iG+8hMjJCwPQkb","tlshash":"cb03f1961396f948e3a7c638fd21d387d721bd2226b121e1ad15fac43408f3eba13247","first_seen":"2026-09-06T12:51:55.745784Z","last_seen":"2026-09-06T13:02:48.932706Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1407,"receive":602,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/fonts/Inter/Inter-Regular.woff","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:55.480Z","timestamp":1788699415480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /template/default/fonts/Inter/Inter-Regular.woff HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/template/default/fonts/Inter/inter-fontfaces.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:56 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\netag: \"67fa0683-106b8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9H9Woe0Wl0sSJPqfzmvwK9I3oaQOovtEYQqI66YSyuIYsLba0ix08%2FokAluKMDP4LIQElZaMZANEoIH2tUj%2BRgna4QHH6S8QEdo35cS7TOE6uQ9iyq5IEYVYOLpDUTjDuPJ%2BQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36da2f2cb38dfec-OSL\r\ncontent-length: 67256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67256,"size_decoded":68000,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67256, version 0.0","md5":"b1ae0f61d24fe8581622919a15d8939b","sha1":"41327cb52957731b60909b65066fbb814e9d660b","sha256":"6b7653a0eefe4fdfb7831335434fbbab64dbc31c85b94ba24a51b64cfa10d6d6","sha512":"b961d44c581b8d477f3cf2f131b2e07d658684eb2e9fad5358b1c471538d03bf14786b51b8dddfb14ed88d1eff3bf30a1c671b280b569bd9957d53bb948e2f9b","ssdeep":"1536:eDbNLrbXUpTFiGDSsl2zAbl34HoeGYdhKvW4ZI4pv+YBfsfuOLFL:aNLnkwGDSKIzLTKvjBbBUfH","tlshash":"2d63014bc8a141eaf45cc4060c301a696bda0b34f9b4b4849b92821e7f277532f90bfe","first_seen":"2023-12-06T17:45:52Z","last_seen":"2026-09-06T13:02:48.986375Z","times_seen":29,"resource_available":false,"data":null}},"time_used":1358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":480,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/fastadmin-layer/dist/theme/default/layer.css?v=3.5.2","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:55.506Z","timestamp":1788699415506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/fastadmin-layer/dist/theme/default/layer.css?v=3.5.2 HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 06:21:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0682-387b\"\r\nexpires: Mon, 07 Sep 2026 00:56:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7h%2BYMf%2BaURtXdkrkpHBIPB5bkYKNifytdPtSq0jgCgyHTuAbXxA2epMLcRff6gkx0BB%2F%2Bx3h%2BlSWB2xXQAUu8JssfkFf0rG8V0ho%2FDCBq%2FNHIdgVPKHTNladv%2B0o1Q%2FKiuye4w%3D%3D\"}]}\r\ncf-ray: a36da2f2eb41dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14459,"size_decoded":3645,"mime_type":"text/css","magic":"ASCII text, with very long lines (14459), with no line terminators","md5":"6439bdb10a0240cdc54c720fba6bdd5f","sha1":"0b4ff5787e23c6897af99043ee396152f5cdd35d","sha256":"606a5313da4acc5f88fd57310b1453e6741aa1bf002523b0d1692648c0121ec7","sha512":"7d19dce803da4e5a84e27dea3459ad15e23a4567425e84760d6c7f2793bd5ee44fb4f80b80916c2fd718d63adffa8d837e82cf1297e2852f038b545492aea8c0","ssdeep":"192:GY2ELr2Otzrzzt42OQ7KGxV7+WUi4S3IU:GSaOtLJACxVxLBIU","tlshash":"515253e144911289b027c721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-11-02T09:01:22Z","last_seen":"2026-09-06T13:02:48.948915Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/bootstrap/dist/js/bootstrap.min.