{"report_id":"274bb2b3-09bd-41a1-a7d9-356ee975cbd5","version":6,"status":"done","tags":[],"date":"2026-03-06T11:15:13Z","url":{"schema":"http","addr":"qadden.icu","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"104.21.88.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"title":"Qadden - Worldwide Decentralized Marketplace","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qadden.icu","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"104.21.88.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T11:15:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-06T11:14:46Z","timestamp":1772795686,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58902,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-06T11:14:46.293062+0000\",\"flow_id\":1875005405539380,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.39\",\"src_port\":58902,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"qadden.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":912,\"bytes_toclient\":1654,\"start\":\"2026-03-06T11:14:46.207924+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-02-27T04:59:55.075711Z","alert_count":0,"request_count":2,"received_data":2761,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"qadden.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-06T11:15:16.005124Z","last_seen":"2026-03-06T11:15:16.005124Z","alert_count":90,"request_count":90,"received_data":3763196,"sent_data":41607,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"kuadin.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2026-01-31T05:58:12.107566Z","last_seen":"2026-02-20T17:44:10.418087Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1374,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-06T20:10:45.04419Z","times_seen":204815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","size":40858,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-06-05T00:29:26.038004Z","times_seen":991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f757224c404662b0faa11be074ed2d","sha1":"560f528eb8ccb1d43129299c62068c7a3f14cfee","sha256":"93ff2de83282d394668f1880b654a22a6922cc1bb2cddd46d5701f5dd70e20a2","sha512":"f7dcf5812ef34abc2badbf691d7ca9b62f17a43953f4ceaa5336f27921a6a630f3ec2d1e849df69716fb616d8f89107984b7dc47e6278e80b783239199fdcb5e","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SP:JN0LE0+1lfYsvSQ","tlshash":"02b18696e77638dbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":5343,"data":"","first_seen":"2026-02-12T22:33:02.083158Z","last_seen":"2026-03-28T02:20:02.873785Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","size":1187,"data":"","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-05-20T20:20:34.172027Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32dff9de2a5a22fcbcb16662d7679cf9","sha1":"4287dbcd30f6484bf1de22f5cd17de3186180ba5","sha256":"6c1055481eae9b1a886efcb915d8b8570011794f704d9f70e4967c5bd2169365","sha512":"a13ec90e449a9832a7f3a528cd873bf274ed582aec7c511c61890ec75e81a78b5ad35cdfa7aed27fa0da06fe3b8f3cef8f1b22e87ce0c80c2cdb53d00b908688","ssdeep":"","tlshash":"7fe06863a64a3c9942c2c5e0a028665392cfd267c48fc877c9089c4c0daa4606720b1a","size":360,"data":"","first_seen":"2026-02-12T22:33:02.03085Z","last_seen":"2026-03-28T22:12:53.928284Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97187138ff46175b8f7eb3aa4ec21a32","sha1":"aea0daa5a937617b5c63ce8161ad6bddefd6536b","sha256":"a7ee43ad86f10251bcf11d1bc0a9e4a18f9c18875bd80f294fdbc40394cfc1dc","sha512":"a97d1f3bb6cf688856384742884a183a9e286c3548b01a099266f3d73fe48f23f145b9b85a15b8a9baaba8b2ef6dc61b97f09aae47a67e458fec5ad8e4bcffb5","ssdeep":"","tlshash":"63c02b5bc5c52fc716d00ce51130623322b65316c87c885859c9c4400d30c43d864252","size":138,"data":"","first_seen":"2026-02-12T22:33:02.03216Z","last_seen":"2026-03-28T22:12:53.931071Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","size":5467,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-06-03T18:06:58.68411Z","times_seen":412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-06-06T19:37:16.535195Z","times_seen":14207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","size":9237,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-06T19:07:16.837928Z","times_seen":7494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","size":60293,"data":"","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-05-20T18:37:56.877816Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","size":54800,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-01T15:13:50.708692Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ct-settings-init-js-extra","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8637b2e6761e455238611c558d4e2f","sha1":"5aacf8b1a09aa029030dcf1e2baed0c782711d89","sha256":"feedaa2972c6f5aac4f467a7e8aec67912524b4c57dbda50373117f855583dab","sha512":"d2599889336c0481e2a9a3807ab7bed276fd57b0cbdbf50cfd79c3a1961825b48bfdad8b09114bec457209e2f2cc45bf8f4089eacbcce3c24510242d05be0415","ssdeep":"","tlshash":"e3f06863e64a3c9942c2c5f0a028665392cfd267c49fc877c9089c4c0daa460a720b1a","size":554,"data":"","first_seen":"2026-02-12T22:33:02.055556Z","last_seen":"2026-03-28T22:12:53.949887Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c76168362867e8297fd24900ee6b7ce7","sha1":"f435321ef0f9e13854612a65250dedada343ddcc","sha256":"a1879c98180fb1975fc80c8da16f7c024883b60aa21e58bd9761e20b540ee9e2","sha512":"ce4a596b0fb0ba3409b3205a44f9223ed7c4236231e4d5e42494a6b9f91c27714629d3174a783a68e5e318feb3d6e0f932cd5a5812cf57f0a89da289ae4bbbfc","ssdeep":"","tlshash":"1ec0926b60cda8990a9f7b32a076818f353595a03f8a280c542515d84bab8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03461Z","last_seen":"2026-03-28T22:12:53.933965Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","size":1160,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-30T03:59:01.289929Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fc3b18c54b9030af3b1f75eb24df109","sha1":"0458e94d3d6b1b78ebbaebd1e40ece8263e5f3c8","sha256":"4fddf0d4e9eafc065fe0300c97c051d33404dcbaa70a6c6cf381fc3414508921","sha512":"e81d5666ae36fc2fbdd610b2900ba473639492179b66586bb099b04009f738cdfdd89b9ac5edae6d05f2e7e6d483a4ef5976464659d4a5da113ed745f99c659d","ssdeep":"","tlshash":"d2c09237b0dda8dc0e9b7b37e577428f723551a13f4f2808846454d897ab4b6042bf95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.037658Z","last_seen":"2026-03-28T22:12:53.934867Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad876aacafbea1bc0b44279e0b4e25be","sha1":"fcc680d6cab3bb6c7811310669004eced66f9985","sha256":"027ad6f90f07fe485218887a482bf1a3a50c9ae25d5eb288016cf9427711226f","sha512":"a796daee00e98e59756beb0404ae7f9ca14972726c555645f3f0cb3262661256f7de2f9f6d6769677948d4d10df8efc60f8223490adaa4b9541ee0505fd290a8","ssdeep":"","tlshash":"71c0926b60cda89809ef7b73a27682cf313551a03f4b2808542515d84bab5ba402bfe4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03889Z","last_seen":"2026-03-28T22:12:53.937447Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","size":10332,"data":"","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-06-06T19:38:26.25454Z","times_seen":15458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","size":10981,"data":"","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","size":11969,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-03T19:00:10.679259Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca451e423816af4aea44ef9965e405b4","sha1":"d5bf1b129873b75cf21c7a50145f4f9d3fafcd54","sha256":"fe3c46b02167e975a969579f6f74fcf8f9bef19e526d73c44a66485fe6dfe7f8","sha512":"53dd227134f58b2f1e1baa86b2c53e597bc4323a24e6e058a774bcf074bdc4e5c5524d60fbbb735486e8dde12bdde1cc59c5518a8d3e12373974a0bed05d37b9","ssdeep":"","tlshash":"1ec02233b0cc88cc0e8b3b32e232028f323002a03f0e280c883820c803ab0b2002bf80","size":141,"data":"","first_seen":"2026-02-12T22:33:02.042591Z","last_seen":"2026-03-28T22:12:53.938265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c189b07b8cf5fbf9320d7a763c65ce5","sha1":"c6a3762d84befa33910ac5e1cf106b81e20d67d8","sha256":"c7b29a333c06c37c75566cafb3037dd25e9ddfa7c40fbea3c78af8e23659eec6","sha512":"a78ac56aca503d3d0b4ed4a1948edd430d1826b73c2b214d248bd783a1c04e78c60a7dcacf829eb3f3049054c5ab37f1d37b4b7076122acf9eff4014ebb2f13a","ssdeep":"96:si8ckS/qv0VFm/UjCbweCyiSeh7QHAWvoyeCwQOl425k5HSPRySKSLFxPQX:UCqcDaUjCbweCyiSeZQHzgJCw/X8HSvS","tlshash":"8e023ead96f62124b563b23d1befa24435329113180bed013d5ca3880fa15765fbafb8","size":8529,"data":"","first_seen":"2025-09-23T17:21:14.03334Z","last_seen":"2026-03-28T22:12:53.940634Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","size":20279,"data":"","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-05-20T20:20:34.092281Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","size":73795,"data":"","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-05-20T18:37:56.939194Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","size":7834,"data":"","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-05-20T20:20:34.098986Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","size":337085,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-06T17:58:54.429389Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e05f69ab7787d882a3379b6f3c381e","sha1":"42d4ba48f7c5f8755b753df6abd69c792c162017","sha256":"a5024c650af90792ce558469819a314ed26756021fb18ede088daeb2a9d34b75","sha512":"b2c4d37ae6e441c937e6d4eda2091a0a3fe6b7975715ccaf08897df06feab3c4a377c93d36e4629b822b157f770c0f98732e61c57db7b406f4063295c01572bc","ssdeep":"","tlshash":"c5c0926b608db898099f7b33a277818f313695a03f4a2908582515d84bab4ba042bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.047383Z","last_seen":"2026-03-28T22:12:53.941482Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ff7654e0ee36bec5a7cc6d155d06de8","sha1":"b9453f90a8d1be277c9e04015e6fc39d40110a85","sha256":"743addb91ada723e48819bd3ada98f1eec86c99ba587e63534012724cd95a73e","sha512":"ddcf1b2217759ae315c05997d803ef0ea8d8faef5f5cf5002c298d93c0bdcc41557757fafec0d193281eedbea6287e3674325f70352fc0836beabdb38941bd9c","ssdeep":"","tlshash":"97b09267649ea89509abbb32a076418fb03451a02f86280804a510d843ab8aa0027fa4","size":117,"data":"","first_seen":"2025-09-23T17:21:14.052131Z","last_seen":"2026-03-28T22:12:53.942328Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59a1061fbcf41f5e85090ba2fa9a67c","sha1":"8116e9924e7156e7d5d9cf62af3bb75a999d38d2","sha256":"7196e7de0fcb90aa7dcd75f741e89a91f5f172dccef4e8acdf3dc95de355fb69","sha512":"bcbeef70b99310152ea76da61a1303cbfff76bd9b9f654f447a2a706e83e7a4f575a312a0f1963853bca33fe91f526262df6bf8c7ee81c6860a39e1f03a9f475","ssdeep":"","tlshash":"b0c0926b708da898099f7b32a276818f313661a03f4a2808542515d84bbb8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.056726Z","last_seen":"2026-03-28T22:12:53.943067Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","size":17314,"data":"","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-05-20T18:37:56.888318Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26c953aa3915f943e1d6b46422c57134","sha1":"4e5034a6912440f1ac947dad321ac1cbb5dfcace","sha256":"42482d38e1d73a9221793b4e757182a91e2fc76bc4d653175bf702b569e0a217","sha512":"965f070099ca919747a7c430714344baf399b04a15358998744277e4478225b0f3123c2b117c957eeac20c5838853bedb444275f57320c4c3c04aadb219e68b6","ssdeep":"","tlshash":"53c09227b0dd98dc0e9f7b36e676428f723651a03f4b2818847414d843ab5b6046ffd5","size":141,"data":"","first_seen":"2026-02-12T22:33:02.057957Z","last_seen":"2026-03-28T22:12:53.943767Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","size":4075,"data":"","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-05-20T20:20:34.157199Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","size":15556,"data":"","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","size":4192,"data":"","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-05-20T20:20:34.125414Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T20:10:35.406682Z","times_seen":891675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","size":21879,"data":"","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-06-06T20:02:23.725344Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","size":9087,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.114322Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d83b73368e26d5a7848bde92c409ca7","sha1":"109ae6549c639a96000da5d149445c4cd0e52225","sha256":"27fd63c72b9ca9b1589d34f73a3b0b02d74f8633411be042b1bb3b0e90e8ebff","sha512":"6a1e56dd8aacde65e4abff70070316ca88781a0456da6906eeb41f11755c770143f09bab880642c9