{"report_id":"420b49c5-b1b2-425e-9c85-b87edf35ad7e","version":6,"status":"done","tags":[],"date":"2026-01-28T06:57:06Z","url":{"schema":"http","addr":"us86d7awkd0f.xyz","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"title":"us86d7awkd0f.xyz/","dom":{"size":4920,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (646)","md5":"ca0830bcddecd524f53fc5c7c3f373bb","sha1":"c978248729fda1c790b22ca97089fade574f4503","sha256":"d2422086230ad7d1b7f95fc49028dff0608a93bf7c03f1b39756556ecd394f3a","sha512":"77eccf26e576534d8c4c8189637421123a079c46bc86d264a58a421b87d31a5d60a20a81279b16cd46cdde4fe647e6c0ca15698ee83c559a8e43f6a43d1f05b5","ssdeep":"96:n3ogmbVo/UmaLv0yJ4N+wm6RUhEColbTW:Ybo/UmaYyJ4N+wm0Flby","tlshash":"97a13f579cf3a407685bb0601fb6370f623ac113d246cda8bbec95d88f849c84cab758","dom_hash":"domhash23cc67214976e2e914d72af3c0bd1009","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us86d7awkd0f.xyz","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T06:57:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"api.55ulyhqkfn5.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-25T22:30:04.454262Z","alert_count":0,"request_count":2,"received_data":40688,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wx9x1m87xsj6wocb.xyz","ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2025-03-17","domain_rank":3233724,"first_seen":"2025-04-19T05:53:59.379633Z","last_seen":"2026-01-21T22:38:25.713857Z","alert_count":0,"request_count":2,"received_data":2085,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"zu44ajgue8.xyz","ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":666551,"sent_data":7141,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"api.55ulyhqkfn5.xyz","ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":6362,"sent_data":2162,"comment":"","tags":null,"fingerprints":null},{"fqdn":"us86d7awkd0f.xyz","ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":65074,"sent_data":2526,"comment":"","tags":null,"fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-13T17:30:44.404423Z","times_seen":692901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/js/index.js?t=202502181737","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"303e500d69fed15786aafe6df51d184f","sha1":"8f23dd063cf41e92500597f9ab06fe1c8a9ca4d5","sha256":"4ff2707a9403f59bc5316effb1f3762f2552546cece7bc883c921f78ecebd769","sha512":"db4b0e2b95581eabcd172789c24f62d9275527c36ca40ed85e28fe67e26e60ed2f0c2702ead3b710213106d845aedc762c48ddff7659f5070c5c971977a53262","ssdeep":"192:9TOkm9rXWnVq7KXx0mp34jDmCqy4NJOER8CqpZKxWh0r/onp2GNlw5idjGDK2Czq:B69rXWnVq7KXx0mp34jyCqy4NJOER8CH","tlshash":"3e0251917fc06d9923c6457b25277488cc16176a3cc844b8d0a4f86c3f6da17e7a8bf4","size":8213,"data":"","first_seen":"2025-05-15T02:18:09.480112Z","last_seen":"2026-06-09T10:20:57.511628Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-13T16:08:09.123902Z","times_seen":337385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-13T17:27:10.635104Z","times_seen":228889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-13T17:27:10.635104Z","times_seen":228889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-13T17:30:44.404423Z","times_seen":692901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vue-clipboard.