{"report_id":"2ba64a0a-3ccf-47dc-b35e-3686d7a47fd1","version":6,"status":"done","tags":[],"date":"2026-04-21T17:08:45Z","url":{"schema":"https","addr":"voxilum.online","fqdn":"voxilum.online","domain":"voxilum.online","tld":"online"},"ip":{"addr":"172.67.206.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"title":"BackMyMoney — Возврат средств","dom":{"size":109427,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49132)","md5":"337fcc6ac24a212b90d36ea7637713f8","sha1":"ffc2510894ffc101d36c107622b77193b517a969","sha256":"d35c7ac3d6b17aacc08004d2e90ff6c1fab238428699e1ace9a8ee3e0c4675f1","sha512":"6540d140cd3e39af72d1115571f12b46e0796367a04e7cfdfc6e4b55f1eff586754af48230f6b85411c0cc1ace46a319aa9a56590bcee5c7696a8f387d433418","ssdeep":"768:Nl4ZeLiCIHxZ/DFTksPhwfj9IEIEBa4QuVib5bIFmjtlKPnRl6E:Ni35ZRTksPSRIEIEBa4Quob5FtlK/Rb","tlshash":"efb3aa23425934270137c2d520a99b37e6969e1ffaa70b013edcd7f72beaca0745b059","dom_hash":"domhashe5e32697c51df5f9fea1818e0c7fd651","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"voxilum.online","fqdn":"voxilum.online","domain":"voxilum.online","tld":"online"},"ip":{"addr":"172.67.206.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T17:08:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T17:08:25Z","timestamp":1776791305,"ip_dst":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41832,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI","source":"{\"timestamp\":\"2026-04-21T17:08:25.518490+0000\",\"flow_id\":1325966715113802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":41832,\"dest_ip\":\"172.67.70.233\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2039595,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_10_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2025_04_17\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_10_28\"]}},\"tls\":{\"sni\":\"get.geojs.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3508,\"start\":\"2026-04-21T17:08:25.512330+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":519,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rapidflowqtech.xyz","ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-10","domain_rank":0,"first_seen":"2026-04-21T17:08:45.736262Z","last_seen":"2026-04-21T17:08:45.736262Z","alert_count":15,"request_count":15,"received_data":555443,"sent_data":9847,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-04-16T08:11:52.2715Z","alert_count":0,"request_count":1,"received_data":958,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"voxilum.online","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2026-04-21T17:08:45.739791Z","last_seen":"2026-04-21T17:08:45.739791Z","alert_count":0,"request_count":1,"received_data":24267,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rapidflowqtech.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T05:49:32.595462Z","times_seen":404719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/jquery.maskedinput.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","size":4215,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"746f00d3cf49fb92562b83ea8cd55b45","sha1":"8dd57175aec5c2589de2d9334f746bbda668e628","sha256":"7fd1a8194bf3b49b4e3e9e49652ceb827e1195f1bc9ab51f2db8effb75e47637","sha512":"5076f8cd2fceb1f02cc0b45a568e6ff02987c9e2e5531983cafdf20bf7c1dee2ff1f7b5fc6f622f6bd6994792e77147666435a261b6d682e4d72c5977d5cad0b","ssdeep":"","tlshash":"c6f0239c3c52b01337fe3634c2238f6f3352070131c35528c646cc3538a04860886c4d","size":445,"data":"","first_seen":"2026-04-21T17:08:49.688294Z","last_seen":"2026-04-24T13:31:22.416756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cf36109e61f119d2be377f5252ab726","sha1":"1772fc39349bbec56e215c1ef9410721c11f41a5","sha256":"6d9967a010f0f459fd95aba7aa697512f584875b5ac3dfb465f7d50c07394119","sha512":"d3358081704bb7bbaf0030569f66a4bdb6b91cd1c0f128cc7ba4cee4322ec432193f