c6a8c4ee83686f201023466dde41655d3a8b32c1926074be","ssdeep":"","tlshash":"7bb0922760ce98940a9bbb32a47a418f303551a02f462808042410d84bab9aa402bf95","size":118,"data":"","first_seen":"2025-09-23T17:21:14.058241Z","last_seen":"2026-03-28T22:12:53.944532Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","size":27139,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-05-24T02:26:56.925152Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f63e2248d25d0feaa907a19c7a95d9ac","sha1":"7603afc0915ed4ccaa7da8757a22cdbcf2f181cb","sha256":"14fbf97838de472c1f1d544e7a1e5d7db0267777c9ff2cbf578026079ff1dad3","sha512":"71b1c9cea323ea311956d51eb4c073ee4564c5b1e97e453558a3caa251e24c3ef43dac4fb1519beeac4f7ec41be7d522c42f3babc7667d5aac55fc72ae3c2c0d","ssdeep":"","tlshash":"d1c09b6770dd54dc0d9b7736d576418f723551503f4a1408446414d443ab4b5042ff95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.068656Z","last_seen":"2026-03-28T22:12:53.945265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1029d319913d70463bb3531e296e48ae","sha1":"defcfda809076ecef49bb77afcd58f5015d52694","sha256":"e4395b9733d0a0fc386a7aa0b95f27d4a91cf0b968f70246003d703c5f98901f","sha512":"c5378e794fe40d744567118090942b46d421856c47e9657047fcb00b90f1557c1d592603369d7fb82408c36c0d5f92dc16e2d7263d683f5fab4090857ed6990e","ssdeep":"","tlshash":"9cc092ab608da898099f7b32e276818f313651a03f4a2808a42515d84bab4ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.06993Z","last_seen":"2026-03-28T22:12:53.948423Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","size":1591,"data":"","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-05-20T20:20:34.098334Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed72935440ce32992acb954c8383f8e","sha1":"5fbdaa42ed18ed3860bc2f07b5f857a4fcf93d05","sha256":"59d558218b288b5c1ae7f59e6e1bade8843ee19705e5c2ff8df47b4f71fd0676","sha512":"f1a4e471b96c18a295ced2bf03650fb7885a9d22de9b352af7d7fd2bd7921e6fa865693f9049ba7bd0526a40d2389a9199c8ffa7773c50926da2d8daf3743b4a","ssdeep":"","tlshash":"92c09b67648d68940d9f7736927541cf313555903f4a1808542515d4476b475001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.074273Z","last_seen":"2026-03-28T22:12:53.949162Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/zilla-likes-js-extra","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"034fcc02ec288a53b5433cd074b3efa5","sha1":"a3ded817dcda054495a654a5405e336763ffe80b","sha256":"fcb3083eb91d3ea329bce2a57cb1c38f3166d5885b8b4f0b21bde030949474ac","sha512":"f17ccdb5d6aa19ac46b31f576af2f64f322a0107cee51ce4818143348432ae92a4d4529800a50a32963f141944a2b5cb4a2fbbf9839825057a948efaaca0084b","ssdeep":"","tlshash":"eae02b5bc5c52fc716d00cf51130623322f66316c87c985859cac4400d30c43d864352","size":344,"data":"","first_seen":"2026-02-12T22:33:02.072456Z","last_seen":"2026-03-28T22:12:53.93304Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b7e4c930ba72c55740bffda68fbd543","sha1":"eca741cc1e45172f70e299615090767d24e66324","sha256":"7adce50b022897e795c9e39664e34be847c9188e4531eb6d965fcac5d7d423a0","sha512":"14506fc288dec5fa29ea17dd6af3783a02896ab5a49dccab84b1d4b3e6998582b7814fba42024b9b632fb1b28ee039a0251be4013aa30979fa2ee84a3d43e9a3","ssdeep":"","tlshash":"2fb09227b08d98a5099b7f33a076418f3035a6a02f862808042414d843ab8aa002bf94","size":121,"data":"","first_seen":"2025-09-23T17:21:14.07888Z","last_seen":"2026-03-28T22:12:53.950682Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fcec6a9f9392e995a88aaf6558caf37","sha1":"446a678bbaa09d1c534f57bf687f3d5ba8b2d74e","sha256":"518870c4e3a3bdb65e3dfa3d20876331434b362b9226e3d96f71aced580f67c4","sha512":"c76a3f0d514609aaba6d1326d246117b77e6ab4a143d29bebcd9f07df9c0227d245a30950e133df21aeb4dfb6fb113f88dcba0961aac686c74eadeaf3dc732de","ssdeep":"","tlshash":"9db09227608e98980aab7b32a076418f303a52a02f8a2808086911d843ab6a60067f94","size":119,"data":"","first_seen":"2025-09-23T17:21:14.080555Z","last_seen":"2026-03-28T22:12:53.951443Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ab67360d9298250b651560792daccd","sha1":"01092699d1ebce9da9ae06f7ccf8e957a797a492","sha256":"c77d5b329c21cd4aa9a182a8615a8d5c5c8e3d16ba261bebb84c589218f4a296","sha512":"f7d594934862bf553f32af166716cf8c6898c0c2783911611167b49cb9e62106315f96e538ef4af46cc0db6177408bfb57f6ed1baf85bfd6f4fa23a431a70c7e","ssdeep":"","tlshash":"d5b09227608d9894099b7b32a076418f313551a02f462808042850e843ab4b6002bf94","size":116,"data":"","first_seen":"2025-09-23T17:21:14.082651Z","last_seen":"2026-03-28T22:12:53.952143Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","size":4198,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-05T23:15:44.439579Z","times_seen":1195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb681e1ebdef64adaae93497ed04bc26","sha1":"889fbb0402a4945d180dd0f61145ff4562cd2048","sha256":"e0e2c6a5140bc478008dbe83efd559f8886be82a4a5722382aa38b1e10f54f8a","sha512":"6e1530b457cea6e127b2140f265b749555dc32141e216527140b203fb0b868031411e15e14eaecd195c0c25dea305ea03e8947b65316bd67e340d446fc5a92c8","ssdeep":"","tlshash":"04c09b67609db595095f7732a079414f313551503f4d1808142519d84b674b6001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.081914Z","last_seen":"2026-03-28T22:12:53.952839Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","size":18496,"data":"","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-05-20T20:20:34.104456Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","size":753,"data":"","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-06-06T02:38:48.7552Z","times_seen":3229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","size":1396,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-06T15:14:54.634884Z","times_seen":1801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","size":927,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.131354Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","size":1751,"data":"","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-05-20T20:20:34.109568Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90de6d6de39f900f9656204722c5938c","sha1":"c4ebb4413fa97b0590b29f1ab8a861c6dd55228d","sha256":"fab0e29fc2752191d6e56e0ff5197fc47e4971b5d4df5616ddac8ea985e250dd","sha512":"cad24a9ac7b490721503539de167b7bb5d4fc35c6627501cc266782313bc3579c7ccb163c1dd521c1c77f5cf373cfea2036fae24ebe8020974492aeb4dd300ca","ssdeep":"","tlshash":"7bb09227608d989609ab7b36a076418f303851a02f4a2808042810d853ab4a6002bf94","size":115,"data":"","first_seen":"2025-09-23T17:21:14.091395Z","last_seen":"2026-03-28T22:12:53.953653Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","size":15321,"data":"","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","size":20637,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-06-06T18:21:02.813237Z","times_seen":2604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","size":1886,"data":"","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-05-31T04:31:02.773021Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","size":3902,"data":"","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-05-20T20:20:34.185795Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","size":860,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-06T10:06:50.120529Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a009e0dc51af74717b96afea7b52e80","sha1":"d76874964c901fe58db1a5f3e5efbd77d6568436","sha256":"0920409bca4fe227a7d7b5331840c7286953163e35ffd98e986cda0fa34f54ae","sha512":"ac1302359811802afd24a63e5bf1cd6f2eeba829e469f1cde73f8983e1fea901b32ddc3f1b336299e1fda1fb88c9a8f089178c92c0292d2be2c82bc289fb07aa","ssdeep":"","tlshash":"5bc09b67608d6595095f77339475415f713551a03f491808142919d44767475041bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.088444Z","last_seen":"2026-03-28T22:12:53.954333Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f541ee111fa40f4b14c0771a1788bb4","sha1":"c784c652a746eb5d1d6632c70fb467975b3e1e76","sha256":"a50e409667edb79d5317913654b055de96d8d1a52852acb17344fe03cdbcbb0f","sha512":"90753ff447b7f59d98de1504684e7239edea38c7630245965cb29a1567c49513ae3fad2b25e83d315bf43f2d95ec46d9669efb53ca82e6a5d1fd9c0fef39390c","ssdeep":"","tlshash":"d0b09227a0cea8d4099b7b33a076418f303455a02f462808162410d843ab8a60037f98","size":116,"data":"","first_seen":"2025-09-23T17:21:14.099936Z","last_seen":"2026-03-28T22:12:53.955219Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/contact-form-7-js-before","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a060ae7321f649c80345c2d64840c71","sha1":"9d013d2f5a1656f0ed3516e5cc19b5e6f4112bfb","sha256":"0f7e893fb65f5de33141cb825a4e74a214156411c718a1d4ca4cf55e948391c8","sha512":"0998fe50a2458c602dc324b8c34199518b2742ba56f61a5f3bbe59449867cfaf58d6fc6175ba522152118859e1d997e59bb2c84b9847ce1c99739a448497d10e","ssdeep":"","tlshash":"99512355d5e41c4610e1c174017c1313f551511bcb3f5d65754d404c2fb4078f4147ca","size":2534,"data":"","first_seen":"2026-02-12T22:33:02.084352Z","last_seen":"2026-03-28T02:20:02.863293Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/presto-components-js-extra","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21790fcda23064aecb875ac5c01abe7b","sha1":"b50ae51ebd26f575e5a61f7c0a1bb8c2a10f3723","sha256":"3b1fe91f01209b76cfbbd0087a4920d04177c52a91d3c9d112811912be823f33","sha512":"8e80db18d5d9d63ccc373ed28506a29055fcfe0f3b43f4dba0fb2b6e3fcf23d695cae94dac0eddf1d13b682a9d3ef0c0152b0394398a8b14f44fe744fdb7aab2","ssdeep":"96:11uywx1PXhZ0HAfGACf2hD1uywx1PXhZ0HAfGACf2he:11uZ1PcHNAdJ1uZ1PcHNAdc","tlshash":"c0c1543ed8452d758f8281f65658274362fb83abf0caa91bea8d9c1c01ad755c30f72c","size":5798,"data":"","first_seen":"2026-02-12T22:33:02.099796Z","last_seen":"2026-03-28T02:20:02.864754Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","size":21077,"data":"","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-05-23T09:52:05.680249Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-06-06T17:52:10.209403Z","times_seen":5501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-06T20:10:47.53975Z","times_seen":822047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","size":124185,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-06T17:58:54.468662Z","times_seen":1177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c215afb4af3c167b759b28185895d4fc","sha1":"4ec0ab3911d01627e26e9348f8783af41dec4c6c","sha256":"a04ab77354a8ab2ba8ca1bb8337fdab6a58c9cb244cfffe3a9801ea2f3cd56d3","sha512":"0ae6678aa095c18da47e726344900fc4da6576b8ce2ed8647449dcc791c5c91435e7896e044fb262db3e60aac043006c1b5669830b9489340557119fa50a936b","ssdeep":"","tlshash":"a3c02b2370cc44cc0d4f3736d432018f313020a03f472808002404c403bb0b1002ffc4","size":141,"data":"","first_seen":"2026-02-12T22:33:02.095025Z","last_seen":"2026-03-28T22:12:53.958874Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-06T20:10:35.374837Z","times_seen":192805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","size":15261,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-23T09:52:05.874686Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","size":7210,"data":"","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-06-06T16:21:36.889442Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","size":2214,"data":"","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-05-20T20:20:34.047601Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","size":4984,"data":"","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-06T19:41:17.579663Z","times_seen":14147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","size":20852,"data":"","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-05-22T00:37:27.300431Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-06-06T18:54:07.619894Z","times_seen":16319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ct-menu-init-script-js-extra","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"84009053850046998ee2254ff3d886ad","sha1":"500aad61bf21ca0e211a22a358ca05e55b16be5b","sha256":"4350a95f5db91026abb2d5c8109182bff9054ebcbb01e9164758bee161cc0a7e","sha512":"85bb3206c5086852bec34c96b2c4e25c59c0678fc65d015a03ef5194bcc21764902fe5560e399e77db0243c637f7fc21c662ddf9e3359708ab4d74f37e71cabe","ssdeep":"","tlshash":"12418c88c9c9adf294b06eb09664c63342971690c43ac96c9fdc84881e309808e84959","size":2434,"data":"","first_seen":"2026-02-12T22:33:02.080887Z","last_seen":"2026-03-28T02:20:02.878335Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-06-06T20:10:35.404391Z","times_seen":189973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-i18n-js-after","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f52b55cad413d0d0f4920ad2708b17cd","sha1":"f4285c9d7f9d08867f865918e3db70d0b14c34e7","sha256":"544b7e99e362d7a82181e5280d5bee718cd281abd0ace59686255ccb3300bd14","sha512":"2ae4da33491f3f2cb8a39c8d31c3a3fd11bf3c7a3861af34169f12008d2b8159d5739bdd5eff3bdcf3c8cc5949c53dfa13537ff39dacc5af52988112662e7509","ssdeep":"","tlshash":"2f412b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":2431,"data":"","first_seen":"2025-12-13T01:18:28.951491Z","last_seen":"2026-05-07T21:23:49.97443Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","size":2545,"data":"","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-06-03T19:33:53.073378Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","size":22639,"data":"","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-06-04T14:53:01.895259Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:54.