{"report_id":"2a947433-292c-4573-960f-5af4eaae3b86","version":6,"status":"done","tags":[],"date":"2026-04-24T13:31:48Z","url":{"schema":"https","addr":"rapidflowqtech.xyz","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rapidflowqtech.xyz/","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"title":"rapidflowq tech","dom":{"size":105236,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20397)","md5":"292660180144997c2b1308f82a2a144a","sha1":"d9c0dc559ae67c4743e1e48335f8852af9de43d2","sha256":"950dcc9aade1a755d22f09a25515f4df69a8fb765c98c58269c4092696d2c661","sha512":"5be329846b02e236e4df1b4e92d9fc4d200e2b96f5d9145fe464b736a68cefbe490c554a53b32d4c4f85952fad75c68210836cde9baab6ae92992134d1f375e8","ssdeep":"1536:DnyclkRrlypQcy8Vhnp8ZM6dKZobwemlUVuXwamqpGeyvC+/:Dnyclk5gehdKZobwemlUVugam0yvC+/","tlshash":"03a3a6a047b84cf5797f836b9948a318611ae912ce4976e5f0f3d15464ccea60af3b0f","dom_hash":"domhash6a86a176efbd88b59dbdfa5995300171","first_seen":"2026-04-24T13:31:50.390275Z","last_seen":"2026-04-24T13:31:50.390275Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rapidflowqtech.xyz","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-29T13:31:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rapidflowqtech.xyz","ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-10","domain_rank":0,"first_seen":"2026-04-21T17:08:45.736262Z","last_seen":"2026-04-21T17:08:45.736262Z","alert_count":12,"request_count":12,"received_data":1160144,"sent_data":6080,"comment":"","tags":null,"fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T15:20:11.972738Z","times_seen":310905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-block-template-skip-link-js-after","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d99026d006209e2543d97f739c8bb06a","sha1":"c71ceda3e20378334596d8c17ffe5f74e774556a","sha256":"aa3e89bcc01c993afc5bd1578a35d9bce0b407c14c9b7694180767e4bc9da79c","sha512":"ed2f59e54ca633612ecdd855ba3b38df23a27eb6b6f6379b394badf587d8ea51d09e5f54fca6ca0b63c658b72e8544494baa9f5e460afbfc1490fd059e1edb28","ssdeep":"","tlshash":"804195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1927,"data":"","first_seen":"2025-12-04T03:32:59.050827Z","last_seen":"2026-06-01T19:02:31.800349Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cad5309933cb16bfeb600e529c760e8","sha1":"7bafc1c31d5e51681e5f66837a7eb484460dfbdd","sha256":"aaabe0459d577f6e36b29613627b3124cff3a0f88ee1b2a3da991db56ee2c496","sha512":"5b59c83066b396e2e129fc8cc094c54425129846f93a6979fd6de92f6cd332987c12dbb66041a1fa723901313d203888a530a6b17b790e97a84d350b1680ba26","ssdeep":"","tlshash":"f0818796e77a38dbb2f900f2697a0d47e7614435d6c8d438c9bda3141cb58a3c274b46","size":3844,"data":"","first_seen":"2026-04-24T13:31:50.398583Z","last_seen":"2026-04-24T13:31:50.398583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-11T13:37:10.762382Z","times_seen":11713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-08-11T14:50:58.985414Z","times_seen":5874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rapidflowqtech.xyz/","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-24T13:31:26.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 24 Apr 2026 13:31:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rapidflowqtech.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuuZArAwiJw2zpJNNBSD6HH%2BSjin425%2BO4sf0c%2BtIc7VMHV6gKMBuWBvuXHeXNvmt03vUM%2FmLmogsSlfdZ34PNhBNuzJBIkxVGQC7k%2B05wrbso%2BxI%2FgZEGd1MXQSko54fZnzElQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f1577e34f9c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":105040,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20397)","md5":"e0dcc6500ba37874d113c9f4d258ef40","sha1":"3a20d3ac9f4edd4ab5ba8bf4248de5b79d0ce936","sha256":"9bfe4a5584a2f2f7a8aa508a8572ee3148b303cbcc8434e16dc57f1182c5eaea","sha512":"bf9b77a13714cdcb0e70a7ad4c00d265def1cac9fec462b2115e05adffc6d68d26dbc66b15e735c7ef3d21bb2bccf78a8710da7f89e7d9093ebbfd8e232d711b","ssdeep":"1536:qekclkTVFypQcy8Vhnp8JModSZMpX4wvSAIXuTVpTWeyvC+j:qekclk5AerdSZMpX4wvSAIeTVByvC+j","tlshash":"1ca3956057b84cf5797f836b8948a318621ae912ce4976e5f0f3d15464ccea60af3b0f","first_seen":"2026-04-24T13:31:50.391611Z","last_seen":"2026-04-24T13:31:50.391611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":269,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 199724\r\nlast-modified: Wed, 04 Oct 2023 23:02:26 GMT\r\netag: \"651def02-30c2c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu384wsemk76nYJfg5yFbbLW4OANgMrW3LUMIxJ4SSI603qM9fvzuF67GJWk%2Fo3fB54emRQv4dqjV0MMfOUtTXB%2F3Jh1fy64yR2sZunZlETOLCnxSMd1sElWiqnHu1fX%2Bf4b2Qs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e61d495691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2af7c6205191cb22f5184bfb4c8e47a3","sha1":"6804bf960deaa7ce32a32d8908cff9df0b157772","sha256":"7ab1e25df9f0e9825e577187a3c73ebda9c0a068d9b35d2a235b8e924b9c58e5","sha512":"d840754c2657e09975c1d041d2285c67b97b9bacfe77d01d78ecbb5bf4e29eae691a6853cf933e829cf7c201085301f8b4cad7f1f3cd5b4d7e16e675c6f2caa4","ssdeep":"6144:ZETkYnSyNylu2wvIbCS+liXoCW+neFY75YnN:okYSluxaCRl4eqVw","tlshash":"041423038edb316bd4f078b0cb400a8007b489af9764a9768ef2da756617278b3f5d1d","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-08-10T06:53:34.948059Z","times_seen":1390,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/images/windows.webp","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/windows.webp HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 126244\r\nlast-modified: Wed, 04 Oct 2023 23:02:26 GMT\r\netag: \"651def02-1ed24\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36HXQSRQV%2F6TPAGXcRisNhOr5GIrhRHIPrjafltfHQqBv%2FyNCfTkl6MFj6Fr%2BKgUAcAnmaRNNscb5erTtwyjXs1SEulEgMNKlzfhCebo9ZzTUa51JNcUZfy%2Ft3fEzsuhEZ0GfK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e62d4b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c8ab14e61504d8290608dd62812840d","sha1":"18a3284f7b5ec684211dc355fe2ae56b30639a9e","sha256":"a8b72c3a34a4ac883406005c0fab343d64894c978b3dda1b6bb00eed01e9409e","sha512":"a004a16cc557e9e9cec3f36af8fda796966f7f4d16f11bca1761b350a81cd122048cd2742ccb2beffc4501dcb2746f64cd33f3356575b9cd74de590c56127d69","ssdeep":"3072:sdZsaKCAD83OCerX+GoIKSQgGfMB/WhLQPR2lMvjBy4piYbXxxzY:sdZsxDqKrXSvgS8PcGvmYdxc","tlshash":"ecc312fe0a6c538eca4f077ae3a1ee494151b71673e09053e9ac41d79820437f65abd4","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-08-10T06:53:34.926977Z","times_seen":1382,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66482\r\nlast-modified: Wed, 04 Oct 2023 23:02:26 GMT\r\netag: \"651def02-103b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IDhwNfncXh%2FLIOkiu6O57OUGjv4%2FM1vqnrzfkEQEKDowpYkE76QMKdXFZ8bPZYWxrf7%2Bcrpo36p4nuEUQOXPdPH5efrWZ7rEdpcMIndPXV5Ntm0IYcR%2BykTqVznsgrEm8DZTy2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e61d4a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d03dae46404d16f0ee5b13cb3794a29","sha1":"5d2c6cd3d8d2c412281237628073e451257716e4","sha256":"0fc42e518e17733d6c766ceec3a2154896e332571f130fae27e4f20480e0980c","sha512":"9e33b9c236183e7d3c9e7cf27fe8c7d47c7769a008b025c716b5c5cfcdcb0331cca6181fcdeaa19dea48d8f2ebbcc1d4fd76f81e540ec08898a62acf56262aff","ssdeep":"1536:gmuYP0ZH4syavVBIvDbkA0ch0a7ZzTIdHq:gm/0ZH4Ar4Ph0E1SHq","tlshash":"d25302b3da071c5ed7eebf70c91a601208ca7d8ad9f30393c612cb66565624827d68f7","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-08-10T06:53:34.928803Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1711,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 326628\r\nlast-modified: Tue, 26 Sep 2023 22:46:22 GMT\r\netag: \"65135f3e-4fbe4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BF4isd7Myvp3fIrdbppOXqUUQANOezR6m5GIC3p7r%2BBCmpAt2WcHB5LIKo4LQ22FBn9Z9lm7QAJ2Qjkii5r7Kl7XirShSMe2vr9LElKsE0Dg0PwHBq6X%2FCTSyp155cUT388kvIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e64d4d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-08-11T13:37:09.703771Z","times_seen":15780,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105184\r\nlast-modified: Tue, 26 Sep 2023 22:46:22 GMT\r\netag: \"65135f3e-19ae0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmcuNTohqNKj%2BdO0O0SMASs82UZbXxvlZJKR8qxOeu6nGQKGTQ1wT0AmZBg69yF4TjduA6bHlyUqzV%2ByQkjCOn1OUMLE0iL6rmKm1QFHl76BjdqG4RRp3rfQLTiAu887r81GVJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e65d4f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105184, version 