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8856c5f65c23d45fe8f4eec0c6dc6a44","sha1":"015add8db60dfd6b903f201f84b4bcfa10cde132","sha256":"7122add2d588267de45bc07c225bc54761a51516ed7c704342b639e48f501759","sha512":"668c76b80708523b21ef9eed7a8bf41ddd6e18d09b9a82f94609d7d0df15baca7f7cb7b8493036bec59f9b6f2faef77cdedce59998497dae334cfaa5377b16ec","ssdeep":"192:27VIW9HL4f3wo+1k7BoWsjwuLJnHu4wamahW/C5nZd0fkA4pS/x0usECf8w:27iTf34Wsj9LJvwPwWaLGSpS50Q41","tlshash":"4a528498b2d171b1d6e770a9412f820bf332a575649e80c4e538dce1adbca8e5467f3c","size":13748,"data":"","first_seen":"2023-03-08T14:22:20Z","last_seen":"2026-06-13T05:15:44.643732Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-06-13T15:36:10.162217Z","times_seen":21389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-13T17:30:44.404423Z","times_seen":692901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2d85e469cf7c65f6bc8020700d13cc17","sha1":"425e20c2c51ed46a6e9f4e8566304e42ce982bab","sha256":"352268074a0a0a3073a5306b3703a670db390fa6b90321255d189ea16e393064","sha512":"b1884b56edde2adec52b6df9ef1433a690fd17846d6f05f7f3bf5f9941b4dfcaefba99e4f4c7b7685e12bbf3abe88334c1462bbddd8e865f46bfcf5078d2e353","ssdeep":"","tlshash":"c2a00273574502412cb08c87151e10866076d2370f6030e996574e57e07ce509611f70","size":71,"data":"","first_seen":"2024-01-21T08:18:12Z","last_seen":"2026-06-11T22:39:48.5234Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-13T17:30:44.404423Z","times_seen":692901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-13T17:27:10.635104Z","times_seen":228889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/static/cdn/js/crypto-js.min.js","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","size":47576,"data":"","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-06-13T05:15:44.636041Z","times_seen":998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-13T16:08:09.123902Z","times_seen":337385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-13T17:27:10.635104Z","times_seen":228889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-13T17:30:44.404423Z","times_seen":692901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-06-13T15:36:10.162217Z","times_seen":21389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/js/common.js?t=202502181737","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c458e0b5eae118f14150f61b8b3b14c3","sha1":"44ec77999d1501943458d5bc6389d55faa291da7","sha256":"d23b3110201e1912d58ede8ebef913098fc51120f0f876ab4dc8c1783e9c177f","sha512":"2c1c9657b6e85e84afbfda6d9b33d60847837c08915a2ed766e12cde69f7df9cf067ebe74fc5bb3b5eefcbef712df35336d8e636336244cbb898e97d49e7e4f4","ssdeep":"192:jkMcAsj2VYO+qYmDA54qFicwAnESm9APt5vzKyo643LoYSjd6xZrzzYQWtZGhw4O:AwqXFqpA4qFJJnESEK+yo6uoYSjc/rzM","tlshash":"a5f1204f7a98ac8d539f0f775adf70c4f07a003b3884695dc08c98914aea90bdf516b9","size":8042,"data":"","first_seen":"2025-05-15T02:17:19.077102Z","last_seen":"2026-06-11T03:30:15.005183Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/axios.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","size":17843,"data":"","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-06-13T05:15:44.634238Z","times_seen":734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-06-13T15:36:10.162217Z","times_seen":21389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/crypto-js.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","size":47576,"data":"","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-06-13T05:15:44.636041Z","times_seen":998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cfc50c122a594462629c79559f261997","sha1":"bbb1fc73f00e848b5b90ffbd3a9293529580c202","sha256":"07bf65e47ca1c6bab8632bd9e761eac413391c447063c7833b724a2230c779c2","sha512":"3845b6aea031181d6361942b76feb3b58af5a41f894b7dbd6b1927892d8b141e8c89a727b3ae44c02ea4578c5b52ff97ee20215465c723079f7e448f5f822f45","ssdeep":"","tlshash":"7201c046047ff572cc129602412d93bad87905ebc4a454d6bb6ccd6494ed6701f1f46e","size":760,"data":"","first_seen":"2024-08-01T14:47:07Z","last_seen":"2026-06-09T10:20:57.520511Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vant.