29659141410feff21a0e704ec2ec7a1aeb84f2f0ed048123e4c6b3741e15","ssdeep":"","tlshash":"8b21be18989260b56c6376704a7fb018b4f35043744dce80bc4d95c59f94f6c29faaf3","size":1365,"data":"","first_seen":"2026-04-21T17:08:49.689693Z","last_seen":"2026-04-21T17:08:49.689693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67f40fe183c50d1823e97a9425df6fca","sha1":"b76a59ff0bc48c0436f9c4b12bf1560fe11b50b2","sha256":"019aa39881228d3f9fd47e7ee7e3bdcb40d5063c387f845994eacdf886aebe8b","sha512":"39f801730caa2d35dbc5dec1fbceaf14f1e2f10d49a14826d2c88b15796681cecc77491e7624b7de9b12c769c3d1144519338d13fdbb5c7477bb285658e4f398","ssdeep":"","tlshash":"1ab01241575a70281c64d00d355a7104647701ff1c0999453f8dca5c3f2c81f4c20fcc","size":109,"data":"","first_seen":"2026-04-21T17:08:49.691512Z","last_seen":"2026-04-21T17:08:49.691512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/tracker.js","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31d498150a2e9abcac627e474089d67","sha1":"ad3f6070334f69a7e540450dc56bbbb6dfb5d265","sha256":"fb993794be8e9c468c57de6c2ea9f3c7167c9e40cdb5051112fbf70dbaf38cc4","sha512":"0e4442f9c7e515060e37d7a894d6fbafa981faf5dc573a5f9b38fc53828732b970bfce65e83cb6cd109b77b4084c69878aba512593e6fee023aaf0f3e23b6f5c","ssdeep":"192:JA5fea/U3a6AT8WLhXpgnWr/j8EkvHsOkpGjgKCHqMvzs2UT7m6rnqyl2tI7pi2S:s8qAvHsOkwj2dEaeoaoP","tlshash":"7f82a80c29fb24305433216a6b5bd201b53a781f34d4f8a57b5d87583f89e28a672fec","size":19251,"data":"","first_seen":"2026-04-21T17:08:49.68346Z","last_seen":"2026-04-21T17:08:49.68346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/script.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1fc45e0170d473d5eaecaa1d5599c73","sha1":"bdf7ebbac0cad23e85f08db492d488e94c7928d4","sha256":"7dcfb55c64091a3b90db73ef49727e3e3c4f58525652c00508a6209fcf155506","sha512":"0ee277a2f48dc09abe2be4b3d884da80ffb318020618813a23b7ae55d53b4f38035ca3a96489eb10e497fd724600c8a8ab1cfbdde656b2b2935c420f9b809c93","ssdeep":"","tlshash":"136182b0b39e283e8b8532ffcc6166cf657f84b33c46419b089c282924d089b81b59c4","size":3180,"data":"","first_seen":"2026-04-21T17:08:49.686298Z","last_seen":"2026-04-21T17:08:49.686298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/jquery-3.6.0.min.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","size":89138,"data":"","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/utils.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","size":248044,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/intlTelInput.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","size":34655,"data":"","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/form.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79f701779867500ea0d0629bc9134ad","sha1":"c89234bafde04b89846ca658e75fe5675e4eb1c4","sha256":"98f4a763b148b9c0b74779eb91ea0fe54b6537e41a1be89659c1a653b5efc35d","sha512":"aa06ed515e3a09b71b8d668b07986f37be08078541ae8065a9bbada3cc9511f67f98706f8211bc58f4fbdf76100c59d89381784d847dbe3bf7f4aa4ed70aa614","ssdeep":"192:cz/iLzoQ/Z+7yXg7t8bIWkadhk7kapzVC0G1AQS5UscrM5t5dhdsA8iA8s7F8D0w:+Q/ZdqW3JrMnHhdzWdiy/IN","tlshash":"2e223e6d25f311764a3361bba7ef50017264a02b3d88ca543d4c431a1fd1e74afb1be8","size":10761,"data":"","first_seen":"2026-04-21T17:08:49.654439Z","last_seen":"2026-04-21T17:08:49.654439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":138,"dns":1,"connect":27,"send":0,"wait":47,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/img/logo.svg","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/img/logo.svg HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 06 Feb 2026 14:44:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6985fe4d-2d1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BT5RUlvuO2pfFcM1eBOPyVLGK2E9ZeYroTvEszUxyUlzkY%2FX%2BLN960DJya1eSg99oacjA6uQwXciULPSbMKVlGzUNNLSa5CStiWLFkGmiWVwKLZRMeWgbDtZYK%2FXHpr6YXaixnc%3D\"}]}\r\ncf-ray: 