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.211Z","timestamp":1788699412211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/bootstrap/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Apr 2025 06:21:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0681-9b05\"\r\nexpires: Sun, 06 Sep 2026 22:47:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXcp1mRvWBgbUeqC8rtiB7YO9GGvw%2FKZ51TeTU%2BZTTTTdG4fiTrdUeIvrDgJRWSCYBC4SkkaT7O4rZxi4PlcmbdxQ0SugYgaq6T5wob0uL%2FmNhJnSvMNqHoXhHIfcfB2NrGgMQ%3D%3D\"}]}\r\ncf-ray: a36da2de5f14dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39685,"size_decoded":11814,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-09-06T13:02:48.975607Z","times_seen":2459,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/fastadmin-layer/dist/layer.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.212Z","timestamp":1788699412212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/fastadmin-layer/dist/layer.js HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Apr 2025 06:21:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0682-5beb\"\r\nexpires: Sun, 06 Sep 2026 22:47:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iphJJ8o%2Bx5W4z9qiI6KuXXlV%2BDB0L%2FGy%2B%2BxJHSSdeo3T2NhadMbB7sWjK37mEnKk9WI3k0nY%2Bp%2FilNfmou6KCrGCJjCUibHWZQq7C4A%2FhDFcKOto7clZiUQc5dso7dXWdSrCow%3D%3D\"}]}\r\ncf-ray: a36da2de5f16dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23531,"size_decoded":9034,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23418), with CRLF line terminators","md5":"5f0a8e84a0bc3695657c749154c48384","sha1":"fd32b854b7dbdde010c22511eaf7b104a6626a59","sha256":"ce4a1d1ea39aa22ddfd8334f831a3a65aa343c5cad95e3b13cf839af8193f5a2","sha512":"c3fae5f51f05eab4668cfcba996366d1ff9ddf4b9810943f55e52fbb802bfc2e8a23d0a5d5bd49cc469b5fe9da264cea5077e69dd9f4438ef244294b23249517","ssdeep":"384:v1+9iss0R9YiKTtXSt/ildrGr4u46K+LxzCPTElH0j1VhpPtwo:v1gistYi0QtalA5KiFYb2o","tlshash":"5bb2d86a754034976323916ad10fba0b31b11d24d7078128f22bb4bd1dbcd99a2b7f5f","first_seen":"2023-11-26T05:15:16Z","last_seen":"2026-09-06T13:02:48.976325Z","times_seen":18,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/f8bc4d780cec819183b4cfa3a05fc51f.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.249Z","timestamp":1788699412249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/f8bc4d780cec819183b4cfa3a05fc51f.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-1bb8\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLMzfwDK8iSeKsiUCidaM9X8MCV5UeVnnvE7vGRXyEHGssJLiq9ZdwU%2Bmc%2FV2JLlDXYsryI3R2Fytkc4BnZ84IGzANipmTekut9Inq2vxrKCEhReC5U9tPbfgJpL6mlBdWsd8Q%3D%3D\"}]}\r\ncf-ray: a36da2de9f41dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7096,"size_decoded":7731,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 222x227, components 3","md5":"f8bc4d780cec819183b4cfa3a05fc51f","sha1":"673e3e121269205ad27b0c467a671f9655022998","sha256":"0cd55172172382b5899c149933ed339bedbda98c91a295f3d691dca206820b08","sha512":"54ddf567f7f29f18c99691076da47b2a648109b53ec75618db53de45273fd441137d81add28a73277e3455cbbf5289ead06fbde4f35cef43d100a64ad021845d","ssdeep":"192:IA1pErsFEZkRNy0aTk7Z+ZITuDIMChwlAwyb+OFeByglBya7YJ/:/pasFEcNy7Tk7Z+6TC5tlAwhzlBMZ","tlshash":"3be19f49434201938815a836d67ba1c84944cfefbfdc590835b23f0659eb983fd5c89b","first_seen":"2026-09-06T12:51:55.732213Z","last_seen":"2026-09-06T13:02:48.981482Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/853a331b2533a5490d68d0434079bc42.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.252Z","timestamp":1788699412252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/853a331b2533a5490d68d0434079bc42.