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6acac5582671becac49932e171aa29d3","sha1":"cc80b56375fea6bed369ad838427f49e5d51367d","sha256":"b0959628d4f805ae4bfca66b98ec3fb4b494f35928075b4b50a7959ff25c4310","sha512":"9ec185f81238c2cd309c9e32ce6a4aa05e3096e522a71eb0b0f7a746cfb17b0967aedc7ca1bfef63d74dbd85822b64ed20280c876b15684a7b93a872b86ec9e4","ssdeep":"3072:Ruhii1OdJpfzFgvzEnppgXJWgAVUi2muW1UYPYznLghgun6I2rNyJD:MhigsjAAeiIiYAnMy1","tlshash":"7444d88ab1c1b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5da13ff7d","size":277492,"data":"","first_seen":"2023-10-24T10:20:47Z","last_seen":"2026-06-13T05:15:44.651921Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1592fa6e6db30c79e20620630578e263","sha1":"dd3a73a63cc67ec91d6b05f5108f2aa68f0853b2","sha256":"1d7cbde50d93e3b13a6e8b8300081569b2e0709138a064a95031dd6574c94eb2","sha512":"218c51f1d64bdf402128370cd4c64051c444da40f23c1a5008808ace75e5e2361ff257c4e205338a1e3f77d7afcf778e8b2520e43a414c607a4f89d2e90b8985","ssdeep":"","tlshash":"c0c09ba553444ff47d308dd60589594645e0586b36262470e3e00652706cd317934634","size":145,"data":"","first_seen":"2024-08-01T14:47:07Z","last_seen":"2026-06-11T03:30:15.010976Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/static/js/iframe.js?t=202502181737","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da10bf2bcdc529a58bf0c78316b1020","sha1":"e301d3c6426e11260098c8e0ff269ec8846bf988","sha256":"a3eb42ee308e00a96fdc11f3a70e3f37c82273b3cb6d39998da3aff1228663d2","sha512":"8055b8f9d07cbdd86b99ab9529813417abb8332a4cfcbbbc1d992b39d21c7dad9da6ee267f98a2b19be55fddf6f3d4d6648a3a43c20567646b2369ffc613591c","ssdeep":"192:QZUFBzr/MhXT/Qzj74pTQpvHSpPfsPn/ViFGghR6U3fNDTj51VXDVEXNQgpKboPT:vBzTMhXT/Qzj74pTQNHSpPfsPn/VKNDI","tlshash":"cb32eb6dfb806945238e0b7b367fe4f8c01734863ff44c89c156a8945a9d316e5e1ab8","size":11059,"data":"","first_seen":"2025-05-15T02:17:19.06939Z","last_seen":"2026-06-08T09:26:03.878949Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"161ed8f2dc04f66ecd1bbc486de56a74","sha1":"e8e31f143ba47721a3c55bb941c1b53f9f5ab427","sha256":"cda96b2aafc524f67bfe37cd9712f9f0dfd28e2d95a2c572279d847251a82316","sha512":"d7c782897faa36e4b19b98eaf9776c11a352229d5bb31d90f6387738e10728ba6a841c15611d25291d058604f325e11bf5c93066cab0857ec5fa4119d2e931df","ssdeep":"","tlshash":"0ca022a3a3000ac20cb08cf3bb08000b2030c03b2a2030b0e2030803e208e002c20330","size":73,"data":"","first_seen":"2024-01-21T08:18:12Z","last_seen":"2026-06-13T05:15:44.660155Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-06-13T15:36:10.162217Z","times_seen":21389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-06-13T15:36:10.162217Z","times_seen":21389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"343426735be3d49a105ebe398699d75c","sha1":"bca1808dd24eb6b94a17926cb7f6fa4e537506a6","sha256":"ccb781c87ab5108fa69bb1845463d9a6c380c74017be5ab1d148fd10bd8b3d91","sha512":"3f13134723f3993d7cba6f0c54e402b557460b92208f37fd096436c7a1a1ca4d18971e183468c8c34ed9bb436b84cc4da353dd7989cacff21f283dc0e4f1f5d0","ssdeep":"","tlshash":"e7a0024ea52d4da87a6556113e3679453c52c05742435860bb0da56f5fb02c75001fd4","size":64,"data":"","first_seen":"2024-01-03T14:37:15Z","last_seen":"2026-06-06T17:52:18.791151Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vue.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","size":94151,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-06-13T12:33:44.071845Z","times_seen":4612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-13T17:27:10.635104Z","times_seen":228889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/css/vant/index.css","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/css/vant/index.css HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e97964a59a0c5-HKG\r\ncontent-encoding: gzip\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: \"68033f36-230ae\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WwJBHfbgjrXdxLryLt4OxqUxyiZGvN1hWFnmcg8iZHoQH2Gk7b4UDiT3J%2BoTroLh8vW39Q0aQrhy5PjwfQPFnsRrL5kpq%2B%2BpmPCd3CfKcGuGX%2BArc9cPewBVryJzpRdZvMX1OY%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: WAF-1.0\r\nx-request-id: 764f6780-26ed-483b-8ed6-c31b18bf91d1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5654d331a48a5a10adcb064e5ba0be68","sha1":"bfdf42b58ad4b60c3063d80b82978b56865b6fa0","sha256":"2ac1d6d6a6d0441e007ccb5076eba4541bd1d076395b582a788178f7249e57a8","sha512":"31a2e189a066f76785d7d122379f4b184140fc638ec457cdc9f16c720c667928c294e5795c7b0339049943645f130a8ef1d216e66181eac3c55ed1409233378c","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYkAfP1Iz1jVfSV:KTeVc5HMjajtfNKLSV","tlshash":"69e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-10-24T10:20:48Z","last_seen":"2026-06-13T05:15:44.651058Z","times_seen":487,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vant.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/js/vant.min.js HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e9796486a1fa6-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-43bf4\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6QB0bahfCObjVNzDNm%2BuzoIOqS4Ma9EzgV%2BcVt%2BXgWa1n9B9GWwazmcq8Ugxc6I%2BaMi2RoyjHTq7fscIOJuAw5p2g2wfbUfDv%2FuAH94vgUbkSw8n6FD6fi%2FFrKTJLvV1YoZWwE%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 582a95e8-64e1-4a34-b1e5-4427e5107603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"6acac5582671becac49932e171aa29d3","sha1":"cc80b56375fea6bed369ad838427f49e5d51367d","sha256":"b0959628d4f805ae4bfca66b98ec3fb4b494f35928075b4b50a7959ff25c4310","sha512":"9ec185f81238c2cd309c9e32ce6a4aa05e3096e522a71eb0b0f7a746cfb17b0967aedc7ca1bfef63d74dbd85822b64ed20280c876b15684a7b93a872b86ec9e4","ssdeep":"3072:Ruhii1OdJpfzFgvzEnppgXJWgAVUi2muW1UYPYznLghgun6I2rNyJD:MhigsjAAeiIiYAnMy1","tlshash":"7444d88ab1c1b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5da13ff7d","first_seen":"2023-10-24T10:20:47Z","last_seen":"2026-06-13T05:15:44.651921Z","times_seen":497,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/cdn-cgi/rum?","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1020\r\nOrigin: https://zu44ajgue8.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1020,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://us86d7awkd0f.xyz/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1218,\"startTime\":1769583408358,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"c6d19f14-4f1e-422c-9029-8a719d53d0fe\",\"location\":\"https://zu44ajgue8.xyz/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":2349,\"domContentLoadedEventStart\":2355,\"domContentLoadedEventEnd\":2358,\"domComplete\":2614,\"loadEventStart\":2614,\"loadEventEnd\":2614,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":1096,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://zu44ajgue8.xyz/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2614},\"siteToken\":\"4d2273fe076442afa421f0b753616ad3\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: https://zu44ajgue8.xyz\r\naccess-control-max-age: 86400\r\nalt-svc: h2=\":443\"; ma=60\r\ncf-ray: 9c4e979f4fca1fa6-HKG\r\ndate: Wed, 28 Jan 2026 06:56:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqu%2FwIbHX2PMHvXQmB7WUHjHWOWEKqcEZlvCLEO%2F0mghy3ePjWhAc9WETcB6fAsJpJ0fCzTtHkG0WbiAg7XbKFwa3bWBKRUFYYNWa1xvuHnjI%2Bl4VIbOia1e5L9xBSeC1grW7xs%3D\"}]}\r\nvary: Origin, accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 0ec52725-3d4f-43bb-9ddc-c649a1f90a44\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.55ulyhqkfn5.xyz/fast-endecode/main/request","fqdn":"api.55ulyhqkfn5.xyz","domain":"55ulyhqkfn5.