9efdfd960d805684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":721,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c7adb85126171156defaf721e2724e6","sha1":"b388fb70832cbed561764a960dfd63983885083a","sha256":"ef1bc8be93c49d8be0206b4f658b6405cca882b1e181292b2364b36688ce7985","sha512":"d2560d7ac04a99cb9a90e723a93502834605ee6d7787af214208cb9c601dd6a1716244ccb6d5938bb846c788a207b7d1283b80152c4e20bf7ba77f9ca63582f1","ssdeep":"","tlshash":"be014e26c24c8c2ee6158918cb58b135226fe1c39e85c728e8556a30c91538f3d3bbfc","first_seen":"2026-01-28T01:32:20.541943Z","last_seen":"2026-07-04T03:35:56.59022Z","times_seen":14,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/utils.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/utils.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4c-3c8ec\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksp8gsO6O8cRKTiMnSg8squzOStiNbHK%2BWGr211kWTp0%2BNA0JaB6A4Y8AZbj4lqXRhnWA3Zk10uwGIcCborMi6wZ7pcvihElIJ47ugLB4Yn7ICGvnfHYNIDpqeW9zDTc5xMrntk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd961d855684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41e291dfd45560d2d4fb659a40ca4c56","sha1":"3792bce8f036876641cc14702b1f6a26e6d0d44d","sha256":"8abb51715ec9b4b8587b197b320ba4b6b0092234563b2c72fba42583810ef0da","sha512":"7521362194cc5073e616d9bd9701b5885216aef6da96e497cd08f85a5cf6fa94d678bd2bafa7e0860440cb7d85725d907f88156ee6d731af1d6a18a6335ee0cb","ssdeep":"3072:7XEe8tABjO03k4Pc03C4P0IMOx2EZDmXmoLGYAIrBm6nRTvUQL+D4tQrxaySCkKU:7Xwu59hZDmXmod1","tlshash":"6634deebd63c9736a5d97b35968eb3cd5a8cbca3c848527826c3b54f53788e0706c205","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.599196Z","times_seen":90,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/form.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/form.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4c-2a22\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kW%2FQGSmr1yZaNBRd1ry8qivnE4HSyR8Uf7Ffzdm1THTTz158720V39Hfu0t0okoH0kLrlupL1mz%2BUNV5RdCLZ2aehydWGwMt4sMbzhGWdasUu5XQ2BfmnEDBSibrsh9OqzJUOqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd961d865684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10786,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e79f701779867500ea0d0629bc9134ad","sha1":"c89234bafde04b89846ca658e75fe5675e4eb1c4","sha256":"98f4a763b148b9c0b74779eb91ea0fe54b6537e41a1be89659c1a653b5efc35d","sha512":"aa06ed515e3a09b71b8d668b07986f37be08078541ae8065a9bbada3cc9511f67f98706f8211bc58f4fbdf76100c59d89381784d847dbe3bf7f4aa4ed70aa614","ssdeep":"192:cz/iLzoQ/Z+7yXg7t8bIWkadhk7kapzVC0G1AQS5UscrM5t5dhdsA8iA8s7F8D0w:+Q/ZdqW3JrMnHhdzWdiy/IN","tlshash":"2e223e6d25f311764a3361bba7ef50017264a02b3d88ca543d4c431a1fd1e74afb1be8","first_seen":"2026-04-21T17:08:49.654439Z","last_seen":"2026-04-21T17:08:49.654439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/favicon.ico","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nCookie: pixel=null; token=; subid=; aff=null; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://rapidflowqtech.xyz/wp-includes/images/w-logo-blue-white-bg.png\r\nlink: \u003chttps://rapidflowqtech.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywh8Bd7fvSiHVlsPH2DDvDGEVny42RD4ExsL7smI1Y%2FqYQ18c6weVs9zkT%2Bz6Oxh969kPbDYZKt8AMbHOfKzCNoPiXvi%2BvVamUkK8bU1d6eWB9CNSoS7kDzwqi8Xll%2BROwcJBu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd981d9d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/img/flags.png","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:25.