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-aa3f\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnaYSoRBeuzganRegJXVUCNpHJDfzsDHFVyzidFIvD2td33USNxIy%2FX9cqepFmGkqN%2BYVxk2ajk0gZQJvwBb8EAtxwsSGGohgvcuSa%2B1X32f5XQowgJCxRmX%2BbwKCyV1B3j3HA%3D%3D\"}]}\r\ncf-ray: a36da2de9f45dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43583,"size_decoded":43067,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x640, components 3","md5":"853a331b2533a5490d68d0434079bc42","sha1":"9c0e2ba5a86e344810f0121494c4db0a17af369d","sha256":"b316ad85a99dbff8a183ef62aac9dfde0e97126cbd400d632079590032beeafe","sha512":"a843edf08df2c42310887f6355920e7c8b51cd56859afb813ba59f01e9801a1738d6ce8faff4f53944ce04d57b6757bd1ad6adbb220f14ad73151055045a8ef5","ssdeep":"768:W+36P9cSoyB4m3Jz7agTkS52bigA2u5ioIHo7Rj3nlCP3IV3I54h8XQgb9w1:D49czE4m3Jfag2zs39j3nYAV3I5dggbC","tlshash":"b713f16e2f637501cdac58fcca6e13b20f683b6a1e2f8e657710b3c28e1494b184da54","first_seen":"2026-09-06T12:51:55.658685Z","last_seen":"2026-09-06T13:02:48.973609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1819,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/15cf708b39c494a780ea25f4384d2f9e.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.258Z","timestamp":1788699412258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/15cf708b39c494a780ea25f4384d2f9e.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-3b15\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uP2KQqX4MJbuMjH3kIXErnA%2BPYn%2FhOugnc9ddIWnUewCTHzL9cE5wu3r7yy7gsRgA20Qdc%2B6PQCVGlbbT9QsyostjaH0XIbD5DtCsE5KoRXd67h2EsIgt99WZRW1qvdqYVghfw%3D%3D\"}]}\r\ncf-ray: a36da2de9f4ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15125,"size_decoded":15846,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 225x225, components 3","md5":"15cf708b39c494a780ea25f4384d2f9e","sha1":"233eb7ceea7e9656d81c9cedb922ef244164b779","sha256":"7a8ebf9845e9ea5bba96bcab1fe00a55f0557f565d164af261847526fdedcca8","sha512":"984507dd7afad24c6cc775d3ee67724a9a9af8b4bf0aae15e8dbe9d4d34de6c60c50295d5beae8d39e175e0dad83c45e68d82e542239821a076465b37834156c","ssdeep":"384:anvDvDa7RZTmM9RJEuTNyI4zA+HOr7jZkMEIB1xofKiy:iDvDyRvhD45HOr7yMf12Kiy","tlshash":"6a62c0f25907840ff907f6ba5d250c6fa504fc320626c7e48377e6988dafee940651b4","first_seen":"2026-09-06T12:51:55.749621Z","last_seen":"2026-09-06T13:02:48.93531Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/a11ab484d99775d4a946b050fbb1baf1.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.259Z","timestamp":1788699412259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/a11ab484d99775d4a946b050fbb1baf1.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-30f71\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyeSlh5Sj3QbO4Hw%2F4lbyjkboTP4DucNyWsrT1mg7WzL7T2%2FX9wRamnOzRRNmX%2FrF9kpIgjdP3nYvMwxLHXbkE36u%2FJr3lMFf%2B0%2Bsh7Egs5qHcpGfc2YWg0j8T1xGiUI9wGBTw%3D%3D\"}]}\r\ncf-ray: a36da2deaf4fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200561,"size_decoded":191370,"mime_type":"image/png","magic":"PNG image data, 1999 x 1124, 8-bit/color RGBA, non-interlaced","md5":"a11ab484d99775d4a946b050fbb1baf1","sha1":"670bfb3f976d17aaa5193e139f47a1bac47709de","sha256":"278562e3cce6c443c110023c9958e1b77ea55b02da01bd036cc3d40bf21c5267","sha512":"8f3d0a065c143490c3c27c22c1dfea90629df4b71ee8667d0be3b1926da7698f2cef56859d32af23245e621cdc066b27808a34517d6c95e98cbdc01b9b59fc03","ssdeep":"3072:Np6f78fzok43382TybYBrQW8Kif3Q8EhDtxTf+zAhyVkPMTod/YLu9lqq8:Nof7cok43lTybYR8DtoHTuzkGotsue","tlshash":"b91402f80698e889dca355fee2312e47178c4293ed23e779466d548c6007b79618bf3e","first_seen":"2025-03-19T07:53:41.108889Z","last_seen":"2026-09-06T13:02:48.966783Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1376,"receive":2074,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/2be9e1f526cd64ba648b64684749ff71.