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.55ulyhqkfn5.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:47:05 GMT","end":"Tue, 28 Apr 2026 01:47:04 GMT"},"fingerprint":{"sha1":"02:4A:86:BD:CF:08:37:8E:59:44:E3:C0:1E:CB:3E:86:F1:C1:21:75","sha256":"18:4C:E7:05:65:B4:83:B0:9E:C5:25:56:97:15:FA:76:B4:46:33:04:1F:78:37:D6:52:DF:AA:45:3C:BE:B5:B0"}}},"request":{"raw":"OPTIONS /fast-endecode/main/request HTTP/1.1\r\nHost: api.55ulyhqkfn5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://zu44ajgue8.xyz/\r\nOrigin: https://zu44ajgue8.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\ndate: Wed, 28 Jan 2026 06:56:51 GMT\r\nvary: Origin\r\nserver: WAF-1.0\r\nx-request-id: 150f852e-a2e8-4e3d-a04c-ce29f1538e85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"api.55ulyhqkfn5.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T06:56:44.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us86d7awkd0f.xyz","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:64:9E:6A:98:BE:37:9D:C9:B8:E7:FD:EF:6B:0D:6B:44:B5:57:C4","sha256":"C4:95:2D:D5:E9:0C:65:44:65:6F:88:CC:9B:18:B8:E2:64:89:3F:2B:1A:F5:79:2B:1B:25:15:60:2C:46:5B:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us86d7awkd0f.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 935\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nalt-svc: h2=\":443\"; ma=60\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4e977b6e38039f-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:45 GMT\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHV3iX2DYfd%2BxIqbgLciAybQoKWuLATAfSQraM4FUqUNbkLYRDR9Z0xGzQ0IGGX43SDwx3GZ5r0UuCsXu3Zk2NF5oaNnneleKQeCR7ewvU%2F16lQk3L2rLnRmRB4%3D\"}]}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=2,cfOrigin;dur=176\r\nvary: Accept-Encoding\r\nserver: WAF-1.0\r\nx-request-id: f4a1726d-6378-45ca-bfe3-2b4732e53d01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1864,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (503), with CRLF, LF line terminators","md5":"bc5a1d2bebf22c4188ae53216fe65fba","sha1":"ce4ac9b78122ce2f5d06c4341a921ec4ed90619b","sha256":"b6a26bd7773b087181de68ed9419b6e5d40025b0a1ddfe89e00f82c535259816","sha512":"ca9289de48a99965a10509126aaa37560de05802da89e869b4708eaa43bc1f70a28a6accec90643d5af859790cf2500069053699de15ba02d99aab671b95ea70","ssdeep":"","tlshash":"953144672ca0844c8033c3646ff2b64aee2a596357415410b7edb6a34fb0a5dc49766a","first_seen":"2025-10-31T17:56:52.706897Z","last_seen":"2026-02-20T08:47:33.382532Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":674,"dns":41,"connect":204,"send":0,"wait":393,"receive":0,"ssl":426},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://zu44ajgue8.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c4e9795ade056a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-13T16:08:09.123902Z","times_seen":337385,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/pz1.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/pz1.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6359\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 6780\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979d7e6b1fa6-HKG\r\ndate: Wed, 28 Jan 2026 06:56:50 GMT\r\netag: \"68033f36-18d7\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkFqyQ0MfHlH9aYfrBP%2FnBpHPKHusv%2BXrYA%2BxUmog8D%2BknrwHybTxHSYro2kwT1zLiD5jccnU8TzsTuEZVdT7sqTKVPyCOkwYVBUGfACXH8cmuGtfRgYhMhqY5tCgXfeCOdEsGk%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 4aaa6dd8-de33-4151-b8da-43177459b32c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 95, 8-bit/color