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/img/flags.png HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/css/intlTelInput.min.css?v=2026.02.06.01\r\nCookie: pixel=null; token=; subid=; aff=null; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 06 Feb 2026 14:44:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985fe4d-114c9\"\r\nexpires: Wed, 20 May 2026 04:44:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 131011\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzW%2BpO6YA32YW%2FPAUFye3THeCs5UHJ3eN8iZN%2BkdoYXV4c9W%2FslqzntYfCx8%2B74b4JzprninUcDRWr3LRuAfnKaTePTCkY0tGCCWZEbfYdSpIeh0PB4cs%2FRbGVXF0oAkRORQ9Lw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd9c9dc25684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-24T02:05:32.658343Z","times_seen":25136,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T17:08:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network} HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXGGiDAxvu4aD5JEUz8FCFQ4QIF7L9kcOfi%2Fum0Pk3NY7wYoqOeni79UOk5Sg%2B0xANl20KTV82hTWA0jvG93skunGt5z1Ob6LoFy5hnTrEKycKeksGQHaziYACuHL7jA8E3mXCs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9efdfd937efa56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2203b8600d491ac5a796c968c07ae5e5","sha1":"d014bf8073d03d1fdf9906bf40b1025cd1d0acad","sha256":"2af823daf64fbe7e2c6e01590b5de552f0268c19ec6e9b81db4cb12df8c3a9a9","sha512":"02551f13803a7199ce28b33f05fd60d769976ba80040adbece170f0201d32d7fb7dad0d6e1214fda84c96e05425ea68de99796da597594d7c19519e3aaa8ddcd","ssdeep":"384:CiNRbOiZe/UNEbRTLUxQxNxBicedsPMgKPjpRxryZpMzVNDM:CCvZeciFLRSsP3KP9RxrIp6Y","tlshash":"c9a2953018e4e45b1243a0f5e956e70a3ea4c127b50a5b4039ec0ef96fdad269f273dd","first_seen":"2026-04-21T17:08:49.658715Z","last_seen":"2026-04-21T17:08:49.658715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":96,"dns":78,"connect":1,"send":0,"wait":215,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/jquery-3.6.0.min.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/jquery-3.6.0.min.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4c-15c32\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=042XePjRE8TDX%2Fyrc8JCV%2FM2gK3YlYyI09bCC%2BSoJn71G%2FYU0CEzhh6nb5eK0QBDMKjScP5%2F57XQWK8YZ63HKPZdfobsOW5zBSwpQVMiRFy9ee9I%2Bn7YyGdHVz720LbNk%2Fbb%2BQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd960d825684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d61e1cd8875e294b853fae82b39d2dee","sha1":"0f7d51d4a1d4ce1cf47dd758e26071dafa938c2d","sha256":"d09e227d3d34e12735eb6b0e5af9e57123219aa111b509004f1237f8c0d03e72","sha512":"2da0206547f311e79bf7682fbdb7d22863ed94fa29d45c9c39bc4958fd3d7e21822c99792c86ad806b1c2efb07c8b34b71439be136778cba4a579da6bf685453","ssdeep":"1536:uLiM6nGLjLLdzN4bx60BW56Tqoam1UO/sm683CbouED6dB1iu81u86xiWzx:WnNO/sm6ZnZijciWzx","tlshash":"dc9319ddb2c7b12207a771b9007f510bf2361959280d8450f169e8e9bc79b8a827bf7d","first_seen":"2024-09-19T19:52:06.656293Z","last_seen":"2026-07-04T03:35:56.593505Z","times_seen":60,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 21 Apr 2026 17:56:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdi6J1b%2Flugh1tTvr6ya1NzusZldoyc5ujN9IzErSaO5GBudAOVvSHHLEyxPMqW4KRS3Fk6kpkwzeyu%2Bm0QxL%2F0nRZyV9bw%2BOajaa9ebcbJyfs%2F8QxaN7tsE%2F9pod%2FJb83r7GaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncf-ray: 9efdfd960d815684-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-24T05:49:32.595462Z","times_seen":404719,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:25.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 07:30:19 GMT","end":"Thu, 16 Jul 2026 08:30:00 GMT"},"fingerprint":{"sha1":"EA:26:97:B0:1C:7B:C8:39:C8:5D:15:E3:1F:A4:D3:61:8E:AB:FB:77","sha256":"96:61:3C:5F:FA:CA:91:8A:37:E7:7F:F9:1A:EE:DC:27:C9:0B:6D:45:1D:7B:3A:4A:D4:8A:19:FB:FF:22:38:02"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rapidflowqtech.