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.260Z","timestamp":1788699412260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/2be9e1f526cd64ba648b64684749ff71.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-1fa8\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ej4YG0%2FTXEp4djwApfOJIpuOoAzEZ%2F8cYjxCy3FGcwloC9f44EtBcXYYcWzi7OS9KxVOh9WCEUEh9umYIQTA5a4sT1i6639hPIHRRJG4PZGdFyIrC8G5IB2BYLP9cpM7InhqFA%3D%3D\"}]}\r\ncf-ray: a36da2deaf52dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8104,"size_decoded":8512,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 221x229, components 3","md5":"2be9e1f526cd64ba648b64684749ff71","sha1":"32de1dbca0b2ed86cbf35efb00db53d91d6f6bb2","sha256":"e7e070cc8c22cc4b7f15cd438582076a8de3426177a2b714ee4c7e7a8000078b","sha512":"624d7c97ca0f05faf9f94ee76866cd181c8cf15aa30551fd5d4ea02952410563955568eaa15fe2a80abb8fbd2ba8ffd36f6fde71efd20707019ab664703fec1d","ssdeep":"96:yU5d70BsJMOMH06hs74/54xgU5EtuvyWtAZ6GNtt44d8C6CGyjyoSTtBV1XmV253:9r0UMZE4yx1E+yd9N9nLyXXmI54R8","tlshash":"5bf15c886ef4dac1bad9c722c4db1767eb2294b730136200857b898644ee73c670f5b8","first_seen":"2026-09-06T12:51:55.696997Z","last_seen":"2026-09-06T13:02:48.98576Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:55.483Z","timestamp":1788699415483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/assets/css/frontend.min.css?v=1763748831\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:56 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Apr 2025 06:21:54 GMT\r\netag: \"67fa0682-12d68\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIH0RsgexgtYlW8uGCVlr%2FeE3ytxuOJMCT%2F8kzvR%2FDeCTrWLwahVMf%2FOHbW46l4cTR52%2Fc60dekHl8977nYu0SVH%2BrWV7mjyhT5QHX0TISs%2FfkEizJ04TAvbRPCpmRy%2B8%2FoY2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36da2f2cb3bdfec-OSL\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":77917,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-07T00:09:26.864698Z","times_seen":539070,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/fonts/Inter/inter-fontfaces.css","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.164Z","timestamp":1788699412164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /template/default/fonts/Inter/inter-fontfaces.css HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0683-480\"\r\nexpires: Mon, 07 Sep 2026 00:56:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDO7EN4eJb5qcYhH6Mqmjsa9YD%2BZyDNMwPpEjEMvNJNBSPPEZFGub0crzA18tqlCCIHqdd7YP7oJlYf6z3h%2BjOO8wKd7IX70QbbTSKCrsKP9CTR0NcmK1r%2Fsw73Kn66Ylkdv1w%3D%3D\"}]}\r\ncf-ray: a36da2de0efddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1152,"size_decoded":986,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"34bfad895b7c09c671ed3ae45dd4900f","sha1":"5e57621aa10949fcefc120f72c9e0ebff01806a6","sha256":"54a330c368d54b97c4fa5ccaa0eec9b845dfc7d55c876ea7263acea943b0b01b","sha512":"f0ee01e0113ed75b6a1a9480907cfbde6cf428d013ba860cf15317c8500874d18f981f5ec63498d95f9e37ecd5351f81e00fe2e9011740e1b823b5dabce55480","ssdeep":"","tlshash":"8521f724241fa801a1350d5eb34b3e31ad4e206b535181a1bbb52e1a5ef7a754392f6d","first_seen":"2025-01-22T03:34:48.99958Z","last_seen":"2026-09-06T13:02:48.958805Z","times_seen":12,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/2b377bd4d886fc701e390ae028c47e51.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.238Z","timestamp":1788699412238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/2b377bd4d886fc701e390ae028c47e51.