{"report_id":"26802a55-3b6f-4026-9b33-f33d7b4088e7","version":6,"status":"done","tags":[],"date":"2026-02-14T04:43:48Z","url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"title":"Just a moment...","dom":{"size":27993,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27993), with no line terminators","md5":"748565e9b11e478f96089edadbeee807","sha1":"acdad069e2ad06287bdac14e1355021dded52085","sha256":"5a3d27b393cc558b78d7cd486f46784514118f9be90e4496ab71c5f4cd92f15c","sha512":"865325bdace558b12647249f526eb93b90330cbbc2bb4c90b506989bf90ee6f87a6b62eb6de3dbb651c5002564eb04883ecc61353ec04de7aaa0ffc4978fef46","ssdeep":"384:g+4FqvUWWOJoXMVr9vta3vEaIb/JkqV51DfdttMO7ZV:6wLWuNa3vEaIb/Jkg1tMOVV","tlshash":"4fc2e7339a84172f7153876e73d1f9849334aa014f11b267f65512b88f8e5af2e7338a","dom_hash":"domhash28e62f62f73539eb50c7013aa270ff38","first_seen":"2026-02-14T04:43:55.090047Z","last_seen":"2026-02-14T04:43:55.090047Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:43:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"hypreliqiud.xyz","ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-09","domain_rank":0,"first_seen":"2026-02-13T13:05:32.909366Z","last_seen":"2026-02-13T13:05:32.909366Z","alert_count":5,"request_count":5,"received_data":166912,"sent_data":2980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-02-08T22:26:16.428236Z","alert_count":0,"request_count":2,"received_data":3373,"sent_data":786,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-02-08T22:42:04.305696Z","alert_count":0,"request_count":1,"received_data":51855,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hypreliqiud.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd9e77ffd67dfec","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a068e0417c694ef95ca3a5a39743e20","sha1":"5c4255d6eb024e18da33d75d698d8db92231a8fd","sha256":"53f8238f24c084d73e37ae8e837630ed1b763f67d91f1212c80fab9770cc0f15","sha512":"ca37cd38bd4493fb5a8b58cd4778d8f26a4fe3ffdba7659f80cab749b3fde7f828175731264f00b12e29c24a32793b16cc76c9008591bf4856d2d12f2fdb180b","ssdeep":"3072:iNevCrM2CCN08TraLzwo74KEF8s5ENKxiH8aT3:2evCrM2Cp4YEYEF8s5UKxiHX","tlshash":"fae3098decd3704712238478026bb99b539b58cc2515582ff9a0d6f83db1bbc7a136e6","size":155084,"data":"","first_seen":"2026-02-14T04:43:55.095458Z","last_seen":"2026-02-14T04:43:55.095458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"92128c1da5a9a0bf73cddc4083f8c203","sha1":"9195c52b6acb7c131722ffbec0699cd3e013bf5f","sha256":"ded6b8ea333ef94ec1a61bba0359f012049dd4f0801b2256dfa9a5655984116d","sha512":"8b40d427df2b9b7ae0e59b2b1723b07c40eec96a5ddbee978da5e7eb409188dd407b06ce59a989b97094f3825230b28d9c01ea08bdde61f765f0ed05887c8f49","ssdeep":"3:N/BKL1XmVXITR:eL129I1","tlshash":"1b5504d0745470700511cc10d3d1145550050410145d040370dd4cd417700000014fc0","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.097024Z","last_seen":"2026-02-14T04:43:55.097024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"001da155ea6e3c4bbc78fbd83c9cf63d","sha1":"431569967a4069a918c2d58d0bd9502240d00a84","sha256":"547a16ba946574c404ae0db5c862a2d1575309a3d238251794b13cb30d6cd201","sha512":"ce7da12d6ccac756cbbb78753eeac6cab17a566838b5372ebee727f09e149c9f0cf1e800e4e641c320d71274f1039822c5ee85402e3d0dfa8880feccc97357ca","ssdeep":"3:N/BKL1XmVXLS:eL129G","tlshash":"2f5500e8b88030b00a22c800f3e028aaa20a0e2020ae0803b0ee0ce82b300000228b80","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.097937Z","last_seen":"2026-02-14T04:43:55.097937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