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 17:08:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Tue, 21 Apr 2026 17:08:25 GMT\r\nx-request-id: eb12376bb65d13a1ed72aed32de7ab28-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqpoCWnffY02FY6azGoK3TwXeEmDgdnROZV5JRZOMiuyoge%2Bezt5S5klwjgUtz1GuoWNdP3c6hyw%2FBi8EbZOUbG36IYXwaUxCioGWBJEerB6sovNZdq12PekNuXMfg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9efdfd9b8f02b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54400c77b72b40a2e948ef52d4abb096","sha1":"2d4b2d15425f9aa29ecdb2c336390cf078928511","sha256":"be4ef38271c428e15a35e8582e5c7bd3df677b5478f84c323bf42a74a15336bd","sha512":"b499b922309a28a1c41d1b06b3b034eeebccb40c5f40054617adce3098b672fdbc76c59402d65677b635326a4a710da754d03cb79c0e25831fce08bcf6c2e05e","ssdeep":"","tlshash":"4da022ae20820b2ccc20c2eca00b338223c2c202c33f2803c0c03f08c3003ec2000220","first_seen":"2023-08-05T23:07:18Z","last_seen":"2026-06-06T18:12:42.644428Z","times_seen":972,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":50,"dns":34,"connect":1,"send":0,"wait":135,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/css/style.css?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/css/style.css?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 14:44:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985fe4b-1bdf\"\r\nexpires: Wed, 22 Apr 2026 02:37:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 9057\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDb5jTVft8I5fqC2CesDo7zLuT%2BHySzGU85S50qb5fkNQHg5ZQndaYBA7yHD3tfNNQ6w6yQm9hMKUg1mHg1YxQXUVE1DBa1oHmVTTcWOaPK%2F28Z40BFO3N1VhDEYE242XXxe3fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd960d7d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (308)","md5":"1b033f8927122b4218b71e1c38a97c16","sha1":"61b3600ad15fea93a6235cb0f4649b13b3c715d5","sha256":"85c64fe6cadbe0f60cdbaae3aeaedad4f9fd7e3b877c6ecaa836bfa141dd7d41","sha512":"6bf1b27fb933301d47da398d199ee9aad583824a7e968dce1b8482643f637b7b074994162b9a2ada10ed9c930741349e01f0fb79f8e8649e9aa0aaaf39fcdd65","ssdeep":"192:40oSt4X7c8Sv7j1clg1mvDh49ubC7gYvkaOq8CR7c54by6:4frbHyq596","tlshash":"55e194b266012228b06bc597f4d25adff1384407e26b05acebb720fddf850de96b5608","first_seen":"2026-04-21T17:08:49.675044Z","last_seen":"2026-04-21T17:08:49.675044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/css/intlTelInput.min.css?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/css/intlTelInput.min.css?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 14:44:27 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4b-5b94\"\r\nexpires: Wed, 22 Apr 2026 02:37:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 9057\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2I%2FhbvuBL9qG5W9ejZXYXEC6GQ%2BgYigIMVFKWjehVeCwOA8bg5H1g9RJ9GYE2pCJilXZWAAFXDMqKypBfTiLW8Egqxm5JJZfEwSX5UQ0RZWFe7pT0Hr%2BjJhVuMwRJQ3zCIE4oNs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd960d7e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23444,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"741862fdc25b03dd477baf69c62189b3","sha1":"48038f2ce4782975de911a6ef9a47bc0b8d5aadd","sha256":"2ded612bbc1de8bc5015af6ca0cb6533ed079788cab6ee37887d15565e9cbde1","sha512":"56a8edacbcb6ffa643a56d9f64dc335e7bee4b70139785b7482021fde41c219d058412371d900732ff1f1f014ae71b0e49535fe2a40f771422acb5290a0fa382","ssdeep":"384:t1LFjFUZdoSW25WlOiAmuOoADkTzE2omlcPPP759:DFjFUZ1xAn","tlshash":"d7b261674bb27d24f96fd1e138a04662773f5c42f81e4a3fe2aa3d7d66410d034b2a91","first_seen":"2026-01-28T01:32:20.536973Z","last_seen":"2026-07-04T03:35:56.598184Z","times_seen":14,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/tracker.js","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/tracker.js HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985fe4c-4b37\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YLJ7hYys9%2F2vDFcs1x0rKLw4q%2BQ8Mv%2ByD3AbCYznWmA2CBPmcanBWTQDnrMyjRZfxebOHyVZGqgVQY38e4T1uYBHVb76Rfv%2F78vZfntpD4nnui29%2FKzzFwWngzoDWSB%2F%2BQ%2BSDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd960d7f5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d31d498150a2e9abcac627e474089d67","sha1":"ad3f6070334f69a7e540450dc56bbbb6dfb5d265","sha256":"fb993794be8e9c468c57de6c2ea9f3c7167c9e40cdb5051112fbf70dbaf38cc4","sha512":"0e4442f9c7e515060e37d7a894d6fbafa981faf5dc573a5f9b38fc53828732b970bfce65e83cb6cd109b77b4084c69878aba512593e6fee023aaf0f3e23b6f5c","ssdeep":"192:JA5fea/U3a6AT8WLhXpgnWr/j8EkvHsOkpGjgKCHqMvzs2UT7m6rnqyl2tI7pi2S:s8qAvHsOkwj2dEaeoaoP","tlshash":"7f82a80c29fb24305433216a6b5bd201b53a781f34d4f8a57b5d87583f89e28a672fec","first_seen":"2026-04-21T17:08:49.68346Z","last_seen":"2026-04-21T17:08:49.68346Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/jquery.maskedinput.