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 02:11:37 GMT","end":"Wed, 03 Jun 2026 03:11:33 GMT"},"fingerprint":{"sha1":"E5:3E:0A:30:F4:58:F2:1D:44:E5:48:76:2A:E6:85:18:EC:8B:F1:CE","sha256":"24:D2:8D:75:D3:79:FA:0C:58:BF:C1:3C:6B:E2:D6:A5:BC:5F:45:DA:1F:58:E3:D7:CF:59:A5:BB:C5:7B:AE:EF"}}},"request":{"raw":"GET /api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qadden.icu/\r\nOrigin: https://qadden.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"d3519c5b0f7d3d4d0214a1b2f56999f9\"\r\nx-request-id: d61ac005-ad3b-4702-9449-c4c69784a908\r\nx-runtime: 0.004070\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9d80f082de7c1f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":206,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d9755484400be5438bf7ee94cab4c085","sha1":"1fcd3a7730084ce5801ca90f012b99b62afc4324","sha256":"b3871abf7085fa0739f40a3846e37bfd55d01266fd0d542d3dd541e4a6e56f8c","sha512":"3f08347f4eabb011d94fcb28e6c19f8fa7402e4fa2755c3e4b4c06495768c179e2895016845368dbfd76001d9f20eb831c9f3e965af55d1de9c5ebcd72c74d52","ssdeep":"","tlshash":"25d012405071497b191a4cb58c1937e0d94f9175502c4317495ce4830cae3ff0496cec","first_seen":"2026-03-06T11:15:25.077818Z","last_seen":"2026-03-06T11:15:25.077818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":145,"dns":39,"connect":44,"send":0,"wait":228,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-countdown.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-countdown.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6kUQNltY9qW%2Fw6ytyJXfxmmSML3FYf3CB0t4ML2ZGviEDweqdZkhr7Sn74hnKsvUB4GxZcHi%2BDFijzbExkJ0G3aEwylNPt8HQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3b1c8d1f7f5f8a4ee7b3c327d7d366ba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a7eea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7464), with no line terminators","md5":"212f5ce9f95f1d2ff0f6efe93c3acf61","sha1":"c3c7f5f6899c9edb16c29729996939208e52c09f","sha256":"aaf441d85a777d30a82e3b28288e8242378b1674fd891ef37e82dd50a7d3a4b1","sha512":"b0d30c7db2a57f148ff22e8b0500a99c3e3e84a3c69b1a8d01b8fcb74bfbfb790baa728f1de73d2952da2bab94f963857d34075cc792e034dbd07d94f8718961","ssdeep":"96:hrQXrdjPqo3LIicBB9pETvb/Rw/8lT16Yg:hrQXrdjz69+lT16L","tlshash":"43f156d04e70133baee7e114bbc4271c3eda9d02f316459d63afa52ebd6e8b9102c549","first_seen":"2026-02-12T22:33:01.869793Z","last_seen":"2026-03-28T22:12:53.805683Z","times_seen":67,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Z1E%2Bint9pSXBS1iM6C7EfHT%2B89BE8%2Fxbvqq52qkghfgrv330BZMw%2FkoZGM8FEGO7hCX%2Bygx%2FC59NpE5vgcOBuRgCNEbMLOJGPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"66168331343369527a5d8368d71c340d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b18ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-06-06T20:10:45.04419Z","times_seen":204815,"resource_available":true,"data":null}},"time_used":5685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5639,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpOvi8vENsC1KOos8yxOE87UC8%2BKYMzPZsR7bUi4ix3UQOPR3fqJrp6YqtuZNRXmN2pMxHdRKjUa%2B4zKWbopntBebN868HgOvr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bca3fd8837b525c9fb1c2ea2bb2c0b56\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0535b7eea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1667)","md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-05-31T04:31:02.773021Z","times_seen":160,"resource_available":true,"data":null}},"time_used":6620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6452,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9AV5oHi8n%2FXTDk3Sfb7XjpGRjzDpF0CnIRPNZiJ04c9lG2YCkTE%2BUlGVQNk1n0EPKaIbSiaQBdc0db1LCUvY04r6ygqXFHfh2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f6c2e03a9f180431a34637f4d01b3f89\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0537bbeea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-06-06T17:52:10.209403Z","times_seen":5501,"resource_available":true,"data":null}},"time_used":7121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7081,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phnJ1WTlsc%2Fp5z3KP%2BcekeErexyXf5RBlYobAwha7HlVkUuyouN%2FNwf8eT1U2oV1hxYNELXtIceJ3NI%2B5KBF7zKXW0g%2FREAoqNQ%3D\"}]}\r\netag: W/\"ec7860662d37b29d4285f96bafddfe07\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052fab1d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a436b5a41b6c43b4affd74e7c1432209","sha1":"663662ab1eb1479997f64dc16122bba828382f32","sha256":"4953ad5a8fbf630a59b8101b138c2dbc776832939fe6f19e46052d552bf22b01","sha512":"8c1b2868746b358d5cad28431c377aaeb2826c77813f5fdd064b22c61b2c0ee8eb55d6e42eae0d53c9c3551ae415091f9f69cf0392c70da6f2c73ead01d7760a","ssdeep":"","tlshash":"dd41b055a34a9f47273b5a3ca69c76104fab61d9ff830f2c7db4391210458ec233a9c9","first_seen":"2025-07-04T07:44:29.935695Z","last_seen":"2026-05-20T20:20:34.085563Z","times_seen":165,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:47 GMT\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Pkx3yjfveReUEXwTAYRTxcVhjyDXBrQu5c49HKVtOqvARFdnPFMq3CM8pYO0KGEcQiYs5Z4wAKk7PVa8cmRKytMT%2FIVxvda09Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"39896048c288006e9b0d9e92ad0e3b2b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a79ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"7ce23df41f0df13d8aa07058990195e6","sha1":"c01b09e729d3e094c91a9baa9a6e4a3c2df4f8dc","sha256":"dac931a95dbb1bd18a6440cae735af9d8c52b383d426379c3bd9520ce375421d","sha512":"a400560f1b2a3aa1064d70f64a26edef459950a3059682d9ab412ef81653f5ba649515ff34d234b1f57c87b95c77d23902b4f54105fbda91082ec14998714905","ssdeep":"768:bxzNdWjDhTsG3iD4Wjt3hk2wnKicP1PVW48Ycs+lx5PVGm7IsgpspzdlICjqC4B9:bUHuUiusij8","tlshash":"d5441360b9400697a61f6c7c3594f739280776b2d24e9fdf7062ea60d6882cf752e31e","first_seen":"2023-04-11T00:56:32Z","last_seen":"2026-06-03T19:33:53.057512Z","times_seen":555,"resource_available":false,"data":null}},"time_used":5144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":4792,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WC%2F7q8ZHLLt5Zcgd98zz61VN%2BHZtu5VE5%2Fr1RYphE9olcFof8wNyVernX65wdVaMWLKJ%2FEv9UMQtqOsl3u3apjC7XV%2FdgW6%2BJW4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d55cfea9c716536fd857751be9807669\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b02ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-05-20T20:20:34.172027Z","times_seen":165,"resource_available":true,"data":null}},"time_used":1299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1258,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/03/ico_bg_image_17.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_17.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 181984\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c65158a84e8b9b0e3bb122c9d6f66962\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvUCWjs5eFEdL5bJOnChJnVCrXVYAksX1N%2BR%2BprD2wmaTAl8DMiunf4YSdUxKotIHYbpG9c4fOt2IhzvSxO3DvZizoExE7I1CPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074ce99ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1176, components 3","md5":"5f4937231d239f01c8503d7bb7cce83b","sha1":"c801abd3e5d669897a891fe66ed997eb13de5073","sha256":"5ac795ba09b7890a433d7ab2909f2532a2d9e0acc415dfe57f6e2bd62f31e38c","sha512":"cf95aca979a28da1ee8cf823daab8c9f866cc789005d9f7e1ce69022de40da396c12a79dd95cc195beb912885374bb1cc8dd1e6ff6796b588b1ea2ed28d1b57e","ssdeep":"3072:ioWCJz83R3nk4ESh9s03FWj/5RFkTLKvqxNtdgmpn7AtftxhxjEETbuq2x+NB:iuz14ESl3kT/C+UNtL7aTfjEEfZ0+T","tlshash":"960412a2e5d934f9c0bc5bf1038213368e67e5e99be7710d4f1544ba2a0839aecf7164","first_seen":"2025-09-23T17:21:13.816899Z","last_seen":"2026-05-20T18:37:56.915412Z","times_seen":156,"resource_available":false,"data":null}},"time_used":10136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5842,"receive":4294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/02/ico_bg_image_10.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_10.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101341\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"54ad602982b03720e4f27e846bf66008\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZ8D8daMdMfEfKTcxwPstu0ur1UcTdMwoOpbaZmNrR6J90H8pF3L%2BZhDt4qdNUbtKQ8Qz4APw2qT8hjeeQZyXPLqxBRv0sSbs%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074ceb1ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"38f1030f349797feebb0242aeb9b4866","sha1":"6fed5f414b490e6aaa9a7741fcbf00ec582554eb","sha256":"06821ecc09227f1d795f767ac38bafc8e3f5aaf3a65828976100993eee7a3248","sha512":"9bce33fb67e3e8b2cdad7efec22f397f74362fba7255410bd55198c76a48e66d227b5a155d0017fb2d9824f6a9b06b8c9f8b2375b4e7cdbb857603350b37b732","ssdeep":"1536:NyRTqmKXoEjSN1XNoiWFbPWUvJEhGt3j+h5vXCLdGbp5U5XlFyV0C3pnNkr0wRT+:NCTDEIFkPTJE8t3j+h5fsdGdi5aLL","tlshash":"6fa3121984803d84f59d4576e27edabb2e1e7cb1d49c6b3f79c1aeb22d131c8e84141c","first_seen":"2025-09-23T17:21:13.865526Z","last_seen":"2026-05-20T18:37:56.939716Z","times_seen":154,"resource_available":false,"data":null}},"time_used":12182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10132,"receive":2050,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:54.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 02:11:37 GMT","end":"Wed, 03 Jun 2026 03:11:33 GMT"},"fingerprint":{"sha1":"E5:3E:0A:30:F4:58:F2:1D:44:E5:48:76:2A:E6:85:18:EC:8B:F1:CE","sha256":"24:D2:8D:75:D3:79:FA:0C:58:BF:C1:3C:6B:E2:D6:A5:BC:5F:45:DA:1F:58:E3:D7:CF:59:A5:BB:C5:7B:AE:EF"}}},"request":{"raw":"GET /api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://qadden.icu/\r\nOrigin: https://qadden.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"b94dbd9c3d4b5fbee7ab7cab13d9be1a\"\r\nx-request-id: 5ba780fb-7894-4cba-9add-67a07394d294\r\nx-runtime: 0.003851\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9d80f0855bca1f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20b608a3744003ff10d9f975a0efdda7","sha1":"94930a97d1b4ae330e628aab611f4d0e5019d583","sha256":"2593b3ce7537cc6ec08c247ad9368c337f82885a70d0cc39fe79c6c30a863ec8","sha512":"97f3bbd09ce2197639938a849b2f92948f4a6440d795bfd979e665a034ded1acb50d59b22af669d8d9f642a279c4bba37500f6cf45d851c2b291ff6a76a16f4f","ssdeep":"","tlshash":"ad90021045e000775936647a5c592358e856da65511d0204520b8c5555bd0fa81160dc","first_seen":"2026-03-06T11:15:25.098944Z","last_seen":"2026-03-06T11:58:13.205529Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":544,"dns":36,"connect":44,"send":0,"wait":183,"receive":0,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qz0Q0CkCLUb6w5WXkDhJpSy5v8sJXD7fkBgspopdmJhpi3fiZr9c4%2FfGHkSQFcM69lQ280ouz9EOjJDLvOvzkqA8Q3XKSRQ1UNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f726e317be328dde995ae0e093d320f7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a5bea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7b32c62970e5d8ec29fad1f0975c6d08","sha1":"75a021d00881028899c4d7b25dfa9f77a24cfb78","sha256":"0f9062da8be55f5fbe3d94228a14b7609a0cec84b70facfbcb39ad08be670107","sha512":"736277a02f70dd1a276df0be5342838a8a4253cf028bfb5eb4ce2f38a94f83db19bb16d446faa054320d302c8518daf7a3a97eb8865a1f5ac2de5ad6bf1a44f8","ssdeep":"","tlshash":"72c012311e251835c0325056c1e11c446b025e0a52b3c887e401e857d8846795828654","first_seen":"2026-02-12T22:33:01.843865Z","last_seen":"2026-03-28T22:12:53.814002Z","times_seen":67,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WO6opuQ5gFiahS%2F7iIsnY9%2F6SmUFcpZj%2Ffu%2BoIgzI48zt3TgvQOgekZQDU83wbcwQ2Hys5Da572MCnWbYzqc%2FpZGzFt9JbcOWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f2bb34f80bc435c09eabc02d9af36caf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a67ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T20:10:35.406682Z","times_seen":891675,"resource_available":true,"data":null}},"time_used":2799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":2564,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ujm9iApy7%2BxDqu22fwNzoMHiHdQy5TrikqWXxsT66aWAMWMHIWL8jauAX0qY6%2BnkjAi6EalTgqxZb6VYpMbt%2BTDx7jlVdYIP468%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4c74937fac90e8cb27a7fc5575e6e9ca\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ad3ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-05-22T00:37:27.300431Z","times_seen":97,"resource_available":true,"data":null}},"time_used":5369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":4720,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/02/ico_bg_image_1.