1.0","md5":"f92d2db85594215e2a4d135561897188","sha1":"0fdff68c4027cf421d605798a1de46a061d160a3","sha256":"c3b2ff62e3ac4219811de0c709bd0d81d962a88dc87a598ac19b20f58f960136","sha512":"b532fda93bed9ff05432462a5f4c13ea4b859648032aaafbe339b864dc2a36cfe71a46dede923019a07c7d40b8828aa47127eac3ca1a5dadf8eeef490e5a6ae7","ssdeep":"3072:3nnudHFZEJd5hdHjvd4IbIsmhHTw37DuFs2:3niFZED5hdDLIsmFTwQp","tlshash":"97a312e55ca5b3c58fe0344e663fbe95a181ae514accc7118aca142b4bcd21dfae074f","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-08-10T06:53:34.961185Z","times_seen":1712,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 146060\r\nlast-modified: Tue, 26 Sep 2023 22:46:22 GMT\r\netag: \"65135f3e-23a8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNLitPOdFBTuwSYyTummdMIsK%2FEXny4SLhSTmjpsYUSsULQ0v8mlH%2BMTAp6sZpMhc43ZIOqAB0msU%2B71l7%2FNUjWNmGZkCrnv%2BEI6I4MDNH71l%2BuZfbW1946Z3oyiZ9CzBMycILs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1577e64d4e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146060,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 146060, version 1.0","md5":"b782b01afc9646c7259701b07e2a71d0","sha1":"b86a6f0bf3fb4777160165dfe37ca4e99b90216e","sha256":"aa8042a77500cfe4a4893e2b7edbd54dded92768e40418fa0665bec8aae9ae18","sha512":"5f727d90952c324dfb9447c4ef702166844e456c614934bc266be072ed8ca681f8246cbc98b653fa45c6579bdad24dfaad04ebe8300f34774ed137254d208fe3","ssdeep":"3072:86eYDlgQh72091K9MIMjeIHT8edPDfeLSyxJjQ:84ZNh720IMIA8eoj8","tlshash":"e6e31376e110fc9723a55a5c1033a4b82a4ea8e7c188f0d4d1ef4a86effd46646c702f","first_seen":"2023-11-07T21:49:08Z","last_seen":"2026-08-11T13:37:09.712966Z","times_seen":11168,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Feb 2026 19:14:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982492c-a0ea\"\r\nexpires: Sat, 25 Apr 2026 01:31:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTV7ah5uYfZ9fDKwK%2FCtAABQGJ4frwKiLyN3a9ry6WSAJep9WyiW%2FQ5YcTkkIQz8SjmOUXpxQjDFZeY%2BXm%2BRMJvCbRszOHOkYbOThvytufXRhEvXHZzbp9ny5ifa7Z1JSy%2FnCuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1577e72d535691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-08-11T14:50:58.985414Z","times_seen":5874,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 19:15:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69308c40-d49\"\r\nexpires: Sat, 25 Apr 2026 01:31:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3guIyQtVupKjYX4ke23YghDInFPmiHLObw4aTWpdnWbGis51y6NoKKwr58LXePJiPJpqxMBgWFiIcd7zmutK%2BEmqTCI9gRON9VmUF11mbnGY5UGIuPpUglZYRr0NIcutNec8jEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1577e62d4c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-08-11T13:37:10.762382Z","times_seen":11713,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 19:15:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69308c40-58ea\"\r\nexpires: Sat, 25 Apr 2026 01:31:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8qgCIGCw4Ny%2BO9QDLhHiP7uqLsnNfBPYc4420Ogadt2sEzvJq8%2BA5olnU4fey751j%2F4VZaBluRqbrr5eZrQ45WRcxsd7ghFS4VseYV8oGR2KgabBSZC4Uqol8fvnkmGCBfVe7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1577e81d585691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T15:20:11.972738Z","times_seen":310905,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/favicon.ico","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:27.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://rapidflowqtech.xyz/wp-includes/images/w-logo-blue-white-bg.png\r\nlink: \u003chttps://rapidflowqtech.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss0NwzPrncjnOhRp6tUSxE2Oq3h84IuYwy9X5REncSi%2Bw2X2MahSDfCe4cMvRoVJJiZO3wzi0iih%2FbxeTJv4O3HnMf4wubK9KqgG6ZLSDzKggcwzwAsC15Td38MTcx5xZ1okIr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1577e9ed7f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T15:57:26.494444Z","times_seen":17839182,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/","date":"2026-04-24T13:31:29.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rapidflowqtech.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:31:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Nov 2021 07:04:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619357e2-1017\"\r\nexpires: Sun, 24 May 2026 13:31:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epee3ZAYD2%2FnbCHh5zkiW0jeN%2BvhZnZwRtQmTPcjB1Sw5PNSBSsntKyu6FlJ7VSN5l88NstsHD7YnRJUrw5%2BvRUdg7jWabegmuXOOT3d0Y3YAGJ9XfBQpYS%2FvNF7wDR3j%2BBxcAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1577f2ce475691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-08-11T14:49:22.158038Z","times_seen":73225,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}