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/jquery.maskedinput.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4c-1077\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKDmHI8S9Q2KzPuogxOmFfPWOaHuDjgbbxyr5M0wGzUTkjCZlDG7LB89Iwp2%2BT39Q7phvdHoT3Peod13cOFv8OsaN5luJC7TAkFy5qzaTomK65HIqD%2FeZIWgUQGo4lyTyzaREzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd961d835684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4215,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4215), with no line terminators","md5":"9833dfbc30d6fc0ebf316ed43952707d","sha1":"43772e9441e42983f229dc13ca3477d6f8f2f5e2","sha256":"bd9074e7da91f4f7df45000ea013ca770d4e9a69f2a2eb3955f755bd83917206","sha512":"c86ec760305d02e4ba89008e6ae78557e19ced1a78117e5be62c8250fc4b57bfb078de6491d154029a4d932d148bb975e3480843fc45b3ebd85ef33863fe6160","ssdeep":"96:6xaRbOnjRn9J/iDysXyDE48NsYenp8mWN3kPTz5HD2:4aCjp9J/AysXUE4OneeNyx2","tlshash":"cf91b99dbc9c721123b748a100afc5595235bf19485fd4b0e121f8d1f8389aa325bebf","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.598689Z","times_seen":100,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/libs/intlTelInput.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/libs/intlTelInput.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:28 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4c-87c4\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeXSkDdsFk%2Ff0OembGb8V91jVDiyZd5ynfWO6vMO94mUxOt4IzIkiuwGfw1zQwHzSfvqRRovUr4MFk3enUXBax1VwSLRbeeggknBodPr%2F%2B7Mhs%2F6fXOp3J0PUY%2Bj0O2ZJ8kgL7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd961d845684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34756,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34020), with no line terminators","md5":"c79a1dd02df4c628a56f3835471fc932","sha1":"f2fa8f443e3b91187c8c786c5242c60a65364bf9","sha256":"b31fd662513a7c7f7c90c8df2a060f319219e380c774326322034acb0d7b2116","sha512":"a245ebd8efa3f512a4aeac9c3fc88fe7cb2593d1bd8e67225f88b01dd52ef866dd44adf931fb20913b35877ca81f630d48587cf9dcc21749f22d376f45023594","ssdeep":"768:AqDnUfAow5D45YiLpJonAuN1dlfJLKgHJAV:lo5JoAuN1U","tlshash":"3cf2c89d7344533be8fac196b89b014b2aee35141a84c89c787dcfcc4aa8ed5b567334","first_seen":"2024-06-06T14:03:54Z","last_seen":"2026-07-04T03:35:56.592968Z","times_seen":92,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/script.js?v=2026.02.06.01","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:24.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /_lp/gil/myCRM/ru/BMMblueru/script.js?v=2026.02.06.01 HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 14:44:29 GMT\r\nvary: Accept-Encoding\r\netag: \"6985fe4d-c6c\"\r\nexpires: Wed, 22 Apr 2026 05:08:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGhCuZfV5mzNLFvYJ0cuj7YGuxo%2B%2Fr%2FI8JhnjMuSSnGDkCa%2BIsCKYd%2F9VMTS8MCtAP6SefXQ0ZXXaBEzhp7846ASsvZCENzv54t2qVbRj6EZ6Ky0rDKHvWFAXtCaSr9e2jHz1uw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd961d875684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b1fc45e0170d473d5eaecaa1d5599c73","sha1":"bdf7ebbac0cad23e85f08db492d488e94c7928d4","sha256":"7dcfb55c64091a3b90db73ef49727e3e3c4f58525652c00508a6209fcf155506","sha512":"0ee277a2f48dc09abe2be4b3d884da80ffb318020618813a23b7ae55d53b4f38035ca3a96489eb10e497fd724600c8a8ab1cfbdde656b2b2935c420f9b809c93","ssdeep":"","tlshash":"136182b0b39e283e8b8532ffcc6166cf657f84b33c46419b089c282924d089b81b59c4","first_seen":"2026-04-21T17:08:49.686298Z","last_seen":"2026-04-21T17:08:49.686298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rapidflowqtech.xyz/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"rapidflowqtech.xyz","domain":"rapidflowqtech.