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0684-c34\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xsxf98ypQkKE7cPGQnboZn7lKW1hHy6GpVDZGa2WqEPqMrzSsLohBwbTuXmD5DP%2BP0LH8ZvOqMc4NK0Pr8MOJ4HLtUEVjK812EglgE%2BDdc3YUIO8%2Blg6lg84gH9eokE3M9vh1A%3D%3D\"}]}\r\ncf-ray: a36da2de7f33dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3124,"size_decoded":3776,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 175x180, components 3","md5":"2b377bd4d886fc701e390ae028c47e51","sha1":"d32d3a2f01c0c8c964e82731a4594922b6eda605","sha256":"0233e7fc63f8dbf08c6edbe9db3e944799f702590350dc02dfe466adc73d5ca3","sha512":"73b75b5536ca2140d9bf2cdee314c26395510a841ada7c90057044e30c4ea6649192bd77fe3598b4986df26e8dd9fb16b1f0e2ba757e59ba7fe69f64d95943b9","ssdeep":"","tlshash":"94513c5799adf797e6f09a71083d701c70171830a1ab43a57c24387bfb1e1a95a6d920","first_seen":"2026-09-06T12:51:55.743779Z","last_seen":"2026-09-06T13:02:48.955788Z","times_seen":3,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250418/6d365e79e2fe1a150c97f4fdde5695c4.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.240Z","timestamp":1788699412240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250418/6d365e79e2fe1a150c97f4fdde5695c4.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 18 Apr 2025 03:56:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6801cd6a-6f5a\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxoM7UIvzr2DxbbUV%2F1rUHjjEhZB%2F626PXAp73mMoRGCYW0Z8L76gkcyjLrCVkjtHTXbV2iA0WRZJG4Gzb3XcpCWHJMpqRYFHB84nJOsxoF1SFzSiJtlSVmeluD3Xep1t%2BV5lw%3D%3D\"}]}\r\ncf-ray: a36da2de8f37dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28506,"size_decoded":28903,"mime_type":"image/png","magic":"PNG image data, 271 x 275, 8-bit/color RGBA, non-interlaced","md5":"6d365e79e2fe1a150c97f4fdde5695c4","sha1":"39d4cd0d339bed0917ef148d82088f69fd9b62ca","sha256":"4e322093f83cf30d63fe1195cfbfc5470968ba288ea7a356f55dde5052143095","sha512":"b961c1681d651c7eebaa92dc3179051e18b7f1342f115a3d804b005e1f3d8d6a39206bb2fb1881d5c54249f836abd0476d576c3444d1963ce865e6c3d682173b","ssdeep":"768:DQQQQwf5zUIBNW2AqKgazeFgqEEpPiAmXjUoQQeZUQQI+Gsmze8O:DQQQQq5zUIGqKgazeFzzLGQQI+dmze8O","tlshash":"e5d2e10eff8202de470b08f6039551e6139ec3ca82d4e59da54468f9effe2158e9196e","first_seen":"2026-09-06T12:51:55.726452Z","last_seen":"2026-09-06T13:02:48.979628Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1754,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260606/e15d6d425c405492304f1a09e387accb.webp","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.247Z","timestamp":1788699412247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260606/e15d6d425c405492304f1a09e387accb.webp HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 12 Apr 2025 06:21:56 GMT\r\netag: \"67fa0684-81a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtMw6q5wxpBUra%2BD%2FEzOdtVz6n3eMm9NwvydYHYRbwXdyXaGUrsfC8y%2Fvipm94fmkgfq0gs3OK3K44pF%2FEf5NmcXEhCGEmeg%2Blaxr7ICFE2wsaY%2B3Ywe2WQWT9jvAf0rhdh%2F9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36da2de8f3fdfec-OSL\r\ncontent-length: 2074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2074,"size_decoded":2821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 198x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e15d6d425c405492304f1a09e387accb","sha1":"61ef6b5d001ed4cd596eead277eb6b08cc16a295","sha256":"76ccb679999b3d1b6b00af5b630c1f4d2d17b0d6c53e7eb16f94fb8d5c41e9ae","sha512":"f4a229c6202ec292a9a89b6fa223fc4d88edd78fc6f85785de4e3884d0d4de26a2d77542b746ba13e61c6e63d58bcc54126664ced2fd0a1594ca2c88bf2239db","ssdeep":"","tlshash":"12411c81db8e86d7c4869e64069747144109cad65a1fcb5a9b96c3e76c281303e06e1a","first_seen":"2026-09-06T12:51:55.704456Z","last_seen":"2026-09-06T13:02:48.965766Z","times_seen":3,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20260728/ccc6fc511e8c03b06429fe8a0931912c.