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_1.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6732\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"eb81945f923fb5c7be44fb7723eff11d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfWqzbNtfVoHNhyQThCdlSjo2egEt8WacQDillRkD6C8OjTp%2BJ%2F6XCqmhYXYVztKB%2FzPqk8309q2PJ1NfVM9KCiPrrJuOHOgtO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074ce95ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x354, components 3","md5":"a6444d582842d7178c462499c49d2b8e","sha1":"e3f2c15698e90668e13ed2cad7cf92d848426ff3","sha256":"10daa070bb1c3cb4aa492d52cd7e33c47da45e041684e5aa1a921365384b8949","sha512":"6ecbd626384f0d9b5eb5102afc1f857451e27ac778ba3905f693eaebfb024a9c360101a53142497c0e3f1e15fac4d01acb136e5228ae2c4a963fea2449c192fb","ssdeep":"96:k/hoJJTgqetm80GkXBvNhx8XoVlxHR4xerak1HZRZ85vE/m6Gzh:T4qe4c6xooVd4U7g5va8zh","tlshash":"edd13ba3d704a267c41d173140cfbab2bf661d62ff90072a1a9944669bba3a07e43f01","first_seen":"2025-09-23T17:21:13.863238Z","last_seen":"2026-05-20T18:37:56.889654Z","times_seen":158,"resource_available":false,"data":null}},"time_used":5843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5802,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:59.125Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T20:09:47.269697Z","times_seen":16189918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ec9F454doHk7M6V6psjqAWx4xB1wHmZ27tljQKcixMQUmbBV2jFo7Gi81%2FksddUTJIUvj%2BNYN332VbFpyVLoKrlY0iPwPpEcObw%3D\"}]}\r\netag: W/\"41759797bb3f2d4f29263f5918890c63\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b2ad9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13309,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13309), with no line terminators","md5":"ed70b1c891eb81c7187f50d30dcea083","sha1":"8a3b1707c86da119b85a4bfc9f34f608c0f65cbf","sha256":"f56e83df98097c74606f63c35b56e0e72a20de0f194f420d4df31e2de0f4fe45","sha512":"ff70c0db807e4b97403b0a7ae6f93ebede295c483168f04035403403c44845d3cac2fc1bfdb4c4c674460aa2467b8c2672c35e03958d0a453a70327136f2f167","ssdeep":"192:VBF1xuNlhtllyNKjt/XkyDcWj8LOQBWPOIOIBMpsy7qO+yLJYmAbA1RJPK6KN3OI:oNljllyNKh/XkIusy7qO9LJkaIAtl2","tlshash":"7952bc25146e693eb77b61fe2decb0a41e5ba8b3d7d15968f5e6c420c34c24e30a132d","first_seen":"2026-02-12T22:33:01.880514Z","last_seen":"2026-03-28T22:12:53.883671Z","times_seen":67,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-preloader.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-preloader.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gybboSy0MNqpv3Hzbo2Bvgv6O%2Bw7i1Y87DI2BGRc%2FTCwL4Vosub%2BWC9m4FZfIUhDYW9zhlImmg8SDNtteBeb6aoxN%2BgeinRFY4w%3D\"}]}\r\netag: W/\"60f9e5bc9a217740606bfcc3f97c7ab9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052ea9bd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f67d979c93da4ae5cb1ca62261d19df4","sha1":"8ad553fb8f726daa1bf40c730c0627806d530adb","sha256":"567319f85d81a0b9d661c472bd31e41854318372040fae4d140eb96301650b37","sha512":"a15e574490b23878614345d2b82d17bf4a4893921de79c9b9598b2f32d56a66814e57d573ae42fcbf6bdfc994ed5900d708e432862df9dd45f22506a0a4e1156","ssdeep":"","tlshash":"5b6168b87965c1825622ef19b7f44e300fd872739d56c4b7f0922c1dc2c06ec9a329ab","first_seen":"2025-09-23T17:21:13.857918Z","last_seen":"2026-05-20T20:20:34.079011Z","times_seen":163,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHvGYCShYVlwa1C0B3JLqfRGcR3uuNVnGUr%2BIrqY56BowB%2FAgb1R3eNpsXsoAR1R0DLaBtw630BNzky%2FYmG%2F4EPm7bLFKGiKK40%3D\"}]}\r\netag: W/\"3e52e3068d99f20a4128e106095b318f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b33d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-06-06T14:49:23.642788Z","times_seen":21465,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/icons-material.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/icons-material.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oznV8dOhR7RqKRvr2ipgnLkVt6aR9mOot5v%2BI70sJ%2FjBQpLEJMDasgTMrzyAVOrh62qGiaKvlDBtZcKiAC3zfC2ulpRyn17XQmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c857e7174909b27df06784fc024033ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a82ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9aaa085b9e60c9e64686bdc5b503db2e","sha1":"461806c0c6891cdaddb093b0cca2eba1ef018250","sha256":"999b3ff1e204d85707226e7191480f81ab7c847d5b1ef67c1d9eb037939fb8d0","sha512":"f1d3441b88abcf8d5670943ab9df601cbafab97b77360d0d2d700fe8a38f98158e21dbae849ec432ba3295dbb39b949990dbcab3ecee25f21db56d118eb13f46","ssdeep":"768:n7xYmW5iuG6UcoJ307fxgxXWB45H627v2S6zvERXsE/fNY0Eu7sxst0OW2ho:2zgPtVe","tlshash":"3e53ddfcd94d00ab9781ea81e3a16f921b0da5fcff42195dd1463d0ea5c762339823da","first_seen":"2026-02-12T22:33:02.024438Z","last_seen":"2026-03-28T22:12:53.806593Z","times_seen":129,"resource_available":false,"data":null}},"time_used":5221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":4745,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6%2BerTgWR1KqiMXl2NYU92PTqyu0gt1xqPVWWSSW1D62kPFTiSg9kQg4aZe0AO%2Bkwv47cKkNCFVShVWQ2pp46lZZS0Xu1cfNhUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4bc48ed8dee10ce47fea2c45887fece9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b0aea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-06-06T20:10:35.404391Z","times_seen":189973,"resource_available":true,"data":null}},"time_used":1437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1297,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-countdown.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLZCFdzAObb9hDLah9n%2FEdo3UKsnv6xmq8SfbIR%2FG%2FNF%2FFbyU%2FrrxkX7Y4PmqLGrLOlIDuNezR5CZBEl8iCa5YuUpBAnh2V00b0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d53b405d5a680247142f7da61cba9ed0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b4bea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10981,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"resource_available":true,"data":null}},"time_used":6159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6114,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T11:14:46.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NG6knkxBxF0p%2BH5Pzmsb8ZGb83D%2BRZLE6EYpStIV0W6qLptQ9UGcGMyEeUeRKEt0WnoxRr8DpTiuYS%2B6W3N8%2FSwMXYHhSAy0op8%3D\"}]}\r\netag: W/\"5f1942b0c9af6c816338e90f870031ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0509d8ed9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":171125,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9067)","md5":"3b23add313d490982d30e2d69b4bd99c","sha1":"972ac06a2fadc24e447795782f3783026e82ea36","sha256":"d2337a1d4416aeb59f6054c1f542cfc4a2e1b6a828c57abc1a4a9614cc022593","sha512":"a0c81b939760cff1509280941c2e28762a5c49b88745aa7f9fe512289158596456ccd4ce627d62bda722b33ed127b99605945fe902830f5609f08c0de1fd934f","ssdeep":"3072:wg2teChSJgyAX/ZvvBrcMl3MlsMlPYjRlBCVMlrMl8MldMl6Ml6MlKMl6Ml6Mlu9:wT1ZrcMl3MlsMlwjRQMlrMl8MldMl6Ms","tlshash":"20f3d632a859183b126716f4a035671eb2a7c717cb0789d8b3fcd3a89fc5de8492758c","first_seen":"2026-03-06T11:15:25.114566Z","last_seen":"2026-03-06T11:49:52.931304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":359,"dns":81,"connect":40,"send":0,"wait":159,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4q9seTIbW6uBwDltSzfCCmgcJriEigut%2FwlhdqX5dXLOn00dwQ%2FTOTmVdtonc4fL3S2QtO6OFik7S6mplp9Gl4gKfBuCWAqWEA%3D\"}]}\r\netag: W/\"4e454ac61e7cf64e0651f57e3e7a492c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b2ed9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"caf2bcc067214f053488ce0906bd11a5","sha1":"9c2023253751662efc2bd5f5b80ec333fe16d412","sha256":"44ce7be5b22ba80e67c3f7cc0c3682ba98f3aab5def5332bff9fef1d83bac579","sha512":"cb39a93d9f9006ece0dfe8be246af13356a80817275df7d2d2cc16b0e165da8e4bb25489654a412e5f586b8791651f8b1c115580b710d1066dc69210559841cd","ssdeep":"96:wZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnqbz0zO2brwa82M:w/JN5kB2sEBqA7SU0zbrDM","tlshash":"6991cb6e9655300aa037af84a7bf5a56ce700451ba0701bfb0ecf12183d57fa71b28dc","first_seen":"2023-04-07T23:48:35Z","last_seen":"2026-05-24T09:21:06.636308Z","times_seen":350,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.transform.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0eUmFCMSh1QiMDim2TgKZmjd%2FC7B%2FB4NpyoZxlnKkq1xm3QjkRkyfShMsgQgFFaIPlZy54RP2JxuZxIAlpf0zJ8EJOPWFLkhlz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"27da4d60461b3dadb7e90833c435ec9f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ad8ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-23T09:52:05.874686Z","times_seen":325,"resource_available":true,"data":null}},"time_used":5408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":4638,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7GuotXhofcLSpm3KsNN3CMUveqzk52tzE9Vlrkamb6d6yEDG2cAVVt4b%2FH0LyQYh0R%2FQEWScB2Hp8IMjIyDh%2BilZ1HEgFl2HvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"79517631503b0ef8e65478b9dd840aff\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532addea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10332,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10150)","md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-06-06T19:38:26.25454Z","times_seen":15458,"resource_available":true,"data":null}},"time_used":5509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":4739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcK1O4pNoDUp2faOZH72JXdwkPEJHpJ1oe3cXt%2F1x9wezOMbDpnNjCfqNczU2UxoqCqbeZfwE16EHt50Wm6CY0%2BZdelav2rbx%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e64f263cb15522fd1b4c9fdde09e7071\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b3aea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8853)","md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-06T19:07:16.837928Z","times_seen":7494,"resource_available":true,"data":null}},"time_used":5797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5756,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/ico_bg_image_21.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ico_bg_image_21.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73867\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"aea2458f6494423cf6cfeb15ba470484\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSr2s9pUg5JQ%2F4sLGR163tgT1SCpoUSBjQdV38U4DYpR2QoOgFduHWQN0gyP0dsZEukmS6GKElT3C0IDShGLD%2BY9FC6iB0Tb%2F5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0740cb5ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x942, components 3","md5":"458a0e14f470dadab5c34323e17c17cf","sha1":"2ebf6135d3b2557b40068fe7679b7a63a8ea0786","sha256":"e8c9be9e4900e6c017e17a426d7787d276594de17c45703d745a4848f740d05a","sha512":"ee4459dcf0366cba28f94e422df00576ffada051ab05b547387cd6127e90afa7fd86cc3d0f2f943c7e226512d96a7bd83d73658f77dbddb475dbb829a9c3c81a","ssdeep":"1536:NR6ylmQrNMaXX7z6/2je6bRyOOGOJKYfJSb9OkB8vZkv6D2duL9epfyE2vEjqijm:n6HmDy/2jeK3OGEE7qv26DzL9epfyFvh","tlshash":"0a7302cbb70d0daef9e49038ae4c1b4555bfacd245c0061d3c05d0adbe19397b96d1e9","first_seen":"2025-09-23T17:21:13.917053Z","last_seen":"2026-05-20T18:37:56.895538Z","times_seen":158,"resource_available":false,"data":null}},"time_used":3827,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3062,"receive":765,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-reset.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-reset.