b77cddbc5416de18b43b0c68efc9da2b","sha1":"e96c0867e0b2f74de7fc80769d250d58748a56ba","sha256":"3c74d09d1d113356e28bf68ff48399a294348d760ab06ac188bdf7605705ed1f","sha512":"aa7d65205002dd5711536efe6e26bb7f5b081e18e81191841d58c0ea9308a93157315121af99a99501069ef1b889ee3206b18c6205c5873da40fb5ff47cb7c37","ssdeep":"3:N/BKL1XmVXEQGn:eL129EQGn","tlshash":"225504d0744430f10511c400d3d01c55501d0410505d140370dd1cd437340000014741","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.098836Z","last_seen":"2026-02-14T04:43:55.098836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e2fd51a28c78dd6e5e096e41b5a9527","sha1":"05fa742409eac05b422897e988dcbebb2853f674","sha256":"9b273d90c825fbbca920de755875bbcb26581f3b7157e5e4024c3438831ceb4f","sha512":"e438ceeef5069ce278121e563c9412cdf06cf556160903d6b5654c30fcf2a541fda5f229fa63e416a8eac4627cf53d3f01ea5c689fbbfca2c0d049184c203b7c","ssdeep":"3:N/BKL1XmVXF0n:eL129O","tlshash":"b05500e0b880b0b00b32ca00e3e028aba00a082020ae0803b0ee2ce82f30000002cba0","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.099844Z","last_seen":"2026-02-14T04:43:55.099844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f92a838cbda40202d6f1403e699e37c3","sha1":"74a1a3880e965867360de725da2ff908430110cd","sha256":"70f48ac87050600d7dbf7dc2a42d8cb7a59e2449690506c97a8b6529d26d30ec","sha512":"128d910cbe99313364709963e799ba463168bba12ffc04791e3dbd39d67bf71ad98a7faf6b5967e9e1c2ebc51bc1452ccdfeed32a71a421c1b8630fc8a06e585","ssdeep":"3:N/BKL1XmVXoD:eL129oD","tlshash":"b75500e0b88030b80a22c800e3e028aaa00b08a020ae080fb0fe0ce82b30c008028b80","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.100811Z","last_seen":"2026-02-14T04:44:27.172735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e5ce8941bdc8220a8f0b4f18e884aaad","sha1":"00a02beb424afffdfe11e4d38115c61a5b09b9d6","sha256":"5261d508e85895f294e8bb76319284db86a697f7e7739eb01744efac348b9c3f","sha512":"a45f71b3543719ebcbc4be2fbb25590341f2d9740a221f42def867ca39b095cbb061c995a4c831054098af35f550bae2a5f647cacea72b3d95b166c81b18b606","ssdeep":"3:N/BKL1XmVX2Sd:eL1292u","tlshash":"c65504d0744030700d11c400d3d01d7f50070410105d044770dd0cd417304100015751","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.101861Z","last_seen":"2026-02-14T04:43:55.101861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99374542f4412f54a5cba30c7b3fdf0f","sha1":"5cf8f93ddebd1aed7a32be95a1f49d41fde42ace","sha256":"61a3cd65922581852eb033968e23e2020d0ea3fb2090fbbaa09dc330a746f534","sha512":"745ac003e76b739f531a54c0c5110b156d7ae8247badc6f770653e5e102de0de839c83eea35e3ecf4ae3854b2870f9a3603e1403ae5527281264034f28f617ff","ssdeep":"3:N/BKL1XmVXPGXn:eL1294n","tlshash":"745504d0744030701511c400d3d0147550150454d05d040370dd1cd4173400000147c0","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.102792Z","last_seen":"2026-02-14T04:44:27.132158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"18d601cba489a1843b192ddf0ccb7be7","sha1":"818a3a90c930067ea83c455e89eaa4c9fedd7e6f","sha256":"04fa281c64583f17087390dd4d6c2e7950cc03b8ccb185878869d4d4c3a48c07","sha512":"7da03f45b86409c40f2c1b378ce19f673e14a080bc94b716b2376a4cd9ffa0354e9fc6aed385a3ab3880bae6c03e33e6859a30c0fe66fb1ea2d474c7cc4bfd62","ssdeep":"3:N/BKL1XmVXJEcn:eL129nn","tlshash":"b25500e2b88032b00a22c800e3e028baa00a082020ae080bb0ee0ce82b3a0000828b80","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.105698Z","last_seen":"2026-02-14T04:43:55.105698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87a21f06cfd45deabc1d4e197780f9f0","sha1":"8b21d71e7d8e74e2ddda1cb6dacbf457cdf2a67e","sha256":"d9e787d89ace5e0f4b47b7157c4f44dd6d4c7f4423b83dde74f644edaeb4d76e","sha512":"47c1dced73bb468c83707ed04f5f8a21582a065d56bfe089f5e6f49d8de86762bf933a051ef90b4bd5cf83ba2b20408ca6e8a5343c7ffdeeac37413f98d9a94b","ssdeep":"3:N/BKL1XmVXKdSU:eL129KB","tlshash":"fd5504d0744030710511c400d3d014d550150410115d540370dd0cdc17300005054740","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.106867Z","last_seen":"2026-02-14T04:43:55.106867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6d914daa6bcd567c2abd1af0e8dc11e8","sha1":"165a6ab61494b7daf448f959890854e321859a2b","sha256":"1e91860d4a02fb6f113950a11423640872e0ece7c9bb0de842ba53771f9cccad","sha512":"b40815ed0440de4946eaddbf512459d2a4fca57b664d25135dfc51bb984973532058715ba10aeb68fe0553677e33552c5c8f982229d2bf168a83916242c26992","ssdeep":"3:N/BKL1XmVXLr:eL129v","tlshash":"4d5504d075c030700511c400d3d0145551050c10105d044770dd0cd417301000054f44","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.107836Z","last_seen":"2026-02-14T04:43:55.107836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8e15b52b3e0c989189b462eb417b89e0","sha1":"dd82bee8f0e1a34d828b63fb0177686279665ddc","sha256":"17e9bd90549f274214539af3cf95662ed161909aadd2a704b643ad8ce93e181c","sha512":"9be1654e828433023edbbe85a809c347e11200af7f4f6daf3b6c29445c994007572cdf0fdc0de4bdc8b9c1acbcdc35e72700afc0140b9e0130ba68cf9948de55","ssdeep":"3:N/BKL1XmVXugn:eL129ugn","tlshash":"ad5500e0b88030b00a22cc00e3e02caaa00b082020ae080bb0fe0ef83b328020028b80","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.108991Z","last_seen":"2026-02-14T04:43:55.108991Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1871286c5e9a653aa6e11ed38bd0c43e","sha1":"9e440fa689b7aa34fee5b897d66449bfc4bc95de","sha256":"987cbb714432bb7f396d608cd98ff43e994ddb6411953a36c97621e4f61cb51b","sha512":"9d7b86f38d5988e5b84e3c39aff3d0a8e995eda88137550da261c3c3ec187d8abc967a494c182bf899f04dd69d302fc6ce716ba5fdf5c729790c2ec08d98d364","ssdeep":"96:Rvlp8s3FqU5ba8lxLzMKJ9gNsQPnmAItfj946hU9qV8b83SvIyDmajyAYzueh8DG:Dp8cv5DlVdJ9Umt1q7m3cI3uyhyNmZ","tlshash":"33c14cfbd29f0815cae6136685db3a1016726a260b82b55278dc4c0de55fecb121c2f6","size":5618,"data":"","first_seen":"2026-02-14T04:43:55.109964Z","last_seen":"2026-02-14T04:43:55.109964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/?__cf_chl_rt_tk=A.TGop.srGYCArtHChmQj4GIK5fiYdtySgiEROwISF0-1771044203-1.0.1.1-Z9VvRcCnXIyAFyL2s1x9cdBSMs_uFdKJCldWngQWYmM","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-17T06:30:56.299775Z","times_seen":814188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/60138c04e6b2/api.js?onload=sOTSZ8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d4a61fa35059c9e19e71cb1f5a77bfe","sha1":"680142959bbbf9920601ff8559405c010920b9e5","sha256":"dbe8c6990993e30d76285ec5e857573487b36256127a6c72f0c402ed8f0fa5f6","sha512":"42709c6925f0e6b52a2ab5bd20ecb956723e8f8e5e8829822b7005cc53fc490e7af187e336c5b77b360f0a8a0aa7596bb093658d694a36a76475ad475a375404","ssdeep":"768:NCMIW2oMv79fuxBFZeXDhnyaSP0TNTTOGnx7sMAeGsONUgg1JW37+CfkmEt6wUaf:j2pv79fuxDZeXxuqvneG1ggPN","tlshash":"1a333b583156393227dd80e4617ba3437325793ae94ccc90e827dd66266cdcad233fba","size":51151,"data":"","first_seen":"2026-02-11T10:51:04.774988Z","last_seen":"2026-03-01T17:49:40.024397Z","times_seen":15318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95a0aa54e157fa9c7825aaae5565ddf5","sha1":"aec6c9325f3d14e254a81d25f243dd133b52a763","sha256":"1c88d671892ad3749d982631e26572f6557f1cd4ab4fd73b733f79cf69fe5683","sha512":"20b2d19790c7bbcfb563cebbdcf2a1e62f9112dcbfc01086ad0d24638447967e7b1cac188893bf4df6bafb379249ec897c551a28909baf07ffff53d973674108","ssdeep":"3:N/BKL1XmVXIUUTn:eL129IUUTn","tlshash":"6e5504d0744430710511cd10d3d1145550050414105d044370ddccf417300100014740","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.111558Z","last_seen":"2026-02-14T04:43:55.111558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6dd4cf14005e5d97b463777bfcb2e864","sha1":"2bbe861ed4716b1d9d59ec2d97010cf2ffede077","sha256":"b35f183a76d3d51c66f2324a59b3a51c424084950446efdc7b5d062e80bd3cd6","sha512":"2b458850a0a9296be500d43ce17eadb8bd2a864675d18c8af7a599d77dcfe81b94556b38fca624daf2ba51f0168a43a06037d4d6f12da829fc79b0b39943408a","ssdeep":"3:N/BKL1XmVXJZ:eL129/","tlshash":"875504d0744031701511c400d3d11c5554050410105d040f70dd0cd4177100004347c4","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.112519Z","last_seen":"2026-02-14T04:43:55.112519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c3fe7e9145e850cc89cd56b37c23f93b","sha1":"14123fbf5517fe30b3667a733e9af4c338d98547","sha256":"8fd1f92da87088a9bdf410985c9fb8cde5b625395b72d4e08637d8dbb8e56cfd","sha512":"1d4b976724ea095c8c884297c5b2884fe74dd00d3fb0e558bbcfa8994d2ccb3c9f8e70b7b5359a94df9d02e2860319c2e7b31be8b1e3e0eebb427fb13a6c2560","ssdeep":"3:N/BKL1XmVXFc:eL129K","tlshash":"cd5500e0b88030b00a2ac800e3e028aba02a082830ae2803b0ee0ce82f30020002cb80","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.113561Z","last_seen":"2026-02-14T04:43:55.113561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"321ab683864273ffe5050d1a8b750db2","sha1":"1d6dfc5aa35771065d37ca605ce2872c5978e62e","sha256":"b8a8d543db9b75037a2920f8812bc17abf3b35591806ab942fe3361b71c71f08","sha512":"28bb03493c1a234a8634765235a411f4fb95a93f30342738b88e4ff9c08c538f9e7a28013fac072e6c778b9d2f4c6ca41f243b71ce4fcd21f234283dbb1e10bb","ssdeep":"3:N/BKL1XmVXgn:eL129gn","tlshash":"7a5504d0744030700511c440d3d45d7750074410115d041771dd0dd417344000034740","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.114566Z","last_seen":"2026-02-14T04:44:27.122761Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fed51cbe6da77c934dd761ebf1ea37a9","sha1":"ae282a0c3510c67d68185441b3fd033a1d56a6a3","sha256":"65af4be5f8e0316996e20b2d6893323852b166aac655dc2c21bf8972808781ab","sha512":"96afc335f4fce97500f3bcb23224287d84c46193f5439fd2630390ef5ff137519f34874fd13adb9f89b252e0d69e630c23c81f702203801761f3fd315eae5af1","ssdeep":"3:N/BKL1XmVXKWF:eL129KWF","tlshash":"1a5504d0744070710511c400d3d014dd50150414107d0403f0dd0cd41731000507c740","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.115601Z","last_seen":"2026-02-14T04:43:55.115601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"04a35b61bc0633e2c03bac7acf331e9f","sha1":"56fd2fdb65ce8b64212093ca45a7f5c8112f3e8c","sha256":"8c488375c3ea2a17e3b2d74645e270bc104056637d2d517e959f2e74a7079019","sha512":"8eaf7cadb1ed1f2af11c6a69762e3611b9d5855149c4b7779aa8c6db1be65a02eb86006f572474fd49c5fe6d30ce69652b3b4d02d297042b31483fda03f9d728","ssdeep":"3:N/BKL1XmVXS:eL129S","tlshash":"375504d0744070711d17c440d3d0555554070430115d040770dd0dd41730c004014741","size":1337359,"data":"","first_seen":"2026-02-14T04:43:55.116675Z","last_seen":"2026-02-14T04:43:55.116675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hypreliqiud.xyz/favicon.ico","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:33.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypreliqiud.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 23:43:25 GMT","end":"Thu, 09 Apr 2026 00:39:55 GMT"},"fingerprint":{"sha1":"AE:14:30:8E:1C:D9:80:2A:21:C3:8E:BE:D0:45:68:84:A0:FB:DC:4E","sha256":"35:AD:91:B5:F6:03:7C:CC:18:CC:A7:5F:04:B2:06:24:9B:3B:CB:F2:A9:05:42:32:F6:8C:D0:56:C8:11:A8:FD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hypreliqiud.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hypreliqiud.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 04:43:33 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 49\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nlocation: https://www.google.com/?b=t\r\nvary: Accept\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbRoGM9juCiyzlaBEMgZi85ocmU60InxRj5g%2FpGyNYCG4v3RIkiXe%2FWOcMqac8Bq2p0ZJGg9%2Ff2bKGLy4lcuH%2FzYy3bdnDa1ks45bWkplg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9e7bebd1e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:42:25.972765Z","times_seen":17931210,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/cdn-cgi/challenge-platform/h/g/flow/ov1/2064878574:1771042287:W3Xf2M8IRaTxAVD7aEMsekbnJnXVnxlmfHf-0yq5rd8/9cd9e77ffd67dfec/n_5TaS0E977.9NnVj_2v5IND37D8uxYV.UvtH8HyILo-1771044203-1.2.1.1-Rk2izd6LV5KESn.m_k.42nDg6dN1ne9fhfSr8bbIEu4efNNlXYiO28qaX7puUS36","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:33.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypreliqiud.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 23:43:25 GMT","end":"Thu, 09 Apr 2026 00:39:55 GMT"},"fingerprint":{"sha1":"AE:14:30:8E:1C:D9:80:2A:21:C3:8E:BE:D0:45:68:84:A0:FB:DC:4E","sha256":"35:AD:91:B5:F6:03:7C:CC:18:CC:A7:5F:04:B2:06:24:9B:3B:CB:F2:A9:05:42:32:F6:8C:D0:56:C8:11:A8:FD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2064878574:1771042287:W3Xf2M8IRaTxAVD7aEMsekbnJnXVnxlmfHf-0yq5rd8/9cd9e77ffd67dfec/n_5TaS0E977.9NnVj_2v5IND37D8uxYV.UvtH8HyILo-1771044203-1.2.1.1-Rk2izd6LV5KESn.m_k.42nDg6dN1ne9fhfSr8bbIEu4efNNlXYiO28qaX7puUS36 HTTP/1.1\r\nHost: hypreliqiud.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hypreliqiud.xyz/\r\ncf-chl: n_5TaS0E977.9NnVj_2v5IND37D8uxYV.UvtH8HyILo-1771044203-1.2.1.1-Rk2izd6LV5KESn.m_k.42nDg6dN1ne9fhfSr8bbIEu4efNNlXYiO28qaX7puUS36\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: https://hypreliqiud.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"qud5a62sROXQqqXuQjE-DnLqb5yV5iYp76kEpw9Zty0vznNZBDb6wm3bFo5VZsOF+kF$ip9H6B0RfYXu4289tOkXthEL1GXiOpi77kbut4CeDvJ9XaywhyRsNcmBiqY5+ywSggg0QxfV$OMHOjo+M1qlDgwsJmO8qiiGe558B29AwYV5EkJCUsDoQHZ-WOOdCgHAx3vzUNnHpa$eQSbmZmKalKRM1U3xO1I0XgNmp+o5DQQ1sOXopLHdN1COeoP$oYtsIkchI3b4mzAYF5ZC3vQZGx$nou8wXzldELjL2xrH5PINuPnVU0zAPLaqI-nWRMlrHlUVOBsK6Zg-cAzYbDInogzKJ69SWFEpAXgf4fEA-A67qG$l3+eXSc1AwkwVdyixWzDUcSBYBkxm0Y9j89iuzqw9IbbYvBHp9KJlrtshd51W-Zldc6aRXZZdgfi6pg+-nH31K1qQJVPGlfSdk0Dla1EnsaXEMENmiAb+rC3Azm9gSB1u1ZxoLgRBsv33C7DJsR0xss9xSP8NQeHbcpFehWKEE1FDHsDmPM53gcPMxYc71faBuq1Pw2cZ7witMhf6fWmhCH3EO6+dSspiQAZA+sby6tCHJGbepBzG7meafi5CoJZe0XaPF2F26ggFn2byNptd9IthMkzWCLkLoDuqNMUkw3siJnpqpdoU50v0Q8F63PVMGjuHN-3QLVk6O6C1M8I81OKKQRJiD3+5W-p8LcgG$fSI5J1$7lUi$hPJi0pmYwllNJ-bf5ivtbvuztS8YCFsc7dQ2BYujoFmuHnf7zCUlN-JWktAwphrtbH6Ur+DanQKvIK0Wy40rUU2l5Xq60OzvrRblu6IOhhUj5DS1oLW8ABdPIihteK5iFPmgbQtg$rYJXnRdhuEEfPpd0zuJXGWiMxxzmUEDO0AIUk+fuFYe5Hrrw0cY5R58nD5$q3eeadi+I774m0Qz1XoNJVF+Do$JoRGsfFJu$fvc$7HxBUkDIdK3B1wFpOQ5m4PDD3MYQUP6OKppdaERnUV$vtDsAOfRgxbVxAs7EnqCol-nl-06tfM2JzdumZwbPaRHS4m-e-ZXufxvmSkoCrp7dYieHNopeEX18inABjB6M+fc6tyFAz8hC6zo6lQhWsHxWXE-RetcBSIWKUFGtL82h4xHcp2a+OU-MJOhqibXHiCavZFNx8Emroe-s2GRMzSyMXYCIH38jzBq0-8UbvveaVMUYDW39DuRDqc3obfoG3BzrCEA-Wv$C64PpO8K2jk0O4xyyW5OakuPi9duEWXundqdjoz$nODq3Mc92WSzkDOhKHwPDo2GQGCgiIyaocKDYCZ$4ffQuedEQYjcNbE2jVIEXUwUXsW0VKH5iiL1pqAWcLOg2dFstqI$48mi9tKD1DtzgxfL17RPn0uBnL7heiYoeClopvMO+UFcvQ7az6CjagV$dbLOx2yuRBzEN6ARf-CEnb9DRhGlO$btwgG++MPpZJLmG9ssx0SmN+oChuv-G7kntqHI0Jtq+noVbS7NhDlAob4QxiFLh5A+qbhasDMDRtL70Nv5$8K$cscKNWkqVy4-bKnfVakeMi0IyrL-QNZ6I2Nf-czXCtfX01yDwhGDmeI7Hd+3ED4vJls2uSZUk63Rbv66yqWifq0Rby7zRQgBVo4NHi-EmfhCmdLWEI+HdgudYBfddVjmpR+kjZUulmVn59AQ+n2FXUOO+BLqgDq3+GXMDAiMSqMxBbkOd68PxEpZqsp37jt$fIAVa9musPNAhFUDO-M9P38GBMym3ir-KSo2Nh7-NINHNe7txKImMs5qROclbS35UWfMFnnOtBAK3z61rIpHqNYbiJ0f8fC2ob6HVSrS6f0DAtbI9u++Wh+F2GsiK7dkzml+KOuYyFzZ3uLkNUhr$C5PfocCIV315ulftG2iN2iqQrPdJSDypKotQWWGRb-xDs8JvjxQ74-LyXemRqewMKs2A18IfRehB0O$ak"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:42:25.972765Z","times_seen":17931210,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:33.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:29 GMT","end":"Mon, 20 Apr 2026 08:39:28 GMT"},"fingerprint":{"sha1":"2E:B6:3D:17:52:5B:29:DC:03:5A:0F:A9:EC:0F:57:33:2B:54:50:E9","sha256":"05:C3:70:5C:FF:EB:B6:B2:B9:5A:B1:EC:19:0E:52:DF:7D:82:EC:E3:1F:F3:BD:64:AD:96:70:3B:A3:E2:E5:FD"}}},"request":{"raw":"GET /?b=t HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:43:33 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-xXAHBtLwssPLBr4GQRTl-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\nreporting-endpoints: default=\"//www.google.com/httpservice/retry/jserror?ei=df2PadTxN7Srxc8Pt6yU0Q0\u0026cad=crash\u0026error=Page%20Crash\u0026jsel=1\"\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AaJma5tL8ANYrqcHNN4viPlcYNmXxULU5Xp8h-_kYlTOdLEClVmBCULdeA; expires=Thu, 13-Aug-2026 04:43:33 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=31.SE=oFouXoX1j2NaLcYuuYqxS20A9WlC_LMnHdsyjmICZSEnzS2Drrets0ce0IBQo3SRA-TZZFcgR4NKqMTmnQf49gSKNCOIaOxUH-IRLmUQ-HTbirHQLbM_O9Mjs9JWMRtkvGvurKaIosDLemwrTQeUZFjU5j8KGS7OrqE5Db3FBkOme-fThvoagDrBUNiSeXHQ8qPqq-46Wx31clRZepd_SL2Do9QrgzRLaicLTaKx9ueoJQW21mCX50wezPK-gNHUVdMzkow; expires=Tue, 16-Mar-2027 21:01:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-BUCKET=CPkE; expires=Thu, 13-Aug-2026 04:43:33 GMT; path=/; domain=.google.com; Secure; HttpOnly\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:42:25.972765Z","times_seen":17931210,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":102,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:52 GMT","end":"Mon, 20 Apr 2026 08:41:51 GMT"},"fingerprint":{"sha1":"0F:50:AB:64:9B:F5:E8:E2:93:93:57:63:8F:7E:FA:1E:85:EE:4E:69","sha256":"7A:C0:51:F4:28:EF:25:D1:05:45:35:E5:93:56:AE:8C:29:AB:52:F5:47:3A:13:FD:82:70:42:30:E3:17:55:D1"}}},"request":{"raw":"GET /?b=t HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:43:24 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-ds05mv_QgBvhePeW6SfGRg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\nreporting-endpoints: default=\"//www.google.com/httpservice/retry/jserror?ei=bP2PacuoG8Lx6AOI0sbIDw\u0026cad=crash\u0026error=Page%20Crash\u0026jsel=1\"\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AaJma5sxZ8TeCZ5LUOvp_DZEqSsxcT1fVOzNCtkYMTuazN12mk8wWFn3LQ; expires=Thu, 13-Aug-2026 04:43:24 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=31.SE=sjKb5UqP5WvJmnPRT-exgXOiFYodcGipLoPz7EONgt-IC3vnwSFWN1_kqCt9u__MxcACWMfH8L_HJ8Yf8g2dhtLc7Qmqx4bhj9LxQSck9AM_qKG3YseNMP0wfYRWqjxDWvV0kVAW86KsBbCdr4U_9I4lgDXL6CJmjU382uLyeanG-vGSYrpmOMawvbDPNGd2NCnF5IW8A-tXhHoYMdFA17-WDgyO-AhpJ6_v8oTTGRQEhqUSb8H04IQ30nQzGWU-P67xdVU; expires=Tue, 