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.222Z","timestamp":1788699412222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20260728/ccc6fc511e8c03b06429fe8a0931912c.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 12:30:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68a0d6-5da20\"\r\nexpires: Tue, 06 Oct 2026 12:56:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBNZ9lhhI0kmxWFYjE3y0ja1Sl48EZ84V619x2b%2BSS4c3mSI9ED6QUEPH6P%2F2rATJLJjhl5Q6rrcmDC81mxRhZnjgqC2wD7PH6gzo1frzX2nelqtr7hs8IFxyXvEYc82bE9nqw%3D%3D\"}]}\r\ncf-ray: a36da2de6f1ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383520,"size_decoded":384443,"mime_type":"image/png","magic":"PNG image data, 380 x 372, 8-bit/color RGBA, non-interlaced","md5":"ccc6fc511e8c03b06429fe8a0931912c","sha1":"0cfe52f47782d62da74359481918cd5c2888b68d","sha256":"da6d1de0dba13a11af0c87f2667a660dcefd1c00b583450f4f124d8807f950e7","sha512":"dd1e7096491acfe935d5606e30a4d63765e1a393457846dec497e70954ebe3d0ec0c659c18467c46ac8d16a55a19e7072e908dc9ec4da41a39b340b74a564808","ssdeep":"6144:QH6XdneDGcjLZIOGXUn9yXJu9BQTdEpGkepaAew7asBNjl+M6JM3cbfXAG8kKpzk:QaXNePjLZIUMU/pG6AN7amjl2M3czKve","tlshash":"e1842317bafab1cf5a82234a2e24432363da9dc9cd6910def0555b21572fc5fe163c90","first_seen":"2026-09-06T12:51:55.712319Z","last_seen":"2026-09-06T13:02:48.984745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1238,"receive":3191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/css/frontend.min.css?v=1763748831","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.165Z","timestamp":1788699412165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/css/frontend.min.css?v=1763748831 HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 06:21:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0681-5fa14\"\r\nexpires: Mon, 07 Sep 2026 00:56:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnOL8T%2BEUq1oQvdzxqTNy3e%2FVkrtXyuf9XKQZHsL0e0SesZVwiesjflkexDc93pJ6ieZ74BOomIyT2zCnnMCu7YeOqIyPDl1BoBfxaxqvd5h3IGle6lDb5tT4SLnKPxgV2Hw%2Fg%3D%3D\"}]}\r\ncf-ray: a36da2de0efedfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":391700,"size_decoded":75919,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8b8cf0de8a82516c1429db1e8513c41d","sha1":"03358286f6e171029cdbf9c8cf5585d887bcf875","sha256":"5e770541d32026e21d6541ffc7e1822fde5c173744e285f3a7aa34b6bdc712fa","sha512":"db6ea40f59d290d3388ee38052304bf075351340252ee9b537ea7f5a89976d77982b666b961462e26ad695bc2ce632c2846ec8f899fbe34bf5019b5b81326233","ssdeep":"6144:Rd1W8Ch90n5hAfMURtPGkNfS225cy4za2WGNsHSf7:Rd1W8Ch90n5hEfS2O2","tlshash":"5784d974f14430d67223c11bb5c2fe9b2a65e143e1524ebaf22b756c8fc91cb1662f1a","first_seen":"2023-10-17T14:15:40Z","last_seen":"2026-09-06T13:02:48.94448Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1221,"receive":1182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/template/default/css/main.min.css","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.200Z","timestamp":1788699412200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /template/default/css/main.min.css HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0683-7cab6\"\r\nexpires: Mon, 07 Sep 2026 00:56:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NA0oppVAN9HMZe3XTN3hxwPJBtuzaf43bTVFkAfgGqPZB2GrR0cu%2Bcicyh2yomDkPDc96GJfflg0%2FgnF0PNZ59K%2BszKzhFF5eTFSL%2FAWYXrxsOdJRjZFL6b3TszQopK7hWcOlg%3D%3D\"}]}\r\ncf-ray: a36da2de4f0fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510646,"size_decoded":34258,"mime_type":"text/css","magic":"ASCII