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}","date":"2026-04-21T17:08:25.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapidflowqtech.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Mar 2026 20:43:25 GMT","end":"Mon, 22 Jun 2026 21:41:07 GMT"},"fingerprint":{"sha1":"08:8E:F8:44:43:F2:03:A0:47:39:C2:32:91:F9:7F:00:C0:91:5A:37","sha256":"D3:CA:FB:B0:1D:FA:57:5C:FC:36:3F:13:48:76:EA:08:97:C8:05:BF:60:3F:41:7E:CD:B6:F7:48:D1:2B:AB:7F"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: rapidflowqtech.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: pixel=null; token=; subid=; aff=null; flow=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 17:08:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Nov 2021 07:04:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619357e2-1017\"\r\nexpires: Mon, 18 May 2026 19:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 250329\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbSbyzcz%2B3wjYHwpY9GW0nwpeA%2BkK9bQ6RAqeK51Kj6XGNlB1a57tWR4E%2FkaPYRPPf%2BQXzAfcJseUqU3UOnIwYsCQrB9oeLA56YYpDakiL%2FhXh2PB48HV4xPmazg1kEfDkchB6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efdfd99ddac5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-07-24T04:57:28.226343Z","times_seen":71725,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"rapidflowqtech.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voxilum.online/","fqdn":"voxilum.online","domain":"voxilum.online","tld":"online"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T17:08:23.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voxilum.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 20:30:17 GMT","end":"Mon, 13 Jul 2026 21:27:48 GMT"},"fingerprint":{"sha1":"79:F5:F6:6F:CD:F5:DA:38:F5:64:CB:46:FB:05:F8:B6:70:2D:3D:65","sha256":"D5:4E:08:34:84:7C:3F:CD:E9:4F:36:7B:1E:9C:A2:36:06:D8:F4:57:B3:49:99:22:1F:C0:57:04:48:D1:91:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voxilum.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 21 Apr 2026 17:08:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://rapidflowqtech.xyz/_lp/gil/myCRM/ru/BMMblueru/?subid=1sjos4f69e7af08192d9\u0026utm_term=\u0026marker=\u0026utm_campaign=\u0026utm_creative=\u0026utm_content=\u0026utm_medium=\u0026utm_source=\u0026aw=\u0026camp=\u0026geo=\u0026brand=\u0026utm_network={network}\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 17:08:24 GMT\r\ncache-control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0\r\npragma: no-cache\r\nexpires: 0\r\nset-cookie: _subid=1sjos4f69e7af08192d9;Expires=Friday, 22-May-2026 17:08:24 GMT;Max-Age=2678400;Path=/\n_token=uuid_1sjos4f69e7af08192d9_1sjos4f69e7af08192d969e7af081b18b8.02594648;Expires=Friday, 22-May-2026 17:08:24 GMT;Max-Age=2678400;Path=/\nce50d=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE4M1wiOjE3NzY3OTEzMDR9LFwiY2FtcGFpZ25zXCI6e1wiMjRcIjoxNzc2NzkxMzA0fSxcInRpbWVcIjoxNzc2NzkxMzA0fSJ9.-GgPiTy9jPzLPgivSZdpNZQCWe0nWiXXbt2m2cUH8bg;Expires=Tuesday, 11-Aug-2082 10:16:48 GMT;Max-Age=1776877704;Path=/\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FCTOxUmILubRihNRLJJa9dxvtV4jpMMtLzhSRLBGUqimJo8LHdRMF3MUjBZjVpz7YIT2ZfYERhGPZtLPaPV66UENA49EEv72msQW8ezbgHEjfGMutUWlS8dGKh4SbYV7w%3D%3D\"}]}\r\ncf-ray: 9efdfd906b6ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T05:51:01.939027Z","times_seen":17494240,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":62,"dns":47,"connect":1,"send":0,"wait":393,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}