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb3KoK%2BIJ86BgG%2FpQ629rc%2BYHDg8ySsJ%2BGLa8pS5PjjIN2%2FYnt6ATd65g2RqJ%2FkVM6LOmT9E%2Bu43mX61EwobqnhW2Jd8%2FXLl77Y%3D\"}]}\r\netag: W/\"9ba70fe8b234178b5292238adb5852e2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052ea9dd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b3c589bc9c1635c3a6679dd054a4682","sha1":"6ad887b2f4dd83c695bc661ff1eded4131d3f632","sha256":"be4f6284aa304b9becf68fc6c817f9384ce831d9d14f708a1211c4e59c3056d7","sha512":"f7e4cf88a10192ded4d9289440acf82a17a2962b0370bc1fe6c33dce258a91d67258a06a149a2d641480e082a446b7845498c5b70147e4b5a1781ef168f258d3","ssdeep":"96:GTBNWefkzbdR+tIMfW/5cG1JqBdDEcPTDEXLgEH7:GTvW1d/MfkDuDVDkgEb","tlshash":"ee8101fd660012cc93229f58b7f2af645e1001718e1f817ef890adad92c69152af2776","first_seen":"2025-07-04T07:44:29.918936Z","last_seen":"2026-05-20T20:20:34.083179Z","times_seen":165,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BV6qQOPqxiZco4HxypJY1OH1yhrCn7ybVm8uH5F%2F1hb%2FKm90deGTzj4GvG6SpXs0LFAZrHHVA14qOHU6PXQ0RVwFvLHqEiuI0Dw%3D\"}]}\r\netag: W/\"1fb0a9d4670be1615dbe745bbd8356d7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b29d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"cf41d159bff445828e1ea9dba51915e2","sha1":"41b76a6e211ae7817be30d052e4a642d734e13a7","sha256":"9882a286ae102ec1c390fce55fb105dfa3adf34f60f4cb0d45bd347c2ff64363","sha512":"ca84ae65aff496de2763d3acadf15dd010f4a866485676a0398e1c0f7f558ba526b8cbd24c68703f2e5744706b9a0d440a3fffcbdb68b2f9a89606ef7de62407","ssdeep":"3072:vRuQvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gg:vRu3/+ch","tlshash":"aca430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2025-05-14T13:55:44.787961Z","last_seen":"2026-03-28T22:12:53.804761Z","times_seen":131,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEqrFYE6Mx7N1FrNH0BfZ5B4UgruTJg0gHZuGdUDsvtt1jvwqjxjbwB5KKxjlLZd%2BicNiyfX%2Fa%2BkIsbWB1N3idRwwlQ2hI2SzdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"39f692d72101e1415237e8dfd3ed3b1f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a6fea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124185,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42889)","md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-06T17:58:54.468662Z","times_seen":1177,"resource_available":true,"data":null}},"time_used":3714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":3520,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ocObGkmOpN6lEUf9wlnZQk7UMapZuMU9aKJnuTIDhRT%2Beo%2FAVKKdC8hgmJAdsLj81PhUEVLKhpz6vtOOfqEKwevenA%2FzQzXMFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"30f87566ccb3e69a02bf9cf540420649\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ac4ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-05-20T20:20:34.109568Z","times_seen":165,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:54.569Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T20:09:47.269697Z","times_seen":16189918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-grid.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-grid.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfaT4ztEbKlalo6EjDKYRy1kGUyJym%2B29LIn6pGtoeSuBy1lrEOOlq3IZD7bbkdiQ95uLhpTkOU3KBoTWlseslfan21ogcoGf0A%3D\"}]}\r\netag: W/\"72046f5e551dc64adcac3214a00d4516\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052ea9ed9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7936), with no line terminators","md5":"168190f59e5dc198a3b25a5f35301a90","sha1":"96d7e8ad2a8ff591c81fd3e32605e69cfd8a2df0","sha256":"908b6843c450e4c2502d33762bdf26ad300d1f7a2d69095bd499c6bef1ccdc36","sha512":"8fca70c579d9589c84626334f40280d05e7146e179146e2254b4c8ed55c993bd017e7c80e36cf0318258ac68554bc756a2ed862c02781714b6ab7e1afee8faf2","ssdeep":"96:18IvHGGEfETIDAR4yPzqJAj0dXEtEhQjI5/:18IvHGHKaC442JaaUShaq/","tlshash":"27f19fc49d316d67503ace2b7091bc4b50ab380b3bb2eebbf3f52d559caa9874851503","first_seen":"2026-02-12T22:33:01.87692Z","last_seen":"2026-03-28T22:12:53.833354Z","times_seen":67,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-header.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0L4e%2B6SXdOJ33C7D6ZlL92J88KzU6LdcSpwkEDUOfwn1uGCv2uPoGSeKPxcymdITjU9k8pRpem7rHJsvi8fRIkAm6mDoG%2B1AJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"52de50606a53c3a461fbdbcbeca5039a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532acfea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-05-20T20:20:34.092281Z","times_seen":163,"resource_available":true,"data":null}},"time_used":5336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":4686,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/03/ico_bg_image_14.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_14.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20399\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fd250b6602004aeaab2b9e0772274e08\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2Bk%2BHZoARPRLMTlD0lVjfsH%2FkkMa9%2Bb81KO26wM8NJxA4IBjp5ZYC%2BvMEBBJkuIjKBu%2FBx6TDVhcjW%2FoFoKWrd4eMIhk0y56nWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0740cc2ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x577, components 3","md5":"4ebb60c90b921e74f1ccc5cf12f8fa0e","sha1":"0ee975023d22ca00478be58824bec08e6caafe71","sha256":"50323967d41b7789c88c0322c8636bc7106294b15f0df21f31b22f9ea8832db3","sha512":"ede18a7b347596aca735e06be50894db65391196d61a0aaf809eb9e52d061c46f9763425867e6ea53957e1549ae9443b9c5712e1e55d49103d725a2173fd27af","ssdeep":"384:2Zkv8K4B85oTDhVvf/sHborXK81QpvntlDpcAxvF3sQl4NeKRw:2Zkv8xB8GJVn/sboDK81w1tXxN3sI4Ns","tlshash":"57926c120715871bd88da3b22c874260be659d4df525400bf2a720b5af9d3fefc2d1d6","first_seen":"2025-09-23T17:21:13.950169Z","last_seen":"2026-05-20T18:37:56.926755Z","times_seen":158,"resource_available":false,"data":null}},"time_used":4105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3737,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption-child/style.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption-child/style.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkoYSeh8Ra32vHYzirE8CIsd5GEHCu%2BGUIyOi9qOs%2FBblkl%2BMwXDrJlsHlh2GS0X5lFGHJ9Vwsm89xjfkpyJ3d3zua3IVK0TL1Q%3D\"}]}\r\netag: W/\"8d8b93d25190f26fc87657489a6da7b6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052eaa4d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"34387ecab3438430e1db1ddabb819392","sha1":"2399057aed36574d63c95999ca748524b46feccd","sha256":"4246028fcbae512ffb144dc94ecd5d1be28f406833fa3c950a603e6f00f0a2bf","sha512":"eb9367ec5a2261705ab1ca084205438f784849fcc90f5e22c76ccaafde4c9f53c820ab0356c26809bd4007e3dc06d410cb46b9bf059662d7faaff791721d2d1b","ssdeep":"96:nbhhUXNaSCMhZCfKgX+7C1V+ZUXNXw/qoaG6cRxR/CzwQnxTJZxRsp0xy63zCx3u:RMh8zXLr+CUq/l4S26exe","tlshash":"afa186d6b6b0920078e25a647a63fb467738d417c30adfb8bad0201c9fc53c69662b5d","first_seen":"2025-11-15T16:36:12.602426Z","last_seen":"2026-03-28T22:12:53.822827Z","times_seen":85,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iK79DFI%2FINN0AubQataG6SblDDhYyj71oRoE2hJA2YWNl8VAEnMVx1zLZjRO2O7AX5yIlDSUccDIWjQnGtMPHmayIZHKn1yK1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eeb30d84fa04c63738963d0e6f6e6afd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533af8ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.131354Z","times_seen":183,"resource_available":true,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KORR9v8DIa1wfAxJuGH1vZ2pVlTvX7F10Ba0N9gzkJGoGM%2B2Ob2DOcHInC0%2BkW5zZ31eak5%2FcR1n9N44csE3lU%2BhRjLGY%2BvG1zk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f2641dcf293ec6a0a4f6ff15263faa3c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b36ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-06-03T19:33:53.073378Z","times_seen":537,"resource_available":true,"data":null}},"time_used":5760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5759,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpSGDRjFaYSEeSYwLKh7jk5jtms40WyEZ6DRemNfKsZJ2opx1p2Nif26NQuggSic%2B8lIqU5s4AX5RbgmEVeitHM0hKerDR%2BOcVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c6e781052ccd1115bb92b4ab5bf5fead\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b38ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3973)","md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-05-20T20:20:34.125414Z","times_seen":203,"resource_available":true,"data":null}},"time_used":5839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2I8HPwnZZn8Js7%2BXDVpmQfhqVvTuMjUYsOBfJvMazeolO7WpLLZNNd3eYHlO2Sbz28LBU6moIBLgzvEId9o57pVCAQd2hvc1I4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7374dab1c11c8677e51608d2aa57adbf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0764a5cea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21879,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21879), with no line terminators","md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-06-06T20:02:23.725344Z","times_seen":1269,"resource_available":true,"data":null}},"time_used":1794,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1628,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/style.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/style.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViznCZmPHwb5n76qGOYQE2sCEA1yq1VTULWI50wiyStDCabHAv69XXa9czUf3sVyP2ll2feWlXxOXUaY9xbJUH28IfgDFbNqh%2BM%3D\"}]}\r\netag: W/\"82beb6503ffb5838af009b9f8457fd53\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052eaa0d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33549), with CRLF line terminators","md5":"153bed32355b0ccdb158e75fc7e8be75","sha1":"95dc8d7b3b9e6fc5069ec2b3c14d746b1c91e6e1","sha256":"9bbc5f00a2812065135f6e4593f4bf5b756a35339af4fe0031b2165fc3d1ffb3","sha512":"a6d66bc492b69e7d1a06989d1cba7fc47c8a49cbf2dd11be27e1d0d9d4dc0b43c5cf167a8b1d3ef962f7b9a689811ef5600bf97660dd467efa2f1ef1e8640250","ssdeep":"3072:Nd8rcHtmSVN5AWk/YK78eYRwfwOSqxfr9h961RR1Ro:N6Q5AW5qfwOS4","tlshash":"dd64b7a9aa0106465333df34e3d5b775ee2a21b3cb0704e9f694d5158fba94c027aecc","first_seen":"2026-02-12T22:33:01.92884Z","last_seen":"2026-03-28T22:12:53.829885Z","times_seen":129,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-new-css.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-new-css.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zK6M5GaFBwcEjUGKccXvOiHyV8lMPwgb%2F0pVfFLDnsDRfK7tZQhWyhLNq1Y0tDIVrwh0AZL6FWUOujSudBgSAK7XJyG9iyY%2BDOA%3D\"}]}\r\netag: W/\"29d06b32ebdf97dcf0c2992cada10cfa\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052faafd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69882,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"dadbc97d3c0617e2cbb8add82c0f680b","sha1":"baba0a88021211f22fcb1617d56383fba37d1964","sha256":"c316311eb254253a29c702891c6e1510b227e90e59352801d2bdf17c513098fb","sha512":"9ed1aa19bc8202aa50a782a2fec8abf104076b6768a3f56ce0691eb1041665efa3fd7cfd63c4fa1665bf45dbe055c2b66fee2fcbbbf5d79fb55555b0f9f47035","ssdeep":"192:4cc8lnMjYLbuPbo5YcNIiTgapyosoW7DiOCcOhpAr02Thh01bCOgbgdKzVAE7UHT:znf8dwT0C5zv82qGs2h1IeVc0y90N+k","tlshash":"b76335da4a42082e1237e52563dd1b71df576663df120124fa98a2328fbfd5d01abf8c","first_seen":"2025-09-23T17:21:13.93982Z","last_seen":"2026-05-20T20:20:34.059581Z","times_seen":163,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihJ%2Fd5YPTH3sHZQpwrTkmxC1vcovLiSqyZd3l1HL6bjd%2FeBvlA3r41clRjXZptc3TcLC6kN8aGK45GZOcV%2B94vGYPPotCRIaJDw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e5c5908b43f078e0a79914d0713e0ed8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a7cea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51719)","md5":"8b6dae7f49f2b5fd72f43c405d4417b9","sha1":"a10ac4645869698687a5e08cd77e3d98232ca3d0","sha256":"1c3fbf3f4938451bc3b7781f832b7da84c23eec5b979ac7541ec754e67e3b6d2","sha512":"7a49d6ffcc94fbacdab8ac8da27cd5f211122974c49eb652172674bd27c625037869831a9639eddc7d5d65b9d5d81d3c00fb4948afe45b146b3cb5b7814818fb","ssdeep":"768:/kZlIbIM6YIMIgIzwO1CA5kiDb3CyQ5xrQe/0STbsysb:/kZiIzwO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"393305af4891229991664b62c3dc5e68872dc67714621cde33817c8b8f87f9f33da607","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-06-06T19:07:16.784794Z","times_seen":3956,"resource_available":false,"data":null}},"time_used":5183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":4832,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/team.svg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/team.svg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxKLSSCZv5zYn3VONSJLxyKszI5F8PcIG3XZ%2Fa%2Bsnv%2Fiyjp1Fuegz2flalBmknYqtpsQyfxOiYVKQCJS8LKv210iNHEiAPKqToU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"00d4717a3cc77989336f4ce63895afb3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531a9eea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c7156d81ed785d5baf27783fd8f1d8","sha1":"021643b5ef3b3af8dad778f247e0cbdb4c24a601","sha256":"497b759dadbdb054e60e5773b8e3e9fb0ace4b6b7f63dc82077db74f8fecb3ce","sha512":"80e4945d82045102cd2b2174bc3b72b4f1b9bd099fe327183cd9bb2f249b206143de155f3816ca8e9efd262da65fb2a4332b79f656a4bcb79d1694d96ba920c2","ssdeep":"","tlshash":"3e7165e9cb3d26bc94d89b1ec2aa2e0131a3180d75e34b5c738b95015e22f599f94cf5","first_seen":"2026-01-04T15:46:29.959104Z","last_seen":"2026-03-28T22:12:53.873568Z","times_seen":82,"resource_available":false,"data":null}},"time_used":8122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/kucoin-2025-Q4-2.png","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kucoin-2025-Q4-2.png HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 7484\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c089b4d143c2391401cdb8532e4f83ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIDmwQUzdrg%2F10bn5FIpWKQyEDrofnfinxeS%2FKHpo%2BBt4J%2FkCiMS4KW9YNUDGqHOett%2B0ExU79Jn%2Fz2Y3gk%2F3IQzdYRHNldP2Ak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0531aacea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7484,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"e93fba2f43b63439abbe378ad6b64ab7","sha1":"8901cb6f1ced293d46e0774388827b95822efcbd","sha256":"1cc24626bc274ad9c32071c9e898834f095a867f50d9a312318bc194a1674419","sha512":"28b5ec8239c4b4fd8d806309aac5db9d0a43eb956823815ae4e22ec9f5276738b8f5dabf248caf96c8f0b4d8f381954041d6f92be5f20913940692325c7adf84","ssdeep":"96:SSiW3xwm8zbOrP6J3WxJFXVo0pOnroGzdTMPpI66nrTbCrHNgMJ/WV6AyM+FwlGd:SSRt6gbu00ropPpIlvb8hxWV6TYTyN","tlshash":"f5f19e14e7c2d170429944c280289d4269beadeeeeea79a89c85fc7a357c42310fcf5d","first_seen":"2026-01-04T15:46:29.969202Z","last_seen":"2026-03-24T00:47:18.223098Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8244,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewmi4KFTAXU11oqo3SjTI%2B%2BBiQ9RhlieaPDTVE2id6MkA5oTWor4cM2Rbz2FkTjwH4RdcShz3XbrlR4bTvXxs3MvAjdaaONwWFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f638c92128f53339375cecd50f912848\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b06ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-06-06T20:10:35.374837Z","times_seen":192805,"resource_available":true,"data":null}},"time_used":5602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1298,"receive":4304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/3-1.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/3-1.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56101\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d8b28ac3351a86181bcca1cf760181c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzZxNbeqUEUeAMqPV9OyEiPRYajfBJL71o0qLqPxuDyhc5n%2BxxRzGBkEYaCm7tNLC7weYB63fdTAArkLbaA9VWig8K3bLVuo%2FFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074be78ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x599, components 3","md5":"4cd8932bebc3794f5db9282819d80eb2","sha1":"5d86bf9d7def61f522eb9b33ee9c9d062dbc85b8","sha256":"ff979850a3dd684c7daaa053d592c5424791cdbf6b162fdbb82dc7de7b0112c9","sha512":"3235bc41a8d8e397ddacc1b2139eab1ccea4033517bb4a94fd9d7ba123037ff3075c63111cac54b5015fe33521fb78556e1f3805ab077cced64ba036b28d5b95","ssdeep":"1536:GIZMf0uMmSpsBZBbzSZen2tfc3fpqd/oQ/8l:BZd36Z9SptfGSA","tlshash":"4e43f22157a01250e07dc3f74b854a20da9f7f566bc84c9a773ded3f312db2028ab59a","first_seen":"2025-09-23T17:21:13.814692Z","last_seen":"2026-05-20T18:37:56.907428Z","times_seen":158,"resource_available":false,"data":null}},"time_used":5122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3996,"receive":1126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-widgets.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-widgets.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILnNvxCYJ2qOQzjDKIL6Qcqvyez94glcD3XVXiVA1cC9RHVnteARB4NeRyMTSc8Z5L7Cbb9Z%2FEr0e1T0ANn00zLfPvU66nm%2FFjM%3D\"}]}\r\netag: W/\"f361f2771c365227203228e219939483\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052faacd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93bdaf73f3fc24703ae635e8a95d20b1","sha1":"f8ece8ea1556a3b467adeede8cba565448f20d8b","sha256":"d36e14f8e75d0bf691403c0d5b463aa7d292697f7e46f7cae9709b877a777a24","sha512":"df032802f6961ae979500263eb8d33f74a5eab81170db6363f899b60b7db3759082cd8091bc8ea73981c97a21b0171b50de881491e312cc8861b6f22d1ba7f0f","ssdeep":"768:NjO/RpmKWcIo9x0nk6kAkikmJnk4jdO5B2lcemJFSmAe68:QHxok","tlshash":"488353aeda1915467237991967aa7ea1ef9810d7ce03096cbed073014f7a4cc0a73ecc","first_seen":"2025-09-23T17:21:13.851769Z","last_seen":"2026-05-20T20:20:34.062267Z","times_seen":163,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-hovers.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-hovers.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfNa5L0vWmLny8ZhuaSYwNuqtMX4nKgSxmdoNb6M7dEvLmba%2FQB3HBLYlPjSrVY%2FhTFly89jadY6rsp5pvZEMyGZAiK8XFF0HxA%3D\"}]}\r\netag: W/\"3f4b51fe0717dba73b0d67f78cd014ae\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b2cd9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56766), with no line terminators","md5":"d6b65c516c44b45530569efcfd592771","sha1":"9d5f19b0395585f4b1511dea46a78541ef4628c8","sha256":"1ee1186a1b8ce215132c03d212d96c144bb904c6073300dcf2719f0d00061520","sha512":"0afb2e45dee060247747724c66b8e44ee1a519ece0baf1f0eec28c14a9e529d02fc3fc78bf6815c14332b20c833cd738d959d2aade23886a9a4a91e204a20933","ssdeep":"384:MpB8wKwAQxcKcpBxxsYTZpWzyjm4DI6f9vC65DrIELtzASUoSgQJOQUVjCdiiPZz:vRxzHyBIEeN9XhzNKlJj5Q9FM","tlshash":"f843ed3e13081e54d3a75b48a1cfa1749f6da270fea262eb792f8b4b8316b151133747","first_seen":"2026-02-12T22:33:01.882657Z","last_seen":"2026-03-28T22:12:53.893967Z","times_seen":67,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVS%2Fy1%2FwgGAZMGdJh6Yc5n0cCvFOQJASGX1YTTkN1lne5Yq31fGGfFK31SLJrtailJ5VU4Bhq33wxmeHswohUBmyelSdUHPpvEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cad58eeab719873eb92491af380add86\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a5aea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60333,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"61e8215810a2bb1b3508e130c80fda90","sha1":"caf7d572582d14abdaf4410762ca7115c2375de7","sha256":"982c1f335963f2284703682fb6251346477f078bd1f8ea9c53449b7a5c9bd576","sha512":"1368b4707be9c3732ad129116ef7a6c7c6028bdad2c2b6a29488e252e0d4ee73aeb9053167b46ba37045a042ee9d29dab9ed8d0c7ed7ec487d90a44e61505b53","ssdeep":"1536:26hMbEX0uzVQw/kubIukhqQ9HmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:nb/kubCs","tlshash":"ae43c67198921da82327ca81e7ec0bd49e25cd329e030cadf597321dc39e599467e7ce","first_seen":"2026-02-12T22:33:01.919088Z","last_seen":"2026-03-28T22:12:53.898134Z","times_seen":129,"resource_available":false,"data":null}},"time_used":1851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1775,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/TweenLite.min.js HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2CTgi%2FZVOj0ANzl%2FL4ouKAio4f05%2FSYaLDy4ut4kzSng8u4gl3R7ZIQGQHKo%2F%2FSodPdgkKuMGQSTPhxPX%2BnjDFTfqUZIu2Z3Gs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"70b91d90a210188676c474bc53124a74\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531aa1ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26755)","md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-05-24T02:26:56.925152Z","times_seen":266,"resource_available":true,"data":null}},"time_used":5259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":4746,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/isotope.min.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sp6cWLg1Br4Y6FF%2BMvFfevqrISLNlgkMQVQ7JXlu6yV6REGMwg8dPPA6UbXstu0wySvKUaOT4YgbXBW9uWwj8IWJ7MvX86Q29Wk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"461b1baf42bb1afc09137ce0d2009a1e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0536bacea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32031), with CRLF line terminators","md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-06-05T00:29:26.038004Z","times_seen":991,"resource_available":true,"data":null}},"time_used":7085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6801,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-header.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-header.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQYe88W5rKL%2FKq30KmekWjp1VjnHd0C1pAeKPUdl%2Bpm8vJf9LQDz%2F8BUFXEk80KXagncsQOEiQAQMJJPNisx4Ne%2Bx%2BsDPgjBATQ%3D\"}]}\r\netag: W/\"fc42a5675691a5482f3917c5c2f99618\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f052faa8d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15754), with no line terminators","md5":"9d4c249bb440a36ffd7972d7d50f1b56","sha1":"3a8d4669542b2ca7e19b81adb55c166e09fcb868","sha256":"da7e1429591722fdb005526646f57d89c3252c36fda3e7eadb4c969cdd886ff1","sha512":"16d4d8d0d9f0324ed42d1a5e20cae950b48d7f8d3c4de8109e15a4f26bbfb7e859eae13eccb0ed76d09100197826b84ffad5355db5c783c4ee0b388932e60ef6","ssdeep":"192:7vzxx5bvsvsv7/VnT9AVvRvIi7vRmv5LvaA5EgJtaFEN8uuoFmEtRKpeX92EGA6i:pjSStT8N1O515cESFoFmkuEGA6Lvpo","tlshash":"e662851aa9d83a3813375925e2d079b463394104fb726951b3f6673fc68de8902b3bcd","first_seen":"2026-02-12T22:33:01.891245Z","last_seen":"2026-03-28T22:12:53.908445Z","times_seen":67,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqtUlpkdCQD5DmSnvaa%2BxyO%2BC7nW%2FGXa5yiWZe7n7nC20XL7aOrh%2F3mb6hee3MRo5lSuZHOt4Gf6e6BL9tyjF%2FbVePuyjYgTCUQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4520a6581629ccbcedea6b3af6cd7d4e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a72ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64270)","md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-06-06T17:58:54.429389Z","times_seen":580,"resource_available":true,"data":null}},"time_used":4481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":4265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BJ5rtWQ6CUQ04Yy90We4VhWxwyzMx3dTU5pZk94pVejttY5rcYf%2B5PfUgnbIZR6%2BpRjGSx%2BHagwdAYhr3Xmjieau%2F3hGneGGGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"881e1061bf4278c6903b9246f18cb765\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ad6ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/functions.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hv0P%2FUtzhhp%2B%2FR7TN3PvwV5TgzPXwPqIMY8PS0DNZSuYcVQNp%2BwEB40fLg5VR4YjumP9JoWMArT8UFoa1JPk4elcgHVjzean4iU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f48287d7fc6827d01cc1597e56a14d91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532aeaea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"resource_available":true,"data":null}},"time_used":5566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1181,"receive":4385,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bRUR0MxAaqS1sZnaLu6vCdSMNE3mYz9YXLgFeQoCv0dto%2Bgn8B3g2toMshlqPSCaUNm1Bv7xGV0dw0SkVQz%2BdXyJkVEM3BuQD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f29ba9aeb436bc61f4a58384b6333c73\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b0fea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7210), with no line terminators","md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-06-06T16:21:36.889442Z","times_seen":518,"resource_available":true,"data":null}},"time_used":5600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1437,"receive":4163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cawa6fDPI1rZYsKEtTx4PuqbbbdjKOI4f21%2ByMBgBjZywffkabS4PxuaAugBO0VVFOotM3naPBAtkUZrAsiLTM0VXfhLUHoAWKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9e0aeea0db4d034e07eb911c1f4be07f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0536b94ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-01T15:13:50.708692Z","times_seen":483,"resource_available":true,"data":null}},"time_used":6928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6566,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1337\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a261d2ad87b35aa15cf76f8876d22285\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YyPtMC6AAZoQHMoZPj5dgkLCU62mzFWjlx%2F%2FjXVzPkZj1gp9olOGyVPZ%2BY2VxOL6N4cRgjQUMwmnNDz5F4L06r5v8tn07ssG7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d80f052fab4d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"d2a67530d371b67731a651279001414a","sha1":"49cc9a0232e6d46376b6e8356654e95d770cb918","sha256":"5bba85f7dbb5e6820ce1a880862269b76ee093208a0fd29a943b26b00707631f","sha512":"1c4103541f3131f2362979ed50c22cc8b3239935d3bb06dd99bce487344706c82b2c327b2a48f524740673147c9495e219e32d1798ba8d6d62bfd9825e574314","ssdeep":"","tlshash":"a8210500200aa631e6101d5d33cf7f298d9e386621a6c06d6b754c38afe682a4362fbd","first_seen":"2026-02-12T22:33:01.960642Z","last_seen":"2026-03-28T22:12:53.918454Z","times_seen":129,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/custom.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/custom.