text, with very long lines (337), with CRLF line terminators","md5":"d6c2e940159f33ba4421d22fa07e9f9f","sha1":"cba39cbbe4c2c5538e2f561c681c1d0cac9a1b58","sha256":"64067abc525cf9711b6024dc14ee56e2906db9ea740d74ff5393774e89f9d8bb","sha512":"aee748a1f9b86b33c5a6c5b63d7ee4dcacf448bbd19e81cee590c50655e866c40cc0ff8cae1576abb813b6a0abe51883cac2ea7202838e95c65266e1b43a8c71","ssdeep":"12288:2/2ZwSYW08X7Yzm22Rc5qCnu1ZjRiXDIo1uWUoYFzOFbhuNHxJR/hOy8/rPKrn86:PZwSYW08X7Yzm22Rc5qCnu1ZjRiXDIoM","tlshash":"5eb43278d52c20046bb36b39b74279346b7780178f0ab36c75e555089fe6ba143b3ace","first_seen":"2025-01-22T03:34:49.010182Z","last_seen":"2026-09-06T13:02:48.951619Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1597,"receive":1554,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/assets/libs/toastr/toastr.js","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.214Z","timestamp":1788699412214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /assets/libs/toastr/toastr.js HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Apr 2025 06:21:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fa0683-471c\"\r\nexpires: Sun, 06 Sep 2026 22:47:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUb%2F%2FkH5bY27o94jZMNOoVhuskT3EdSEaOka4zWDTEzBUBTFt2jmZIHQ6GBa%2Fpy1wfIovyf%2FwRPTE%2FR%2B2%2Bq0S9w4iG2uq3Y3cAAwgvlzearbAaRZO6nntCgrn1A1u4u5Ca%2B8YA%3D%3D\"}]}\r\ncf-ray: a36da2de5f18dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18204,"size_decoded":4240,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7e405974a64ab3f51e0a9cbcc9199149","sha1":"9bbb90da5efe3fc9659e645531141c85a5fa79b1","sha256":"b5b2d8a29915860388b7e415352a3085e49f4ad70fd90a50627a86d68c1a0899","sha512":"ed26bf2cf8fa4f16eba27854bbe168124aa0580e2f7efb8c5047d8bd0c4e361fbfa2f126d44fdf0185cc62e13e92e5959151824306f37a7d443c0b92aaca9464","ssdeep":"192:JJwWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoA:Jt45Kk7cZDItqLNA","tlshash":"a1829509691263658cfb73bc9a97800cfbba9323454996067d7c92d8af30614d6f2fdc","first_seen":"2023-05-22T02:08:44Z","last_seen":"2026-09-06T13:02:48.952668Z","times_seen":43,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250430/9a597401f455d7bcb0e499f3362d2690.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.221Z","timestamp":1788699412221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250430/9a597401f455d7bcb0e499f3362d2690.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Apr 2025 16:22:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6810fcb5-cc78\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YiceOqCN0h%2FCsqA%2BmxLZ5wvCbDzXXnlOX%2BYOBmG%2FMezHBLkcdZ8DsL7yvEppa7SdUEOwfrPtNuyWphJLc%2FbE%2F1DWjm5y2iHzp8MmVHCXBkELPs58lj7FPPU45z7B1XEps%2BsWxg%3D%3D\"}]}\r\ncf-ray: a36da2de6f1cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52344,"size_decoded":50136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 844x456, components 3","md5":"9a597401f455d7bcb0e499f3362d2690","sha1":"941d5ece283a827758751f9ee3f33fde5378327c","sha256":"189b5db98311b7bce870df4d402c001e47eb86fdb6212f56ca7bcf4ba9ee7af2","sha512":"29a268d54fe6e31f29dba2ef5e9b9e5c10a6820a631fd5b609bfa0fa7a67129ed3ad9219e25bb6eca23d23b3fcb607a4178c4c2fb775ec84626cbd3e14d69927","ssdeep":"1536:xEqGXtBExk8OE6uC0CL+mZJ8/twXEvfXz/XiEHkif:BGjlE6uC0m+emW0r/XiEHkif","tlshash":"4c33ae53c9599ed3a430cbf97f070f68474e2a09b2957aeb85b44e4a3f3a5501e8f428","first_seen":"2026-09-06T12:51:55.710177Z","last_seen":"2026-09-06T13:02:48.960048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1279,"receive":916,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250804/71ff243e0e97fc9fbc238fbc6bb475d9.png","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.231Z","timestamp":1788699412231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250804/71ff243e0e97fc9fbc238fbc6bb475d9.png HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 Aug 2025 11:16:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6890967a-5a99d\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tyk1kczM%2BtiAkUFPYe0Jq%2FSmzdjC7uybNflA6A9kfafdtPKgiknXUDEmwVo22sObvchL1tzlKZzsF%2F2kx06G%2BN1LIInOt4AYOLOkwG6kuKoDleQUy9N7CjACeMWWXltFLpzWaw%3D%3D\"}]}\r\ncf-ray: a36da2de7f29dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371101,"size_decoded":372023,"mime_type":"image/png","magic":"PNG image data, 515 x 319, 8-bit/color RGBA, non-interlaced","md5":"71ff243e0e97fc9fbc238fbc6bb475d9","sha1":"2da9fab2e12f9d44690f2ff3ebcd70405344d8bf","sha256":"d6b87efc04858dab03322a3cccc1d900475bad768eb728ce9079c89e81287637","sha512":"90180a805daf278bd2cf0cfb41782aafa1fe49b2704a4576132967d8b75f8652bfeedf8e2e35028365a67fec3e68be4500070ce1a64c344a763911152021a85d","ssdeep":"6144:skevfzj3BH1Lgy7bTK7p46JnTh24sjvtkpUx78plzSBL5t6ggt4nuq:He3zjwy7bOC6JnfMf8Lg1cl4n9","tlshash":"75842359693400d6693f5f98f45322b3dece1ab223826a4b1cde0d3d61b5f44daedc0a","first_seen":"2026-09-06T12:51:55.653593Z","last_seen":"2026-09-06T13:02:48.962597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1331,"receive":3164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nmkdy.ubuy666.top/uploads/20250606/ebd095b17a01b4c8ac821e19efb2b79a.jpg","fqdn":"nmkdy.ubuy666.top","domain":"ubuy666.top","tld":"top"},"ip":{"addr":"172.67.198.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nmkdy.ubuy666.top/","date":"2026-09-06T12:56:52.234Z","timestamp":1788699412234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy666.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 11:50:39 GMT","end":"Tue, 24 Nov 2026 12:47:53 GMT"},"fingerprint":{"sha1":"7C:30:88:D7:57:95:39:BC:AA:34:BA:35:3D:5C:95:75:D9:66:D5:71","sha256":"7C:5C:49:BA:28:F3:98:9C:ED:64:2C:F6:EC:6C:2C:CD:CB:34:A9:DB:14:75:E0:79:0C:48:C6:0B:07:5B:01:49"}}},"request":{"raw":"GET /uploads/20250606/ebd095b17a01b4c8ac821e19efb2b79a.jpg HTTP/1.1\r\nHost: nmkdy.ubuy666.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nmkdy.ubuy666.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 12:56:53 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 06 Jun 2025 03:15:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68425d43-fa3c\"\r\nexpires: Tue, 06 Oct 2026 12:56:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgcUNuxQIcDyczSofYzEAEUQkc%2FXnt4mtiuAqy1tkMdKuW9vJoOP2vw8HAQmavLU7L4xRDUx4mr3TBmQb9w%2BMqhz2gIjScDKWk5JvuLeTFPPta1vlkiSgfobPKdRQJowc2axJw%3D%3D\"}]}\r\ncf-ray: a36da2de7f2edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64060,"size_decoded":61769,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1043x654, components 3","md5":"ebd095b17a01b4c8ac821e19efb2b79a","sha1":"0199af42b51c9c3dbee289d0afcd99ff77227bb5","sha256":"53de6efcd1085c5485b6d7bed75110375aa75e86f892788faa1f2bbc52b7120a","sha512":"ecdb4148d7147deac1df6a48d021b6029ea457c117352cd2191c8be861f82845cdf483f94a0e5eaaf015ebf9aab3c0d68481b51fd1b8d2aea440673a9f3ba5f0","ssdeep":"1536:du8/mlIIIIIIIIIahmYtOLrvzEMLRB1W4TZQvxRuS:w9OjxRBosGRD","tlshash":"4553f1bae4aa06d96f1de1d481914e5c02bea3d3f446c1c32f618fc2d4c8b661936f9d","first_seen":"2026-09-06T12:51:55.682015Z","last_seen":"2026-09-06T13:02:48.945855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1384,"receive":943,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"nmkdy.ubuy666.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}