16-Mar-2027 21:01:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-BUCKET=CLkC; expires=Thu, 13-Aug-2026 04:43:24 GMT; path=/; domain=.google.com; Secure; HttpOnly\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:42:25.972765Z","times_seen":17931210,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":1,"connect":27,"send":0,"wait":101,"receive":55,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/60138c04e6b2/api.js?onload=sOTSZ8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:33.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/60138c04e6b2/api.js?onload=sOTSZ8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hypreliqiud.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:43:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Tue, 10 Feb 2026 16:17:54 GMT\r\nset-cookie: _cfuvid=QAOzNnXdy9zQ8qVYmzSJTJCvKF8DmbUgJiUOErXUprU-1771044213.5789444-1.0.1.1-IsHpvv83AM6uATdPVol7rifShKbVKvjeLvyLB4HImw4; HttpOnly; SameSite=None; Secure; Path=/; Domain=challenges.cloudflare.com\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://hypreliqiud.xyz\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9e7bedb0c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51151,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51150)","md5":"0d4a61fa35059c9e19e71cb1f5a77bfe","sha1":"680142959bbbf9920601ff8559405c010920b9e5","sha256":"dbe8c6990993e30d76285ec5e857573487b36256127a6c72f0c402ed8f0fa5f6","sha512":"42709c6925f0e6b52a2ab5bd20ecb956723e8f8e5e8829822b7005cc53fc490e7af187e336c5b77b360f0a8a0aa7596bb093658d694a36a76475ad475a375404","ssdeep":"768:NCMIW2oMv79fuxBFZeXDhnyaSP0TNTTOGnx7sMAeGsONUgg1JW37+CfkmEt6wUaf:j2pv79fuxDZeXxuqvneG1ggPN","tlshash":"1a333b583156393227dd80e4617ba3437325793ae94ccc90e827dd66266cdcad233fba","first_seen":"2026-02-11T10:51:04.774988Z","last_seen":"2026-03-01T17:49:40.024397Z","times_seen":15318,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:43:23.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypreliqiud.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 23:43:25 GMT","end":"Thu, 09 Apr 2026 00:39:55 GMT"},"fingerprint":{"sha1":"AE:14:30:8E:1C:D9:80:2A:21:C3:8E:BE:D0:45:68:84:A0:FB:DC:4E","sha256":"35:AD:91:B5:F6:03:7C:CC:18:CC:A7:5F:04:B2:06:24:9B:3B:CB:F2:A9:05:42:32:F6:8C:D0:56:C8:11:A8:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hypreliqiud.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 04:43:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FA29ABtq9XpwXJ8Ca6ML1We2BoYK9akTjOCl22oNZwmBumfoIcc39mf%2FZqsVdrp1kqKMA9278HxGyrhqnVXT25pWurqHx19E2VtnigfC5URIVnBae2BlpWqXMkRUCc%2BxxJ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd9e77ffd67dfec-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9cd9e77ffd67dfec\", cfL4;desc=\"?proto=TCP\u0026rtt=2462\u0026min_rtt=586\u0026rtt_var=645\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3284\u0026recv_bytes=1254\u0026delivery_rate=2470989\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=a546623da61f4e91\u0026ts=28\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7620,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7620), with no line terminators","md5":"6abf92d9ca6e4512267ec8f285e42d7a","sha1":"08bb3cf47b439ce13666669c3d7ca85537f3eb40","sha256":"49eb695057f41797029a70d4ab0b33965bd48b5cf64db501cbaa271d6e3777ad","sha512":"2dabc9a6a565cd2bd44ff3cfcbfb145bfc0e4f61a44ecd92cb4cf337db93d27d0e1fa47592e87ea857189bdf072749abc441f6f946ac237e7eae682cc1751c8c","ssdeep":"192:PNadBap8cv5DlVdJ9Umt1q7m3cI3uyhyNmw:04DfdttMO7Zw","tlshash":"21f17cfbd29b102ad2b706b380eb76104222f6144b42e951f8d99c4cc6cfe8b052d3a5","first_seen":"2026-02-14T04:43:55.092546Z","last_seen":"2026-02-14T04:43:55.092546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":102,"dns":82,"connect":3,"send":0,"wait":11,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd9e77ffd67dfec","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:23.