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjk%2BzS11hggB8WRMGf7Mo7skd1lt71ifiHRGDntBUwgsOzsAFhdSSskS1M%2B2VO2rHp0IVAiVePucLnOgYfW9daeVADOgwswx6Z0%3D\"}]}\r\netag: W/\"022307951df197df4b2a9326aeed2e4a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b28d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8115d79b41d838bded6d1a1126ed51e1","sha1":"ec06add4a5a3c847716a5e33c8529f9980361fd1","sha256":"57296865cacf7ed59a8a50c6b9580f3db6c6cf2e548b6765afb7bc7780176a01","sha512":"85c3ae3e42080450fdd6fb1248f71581d8ed7007f6a8375d59ceb889bc01d855d3ce40ab0cec5df9aa27cd0ebdc563b6bbb9ad53ecc47c00fb1fc8091a21b476","ssdeep":"1536:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvLuZNLCDVVx3AVaV5MGAXrWZfY72In9bgF:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvH","tlshash":"e293411b96152daa2e77532d998e7880ef127373c381d42bbaf1c2154f7884897b2f4d","first_seen":"2025-09-23T17:21:13.94536Z","last_seen":"2026-05-20T20:20:34.068058Z","times_seen":158,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbooKGC67yD3owex9CJthA3Oc2oAVA14JoBij1Cdqlbtl%2F6%2FSP0WAVFtYHyIm4sRsh%2FHz2pW2V6yu0d2rnjSE7DqTCraD7rDg1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"16bfd548c070201d2c03eec37e8285c4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a5eea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-05-20T20:20:34.047601Z","times_seen":165,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/white-paper.svg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/white-paper.svg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjwWsw%2B145aH8C58451BFSFQYPDX8I0d3iypOBHIU91K6j%2BlV7O8OUb8kOHguu1pCspbrj1AaK%2FOvYyWrw01b7X7dLRYUZG8KSs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0d8fecfb746888dc22b3443575ee440f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531a94ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5759,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ac7604fb6549093533bc763e9a91ab8","sha1":"4fa2ee7e08df271a5fdc392d073bf90168ba40f3","sha256":"aa5961e259f40a4a90d1f7e049520e0719df41f700db6bffa796291556407d78","sha512":"d51673fe512dc47e48622817d5963f39a0356532ec30b34d2b11b684840542a246782aac20f9ca99ecb5a7ece4af631621901b87df4036f99fc17f56dc69fecb","ssdeep":"96:7tz1nnHzOzr2tjzDDaNGVzdVOpDeLdfSuOPQy3jd60T4:Jpyz8n8GDVT5SJlQM4","tlshash":"dbc1445e073d86d4ec6c63ac69b635cb737879acb472e294e38b6c0528017fc19609b1","first_seen":"2026-01-04T15:46:29.871275Z","last_seen":"2026-05-18T02:52:55.694149Z","times_seen":103,"resource_available":false,"data":null}},"time_used":7854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dlupQDmX84jq0FmfjF4kq9jEyEi3Q0jrDV4fF2kaDux%2F%2FkkxBDo5Y1dGmFVvz01m7WT01%2FawKqdJarnSAkxsMLWFbaBcGS4EKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"22052df4b2ff22faa67cc0a50c1bde4a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531ab5ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9087,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-20T20:20:34.114322Z","times_seen":182,"resource_available":true,"data":null}},"time_used":5294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":4681,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qz4ggqVaahZX%2Fge9iE3qCrJgEdDnbSpT9NhGYG5Y6%2FT8n%2BjmmOGd4XvNolD4UnaIUiI6l0QIxQtYoD4Jd%2BpEdrTmhz14XEwOqfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"be6ac329611b1c1d9a09a9ade4faa547\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531abaea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-05-20T20:20:34.104456Z","times_seen":165,"resource_available":true,"data":null}},"time_used":5293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":4681,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SXPkmlUrOVEcTwNgsoCy3oHKcLi%2FewztXwmD9usAJiak1jKZ%2FiERw5mOPHXhIa8lpgB98oMU0cG8NTHU2wXsCU%2FWhtqtKYE8lM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dfa2e3ed71f6e6d6ecbc1502f9b545c2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532adfea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-06-06T02:38:48.7552Z","times_seen":3229,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/odometer.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mu8YFc%2F70HxAj%2BHsPR%2FLlTm8M8JmVjvvyzdVm47xxYXk4jn5G%2Fq0dvejYsmdjnFaoRxWD86hy%2FKllQ3AERbLeSapJYwxLjos9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f4d935b2b3712b8e2d6b58ff00f55579\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ae2ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (447), with CRLF line terminators","md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-05-23T09:52:05.680249Z","times_seen":300,"resource_available":true,"data":null}},"time_used":5405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":4595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLyV%2BJ5lyb3OfHZ4Dv0mjI7NOteVeIiHN5bH7p7wTYVXh3pjrsh0i%2FGF982cV3tSBhP9g9Ozoj%2Fp4T6m%2F690UPTmm8ZynYytW3I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a3760a7da16ce062c8ac1bc82b414f76\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a56ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-06-06T19:45:15.692137Z","times_seen":81529,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-sticky.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JI8XaPw80Jj8FhrNQZ3U1OS1mvDnhvTbPLGk3hBE2qSuwONX%2FRvCTK5IEKlzw6abRwkOOXPki%2BLFAwlv7VOk1dURw%2FCDa%2BMIQWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"565a746834b1ca308b431b4904806efe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ae7ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-05-20T20:20:34.157199Z","times_seen":165,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDd0pegeybGlLOh8%2BVProa%2BG85AhaDpBMRxh1gMQSjvv%2FwuDb9904f0blZX9lt2mWOzCRlYpk34FjQhN3sSRpOjzZiRhQaC3IwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2e4facc1c8628fb931d4fa443776aae8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b2cea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20418)","md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-06-06T18:21:02.813237Z","times_seen":2604,"resource_available":true,"data":null}},"time_used":5720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5639,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/diagram_line.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqWADY4MUQgCfRFrfLCFu0OhyrojQ4SA1l0p4tG77UYLrFVcso5nOtqSgU2sq69RK3Z%2F4xFmf2epeocrNqc3a82I3tXbOQ0v5gU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c294c0fd7455462e693acc048178360c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b5aea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-05-20T20:20:34.098334Z","times_seen":160,"resource_available":true,"data":null}},"time_used":6193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHl4596q%2FwrN6rKkNHBRVLVIGRmxCG1KrQKXZ1XHRjGQwzgxqSx8npj%2B7H3%2By%2FBy21kIAlNlxLpDLmV15UhSVooUzaZS%2FpAqUc8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"600100670132086efbd5f75abf87477d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0535b85ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-05-20T20:20:34.098986Z","times_seen":160,"resource_available":true,"data":null}},"time_used":6489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPc4ODD5Yt5kJ86%2FMcVLWxjwCH42IlUSiWE1rbiYmjdgiSniOob1m25BdvKm9q3plZ6j2T429Or7%2Bj3Nur9gQ9l0okY0pr8xqMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"45a3838ca8c1e318ef55c67b16534155\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0536ba6ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-05-20T20:20:34.185795Z","times_seen":160,"resource_available":true,"data":null}},"time_used":6923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/03/ico_bg_image_15.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_15.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31371\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a96f4cba7fc0940c15591b63de6b0462\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIwZ59yixaFq%2F0KWqSvlE6CvyQYHEgJIhcHooPSuwXs9z%2BscJZho8Uxi9%2BcNM0TZtfUloOZYYeFgm4zKSy%2BXAdcnAeQ%2BPvTUNLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074cec2ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x999, components 3","md5":"786b62a430113bce0d29bffdc7b74c11","sha1":"5d788d55b79fc7732739decc608d5fd595930132","sha256":"6738f45cc12be7faf1a7072db6140caf8cf9e55ca4f59f9fffcf9d802eddb5f2","sha512":"ecb33c182acfc6c4788a528e0f367c38e31524861f13e13bba7dffd38b109e84863c8f1a2ed9f3fff29eb6801614f4785fa2e666c376114a2419e66a7fd7f5d7","ssdeep":"768:pcHpb7mDKuJDEOp7h62aAg4B+S/mpXljR/:ypbKuuD1pdng4A","tlshash":"84e2be3ef20cd486e46b46fb6892b3696d36bdd2740d1b24e50380df2782b3849345eb","first_seen":"2025-09-23T17:21:13.818499Z","last_seen":"2026-05-20T18:37:56.924146Z","times_seen":154,"resource_available":false,"data":null}},"time_used":12685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12258,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E19Gmas4%2BulrJW8lnXyqyKDbFv2DyX7FdAy5pQRJrMWG5%2BtbV11r6L%2BG80TRdIpe117WOWlwTjg9vO7DDqtgKi7BjaH95janf1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4246d10d2b2916f8ac319ae99cdea463\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a77ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-06-06T10:06:50.120529Z","times_seen":556,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/output-onlinepngtools-7-1.png","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/output-onlinepngtools-7-1.png HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16568\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d7ee33855399861361647472cd7d6f73\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnoCxU15r20kiVNwGQ7tS3uF3wDE8ENDKi2oMkhe16WSm%2BZudRpNg%2Fjv4ZRbTtN8j5lsDoYCmEBkKjiYiy6zsd0ucpFRSCL17aU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0531a8dea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"6a4679f100b4835f8d5a52a8f6158e23","sha1":"7efb276e04e87061b6c8dccdc1c116e8115cb1ff","sha256":"290b2d99c1081d1f49f1cdf87e0f8aa2cc6e9e20da90a3efd2f8317ee35ca978","sha512":"7dbe0f74e75411d31b260efce89aa3046d45306ccc00b1207d3cba06132a8a5693838fa1dfc647b68be7f1fbc7d597f321119f9026a7f6e4fc54675a3e6c8b58","ssdeep":"384:UQWoM9TTEj8WsH/EtQdAnZQ6MR+m3/sUhLyS1t0p:U9P9TTEjRs83nZY+m3kaLF1Sp","tlshash":"fd72df12c1af438bf50656da0b62e0a54558460f9924a9cffc3d2cfd787afb1a1b0297","first_seen":"2026-02-27T10:11:50.334054Z","last_seen":"2026-04-04T06:20:13.438511Z","times_seen":16,"resource_available":false,"data":null}},"time_used":7855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7384,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2022/03/binance.png","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/binance.png HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5113\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a92b8b5b7bf4b52ce954d7b308c36380\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COS%2FKP9Ob%2BALmtz7GJfKwIW8cIdr8TZb63NgTY71mkqNagvWqHJQ0%2FjZzfCY4kUlsoyCGySb2Qs5SkLlzUUCXBX2kK%2BZvbbNwbU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0531aa9ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"9d999e5d22850968f7dd2d0841627bcb","sha1":"949a9ddbbc2832957739c78cac64fe3a74f12aa2","sha256":"89816f3f685191889ad1452c6f00a1a009eb37d11f4947478b4eeca0cfaa1da4","sha512":"b7e0a01c047c1bf2a7e212fe0e2ce79eac1cd089ea778551b3fcfdc8fe9925a7b704990a967c07bfec1d6d7c3a1d7cc685cd9d0961f18d146e48f2ba23cb4e8d","ssdeep":"96:SSPZU/7ZxI/GhTn1roDcq4Hn/4h+5F2aRnbYitmn7aQQbcSKyFL5X9J:SSxu2GroAq4H4+FRbYZGVYS3Fpz","tlshash":"eab17d7debd825929dc72a7744f8255c0b344d9b349251888a98360c2d7be380b80f9f","first_seen":"2025-09-23T17:21:13.859538Z","last_seen":"2026-03-28T22:12:53.807504Z","times_seen":145,"resource_available":false,"data":null}},"time_used":8244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8119,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVUXXvjNYAJOPNYkcGOyIIMKVU%2FKc7IRwFjfipureIM%2FNu%2FP2WNiJ%2FfmTj3%2FTP%2BxHMrpieS%2BhOBTIU5XxkxrMm7W3VDm85kS8c4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"74ff329c6708e45f5739f227244115fe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532af1ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators","md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-06-04T14:53:01.895259Z","times_seen":447,"resource_available":true,"data":null}},"time_used":5604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1300,"receive":4304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJVq9Tjl7Pw7ea2xJgqrriMtln0VLIqDtpI5RyrvOli4wVtGBoGr5BiH%2F6AMzjQDSYomJ9Bz6BivhOmtfsm%2BD0uETsSFQ3Lo5mQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a80a2016329da01cb5c848113ed35222\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0533b16ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-06-06T18:54:07.619894Z","times_seen":16319,"resource_available":true,"data":null}},"time_used":5599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1436,"receive":4163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vre05%2Fg1kqx8qrWStY6IyaMBMBEBCmz4YbIySv9S6TuV4QWkwoAV%2BdB9qVmXiZfRPM1YLON%2Fk7XxJIwhZIrTCp9btw0GN%2FCuu7U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2bcf1d999450929ac2c0b89c928326ef\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0535b78ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-05-20T18:37:56.939194Z","times_seen":158,"resource_available":true,"data":null}},"time_used":6494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6194,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/1-4.png","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1-4.png HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 47841\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b4a68c70c432eb9c8dd9ce7a09c479fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1os5fAILJHfVdxF6UirE5R7NcuE5rKnhEMSuBD2%2FxllLF4qjWEZczfe5e68iL6hZ9QD5717Ha4iAqd0Qi9ViV2QdKFd3TC%2B5AmM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074be8aea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 584 x 532, 8-bit/color RGBA, non-interlaced","md5":"3e770683cfdf6b856c6101560d065757","sha1":"87a8eb2a5c9e54841dc04280afa807fc033397da","sha256":"25cdeed5590c5ccca1e9302bf849a1a56dbb6635e0d2dfc9a0cadc9d3e510b37","sha512":"1f997a496650e4767d09ebfd6a6983558973d7b0aad5e3ce77d48ccfe8c1a017c11202338ebc5c11523a201068ec0d4c0ba85480533065921fa0c43a047d34c4","ssdeep":"768:sKR6uVo3tys0aTrIkJDxlM4bfit0g99KP0n0AsWju/5B/BvqTUyTm+e+fT/8:sBuVodlD02DbLLmEotHa/5eTlTmjg/8","tlshash":"8723f257e2fc9d8c2ad51383204678a2b6ff75f94d8081504ae2f1b37bd69213a16e35","first_seen":"2025-09-23T17:21:13.834634Z","last_seen":"2026-05-20T18:37:56.882693Z","times_seen":158,"resource_available":false,"data":null}},"time_used":5725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5118,"receive":607,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/exchange.svg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/exchange.svg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBe7uGi%2FaCZXXjaxv8N6%2BpAjZmUzj47zrw0Qtbae9%2BNZkmME7Dmkp5CGpe009xfbopMrwuq61eK3D6q3iTNfkUhyu6FWJp8FvPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa0da66c1310d1f43e7d90a7d1483ceb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531a98ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a69a67f83ea54c19898a3eeff671a312","sha1":"452cfac167d7b3848110792e04aa7cb7bcd5ade7","sha256":"cdb5e844aacebe4a6133defb09a2749451bcc360773de958cf6fa92aea49b498","sha512":"8c66353844ce34b164add4646e363ffe5e62c79e8f24406729636698e111d84b5b1fb9764db974f949a40a4bd526d68b3330f31f6593d746022167bf6cb0143c","ssdeep":"384:Jd1qObtPD3k6xzkUhrlyN9/1ErNLkeBgV0Sq5rcLFZYz90vnL1tdvorJFhTH9N0a:QcPD0Az7ryNELkeKqGnt56/PN0a","tlshash":"17b285cb473881f4785c53bc5a7a2ec7337564ece4b1864c937f99046943eaa2728ea4","first_seen":"2026-01-04T15:46:29.930321Z","last_seen":"2026-05-18T02:52:55.681096Z","times_seen":103,"resource_available":false,"data":null}},"time_used":8082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7895,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2025/10/coinbase-2025-Q4-2.png","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/coinbase-2025-Q4-2.png HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3330\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"12c672eaa207df9f139c9dce1e7f12d9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgbU1Be%2BVg8UbtpeVKfWPbbByuADJqLi7r4BxEPq1yMvblccZxMvNSgDW7wjOJB5b8dHP4Jdj8YhKaWW6YPkx1MSaEDWASay6Gk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f0531ab1ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3330,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"28aa91d71971a90f2d5ebcd1f0733f06","sha1":"af7ad27dc29b275152c2c10f71402ca5699f71d3","sha256":"dc14d70c8b424abe78301a853684fec7b097b066795595a34b2372fde9c57780","sha512":"906bd8a9c0acadb3c8a4d08c0a36d3482ceb9ced9d5b997ccb15064201a471124811271943f61cdea225ebf9da35494a90821040f54e229f107f52f152a27c6c","ssdeep":"","tlshash":"44618effed903ff42c1c3702562ca60256585bd171140a48a0a4a86115e140be933fbd","first_seen":"2026-01-04T15:46:30.014731Z","last_seen":"2026-03-24T00:47:18.186111Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8324,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/svg4everybody.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIYpmhAwpprFUTFzTrJyIad4Vjy%2B4PTVeROyl1m4w6z4y84YBOK1Lso0kQEpMCe2tEOZKrQ03SGu3331NcwsqHK8NJiJ1fNAqrc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0ec27227a7e4f374ecaf5c51773df2d8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531abeea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-05-30T03:59:01.289929Z","times_seen":370,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.easing.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EaD%2F71Pe4isJwNuseR6q%2FJ8fltyOAOXkuJA38xPx0n3PKBCEbfO2fvFacIXIpINnrobcRPDNJfQEAM9z4mRpdJcpIGo8PeUSnqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa6e3aff818fc3bd3653acb09687c7a5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532ac7ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-05T23:15:44.439579Z","times_seen":1195,"resource_available":true,"data":null}},"time_used":5290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":4640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/raphael.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9QpBwRiFFUfxTkM%2Brp56AlT0ynER5BEUhMFq4dSun1z3SpVi77usB3fPZdms%2BEF16kyfjSbTaj0r%2FA5OQLye75Qvyqdzuj%2F21Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"846cc2a9acab258ca3715d84c0a5226d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b49ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60293,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60079), with CRLF line terminators","md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-05-20T18:37:56.877816Z","times_seen":179,"resource_available":true,"data":null}},"time_used":6115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5793,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0IM4B1gdJe7BDlEUvltF6GU8iqnQKYVfrlERPAxiOnrUf92vOYwI08ftx26C1h%2BCk%2BtWM0QVwa4jwMka9SsNmcep%2BtPtZeT%2BjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a14a31592d392858b7c6ea2c9f916636\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0535b8dea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11969,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11969), with no line terminators","md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-03T19:00:10.679259Z","times_seen":525,"resource_available":true,"data":null}},"time_used":6649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6528,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/uploads/2018/02/ico_bg_image_12.jpg","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_12.jpg HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16183\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"18b3f37a2dfae07d8d7a42b8ad8cb31e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZ9WW4xVtpnSS5GJcYqkQOqNER6nSEfQ%2F2dg6ynrysPe0vw98XQlXs5yYqW%2BcjQVDsSl0E2HdkPPzDZiTAe4bCIe3WW74hieLtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d80f074cec4ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x864, components 3","md5":"1186878c2256a14df4b09506be6de099","sha1":"875705fa45727ee610e128af394794199065c002","sha256":"aa0cbc52f570f875871f6c6a14a978dbb4df3423588fbbfa925416d6b26fe2e9","sha512":"dd9525308b0e89bf6861ef62c8bb5b55f2a79046599cd4d0f8d0eeba86dd72266fa0d929109f3e0a69796a5dc02a825b4d6ceac078248e91786db476bab2cfb6","ssdeep":"192:YAFgLoJcHU6bxWEf8gBO5MMMMMMMMMMMMMMMMMMMMMMMMMMZrQ/U7141hKTeRQOI:bMoJc06bTSHZrBJTS0LMhZMXhnuAbyYb","tlshash":"41723b52ef0250e6c40e273159da272eb6231d767ef0055e8f8b40b5b9a63e09d1eac9","first_seen":"2025-09-23T17:21:13.84674Z","last_seen":"2026-03-28T22:12:53.882034Z","times_seen":133,"resource_available":false,"data":null}},"time_used":12807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12725,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/20kwarden8/04/3.jpg","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:52.288Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/20kwarden8/04/3.jpg HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T20:09:47.269697Z","times_seen":16189918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z601AcZk1RkGINEkQ4gPGqTLvMTPgGhUzdwdl9W9p286V92MyloOmADm5Y7wlHK8QJ9qxLEbp7MTol4Qf30FRWONoSNL4gVlq6c%3D\"}]}\r\netag: W/\"8b9c03bbec980274ba301800761cb825\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532b30d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"84108daebf35697ccbbb809d0c7b7926","sha1":"8a2fbbbbf1ef10c61e0f167129fa87c311b6d603","sha256":"eabd0522a5694f6aeefbcc9e76e6951e6326da3436d0b183e737587ded428e86","sha512":"7e27e282ba1b730ec9f11933231fb654ddacf1f17871ccd125ef521b00a3add351f784783d37e208fe107058e5a46f360c604c1578984e11ccbe55d2e0302a08","ssdeep":"","tlshash":"9a61327434a63dcf76036f8a67bb622d5e0694a4fd8b2eadb7dcd170e6095081830196","first_seen":"2025-07-04T07:44:29.955259Z","last_seen":"2026-05-20T20:20:34.053443Z","times_seen":165,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RySxk262ahe4RtKIXgyL5Bh71Q5Z3DK4JQV745Zc39C2QF3UOUbPZE8ybUK9A7akZf4Q9fmFaO1b99lzZDz%2BVl%2BDyEjDmSAWVoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cd336c8cd5bf7f3f09e2db952b99e725\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a63ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdYZpXxUdb%2Bjqwp9RQAhb7Yyn7IiweR%2B%2FWeD0OEb0xpWAyGGI1oOYMXEHhBK4CDlYdkgxS2OD3LuykybMZTU3Soow2ywwKr3qjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"321b68866ffdc200e3da26150bde9441\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0530a6cea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-06T20:10:47.53975Z","times_seen":822047,"resource_available":true,"data":null}},"time_used":2833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":2639,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:46.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/easing/EasePack.min.js HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AT9ety9NMIcQ9%2BVXIqTOKt37ibH914EZ4zk16iGZYllqBdj4YwWE5LrxaYcTNjUw1H7jcZqaAi2mZNuXWAgTRt5TtV3J2QAvjnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a368a4df0f5e7641fb60b076a2ae2fc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0531aa4ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-06-03T18:06:58.68411Z","times_seen":412,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kwr1PoZwCBq%2BMsSzLNNM9lpbI9pd1BSkrAQHqpSF7LAOB4cMUYzYXfSyyzXqqAEtGqD7sv%2BAaYhmtZmmGLCIGwqJJTAkZyJEEJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"31cf198915395cc2f486af64c0583ab6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0532aefea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524), with CRLF line terminators","md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-06-06T15:14:54.634884Z","times_seen":1801,"resource_available":true,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qadden.icu/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"qadden.icu","domain":"qadden.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qadden.icu/","date":"2026-03-06T11:14:47.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qadden.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 08:25:47 GMT","end":"Tue, 02 Jun 2026 09:25:38 GMT"},"fingerprint":{"sha1":"E8:A5:85:52:8E:AE:B7:39:4E:63:0D:A3:35:99:95:FC:7B:6B:DB:77","sha256":"4C:D3:24:F7:0D:AE:9C:F8:E3:9D:2F:53:E0:0E:FA:8F:FF:D9:D5:56:2E:A9:7F:0C:84:B1:58:9E:85:63:EE:0A"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0 HTTP/1.1\r\nHost: qadden.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qadden.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 11:14:46 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7GWeUciCnoCYKyQgZPh6G22nG%2BLFfEEZfR0r8Tifk%2Fu10BvOOZjcVyWlup5yjO4J1Ya3eOw8JWG4RX0f%2FvpJrskNUA4T1Q875E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9680d2753b15a87de5d3b7331dc0d4bb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d80f0534b34ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-05-20T18:37:56.888318Z","times_seen":160,"resource_available":true,"data":null}},"time_used":5759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5719,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"qadden.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}