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypreliqiud.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 23:43:25 GMT","end":"Thu, 09 Apr 2026 00:39:55 GMT"},"fingerprint":{"sha1":"AE:14:30:8E:1C:D9:80:2A:21:C3:8E:BE:D0:45:68:84:A0:FB:DC:4E","sha256":"35:AD:91:B5:F6:03:7C:CC:18:CC:A7:5F:04:B2:06:24:9B:3B:CB:F2:A9:05:42:32:F6:8C:D0:56:C8:11:A8:FD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9cd9e77ffd67dfec HTTP/1.1\r\nHost: hypreliqiud.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hypreliqiud.xyz/?__cf_chl_rt_tk=A.TGop.srGYCArtHChmQj4GIK5fiYdtySgiEROwISF0-1771044203-1.0.1.1-Z9VvRcCnXIyAFyL2s1x9cdBSMs_uFdKJCldWngQWYmM\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\ndate: Sat, 14 Feb 2026 04:43:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cd9e781985b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155084,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a068e0417c694ef95ca3a5a39743e20","sha1":"5c4255d6eb024e18da33d75d698d8db92231a8fd","sha256":"53f8238f24c084d73e37ae8e837630ed1b763f67d91f1212c80fab9770cc0f15","sha512":"ca37cd38bd4493fb5a8b58cd4778d8f26a4fe3ffdba7659f80cab749b3fde7f828175731264f00b12e29c24a32793b16cc76c9008591bf4856d2d12f2fdb180b","ssdeep":"3072:iNevCrM2CCN08TraLzwo74KEF8s5ENKxiH8aT3:2evCrM2Cp4YEYEF8s5UKxiHX","tlshash":"fae3098decd3704712238478026bb99b539b58cc2515582ff9a0d6f83db1bbc7a136e6","first_seen":"2026-02-14T04:43:55.095458Z","last_seen":"2026-02-14T04:43:55.095458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9699,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hypreliqiud.xyz/favicon.ico","fqdn":"hypreliqiud.xyz","domain":"hypreliqiud.xyz","tld":"xyz"},"ip":{"addr":"104.21.41.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hypreliqiud.xyz/","date":"2026-02-14T04:43:23.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hypreliqiud.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 23:43:25 GMT","end":"Thu, 09 Apr 2026 00:39:55 GMT"},"fingerprint":{"sha1":"AE:14:30:8E:1C:D9:80:2A:21:C3:8E:BE:D0:45:68:84:A0:FB:DC:4E","sha256":"35:AD:91:B5:F6:03:7C:CC:18:CC:A7:5F:04:B2:06:24:9B:3B:CB:F2:A9:05:42:32:F6:8C:D0:56:C8:11:A8:FD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hypreliqiud.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hypreliqiud.xyz/?__cf_chl_rt_tk=A.TGop.srGYCArtHChmQj4GIK5fiYdtySgiEROwISF0-1771044203-1.0.1.1-Z9VvRcCnXIyAFyL2s1x9cdBSMs_uFdKJCldWngQWYmM\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 04:43:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 49\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nlocation: https://www.google.com/?b=t\r\nvary: Accept\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yax1IBFcCu%2BSz36dixdECzqEeVMF9UeceT9vwa%2FGFJrdYOyPUlGa5cjjbDszFCIwqta8JcEGmw8CBOmgbiw2lEpKFwITYo8hKpdWv42vJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd9e7822868783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:42:25.972765Z","times_seen":17931210,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hypreliqiud.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}