RGBA, non-interlaced","md5":"ebb1b9066ac37a22a5ba0c2c419cb7af","sha1":"ee621f80857dfe4d36721afb4da97bbbca1fed2c","sha256":"8bd85f4ff0e271ecdb9473b34e875ce82ebe82c1e3c09399286fd1a99fcc7caf","sha512":"d0cd0eb82f24b00f11df159d8012f34a193856317cd2e144b1458b0783fa97a5d5c4b1a1d17c7ca614af3a357dc9fd56e6a4522b49d7f7193487f5ce3e18d68d","ssdeep":"192:bOBu2dN0YamS/89D+8fIuNijcUAuRIB7JWKCop4suS564:bOBuWN0YYgD+8fdNij5AB7/p4U564","tlshash":"15d17ef55c1450aa196f7b32c5af4a3ec74206b9589710cd13880e32a74ce6a7a89ead","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-06-13T05:15:44.637411Z","times_seen":424,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/static/js/iframe.js?t=202502181737","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:45.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us86d7awkd0f.xyz","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:64:9E:6A:98:BE:37:9D:C9:B8:E7:FD:EF:6B:0D:6B:44:B5:57:C4","sha256":"C4:95:2D:D5:E9:0C:65:44:65:6F:88:CC:9B:18:B8:E2:64:89:3F:2B:1A:F5:79:2B:1B:25:15:60:2C:46:5B:F0"}}},"request":{"raw":"GET /static/js/iframe.js?t=202502181737 HTTP/1.1\r\nHost: us86d7awkd0f.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nCookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nage: 4660\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e977ece67039f-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:45 GMT\r\netag: W/\"68033f36-2b3d\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yaiix13%2Ft5HRXU3UuwIMF3SdPDrKuXV9poZchKHwYyJmsknCFpaRrtoifGBEixuNGHzjLHCiigUCwhIuYekhC8RUcEJCdiMLXcaLHG7FCcRQ0UIk%2FTIP7uYoCs%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: ade03064-1260-4118-b25a-ebd069ab09cd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11069,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11048)","md5":"1da10bf2bcdc529a58bf0c78316b1020","sha1":"e301d3c6426e11260098c8e0ff269ec8846bf988","sha256":"a3eb42ee308e00a96fdc11f3a70e3f37c82273b3cb6d39998da3aff1228663d2","sha512":"8055b8f9d07cbdd86b99ab9529813417abb8332a4cfcbbbc1d992b39d21c7dad9da6ee267f98a2b19be55fddf6f3d4d6648a3a43c20567646b2369ffc613591c","ssdeep":"192:QZUFBzr/MhXT/Qzj74pTQpvHSpPfsPn/ViFGghR6U3fNDTj51VXDVEXNQgpKboPT:vBzTMhXT/Qzj74pTQNHSpPfsPn/VKNDI","tlshash":"cb32eb6dfb806945238e0b7b367fe4f8c01734863ff44c89c156a8945a9d316e5e1ab8","first_seen":"2025-05-15T02:17:19.06939Z","last_seen":"2026-06-08T09:26:03.878949Z","times_seen":135,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/cdn-cgi/rum?","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:46.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us86d7awkd0f.xyz","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:64:9E:6A:98:BE:37:9D:C9:B8:E7:FD:EF:6B:0D:6B:44:B5:57:C4","sha256":"C4:95:2D:D5:E9:0C:65:44:65:6F:88:CC:9B:18:B8:E2:64:89:3F:2B:1A:F5:79:2B:1B:25:15:60:2C:46:5B:F0"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: us86d7awkd0f.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1022\r\nOrigin: https://us86d7awkd0f.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nCookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1022,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1272,\"startTime\":1769583404553,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"a37484e8-67cc-48e5-ac31-92c85cc966ee\",\"location\":\"https://us86d7awkd0f.xyz/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1692,\"domContentLoadedEventStart\":1697,\"domContentLoadedEventEnd\":1702,\"domComplete\":1702,\"loadEventStart\":1702,\"loadEventEnd\":1703,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":25,\"domainLookupStart\":25,\"domainLookupEnd\":67,\"connectStart\":67,\"connectEnd\":699,\"secureConnectionStart\":273,\"requestStart\":700,\"responseStart\":1092,\"responseEnd\":1093,\"transferSize\":1776,\"encodedBodySize\":935,\"decodedBodySize\":1864,\"name\":\"https://us86d7awkd0f.xyz/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1703},\"siteToken\":\"4d2273fe076442afa421f0b753616ad3\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: https://us86d7awkd0f.xyz\r\naccess-control-max-age: 86400\r\nalt-svc: h2=\":443\"; ma=60\r\ncf-ray: 9c4e9781bd8a02d6-HKG\r\ndate: Wed, 28 Jan 2026 06:56:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2YxNfQUHJZLk3KCqqddoEEc91fUOgO%2Bin7mplZ4ap5hz7coGcgTnQgJv3cbOs%2BSO1m9yIOWB94dI%2FuC93LEjup9GzSN5wmVPKcOSCNzhqdKaf1FsTl1Ir%2BxBYM%3D\"}]}\r\nvary: Origin, accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 4d5f0857-313b-4ad3-bd98-29a72a8fdad5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.55ulyhqkfn5.xyz/fast-endecode/main/request","fqdn":"api.55ulyhqkfn5.xyz","domain":"55ulyhqkfn5.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:48.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.55ulyhqkfn5.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:47:05 GMT","end":"Tue, 28 Apr 2026 01:47:04 GMT"},"fingerprint":{"sha1":"02:4A:86:BD:CF:08:37:8E:59:44:E3:C0:1E:CB:3E:86:F1:C1:21:75","sha256":"18:4C:E7:05:65:B4:83:B0:9E:C5:25:56:97:15:FA:76:B4:46:33:04:1F:78:37:D6:52:DF:AA:45:3C:BE:B5:B0"}}},"request":{"raw":"POST /fast-endecode/main/request HTTP/1.1\r\nHost: api.55ulyhqkfn5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://us86d7awkd0f.xyz/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://us86d7awkd0f.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"data\":\"XSxLTtsu6J97fhe4CLRSxgBWCJNRsfBA9XXsUuN8VC8yzCREoyXHJPp0bNdbY1El\",\"time\":1769583407024}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccess-control-allow-origin: *\r\ndate: Wed, 28 Jan 2026 06:56:48 GMT\r\nvary: Accept-Encoding, Origin\r\nserver: WAF-1.0\r\nx-request-id: 803cc8d6-556c-4b66-9602-dc725b7fee1c\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2296,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bc9ea9c7b536eca06dca9b01aecce892","sha1":"09f8a26b5576e18330eb2e01e9eb4fe79b1cf7f3","sha256":"be28afcb25f9d15986bf372096e21d17d494ecb5e8d7c57111e03543caa3bd70","sha512":"21bc1b19c7331c2553995c3e8c5c36bf0b7152b8f6108a414dd1b0f856211de01659dd52f6df5e4966ab609104134c213d24551ff2d1608bc28c07adbd7034f3","ssdeep":"","tlshash":"46414ba23a80b1fd2e7c5631179bd5c22af4311d00972a78189a6a1c8317f186e8f174","first_seen":"2026-01-28T06:57:11.200983Z","last_seen":"2026-01-28T06:57:11.200983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"api.55ulyhqkfn5.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/axios.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/js/axios.min.js HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 6784\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979628581fa6-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-45b3\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPHLGJNDKvUOK6Sqqxx9Bnb7sT%2FMU4PEwO7bNccUGjDoJVtzV1pECCuh2l7i7HpXIkvXNvoBRjllzXdrngenSB%2FEbCUm8jh9OEt215PnoWh8XnfSGYd1iB7HbENOqhr5wSBD2Y0%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 002211f1-750f-4ae9-aec1-b0aa9f9110e5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17808)","md5":"d1e71c0ca404956d46e475dbe30566b8","sha1":"474c81de5ff1418895a10cb6e03f9ab522914b69","sha256":"1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e","sha512":"21dafbc553673160ac80142c7134828af04d5961f7d28a3fb7360e46f88e0ab2ca981691c517e59b69a23614c524d5665ef0adce09ace679491786b3da18869c","ssdeep":"384:3/v60vgp81DaP9epzrPt/BL3dkyRuHrxytZ5CISD1ViQCKk:HiigP9exrthkJrifV","tlshash":"d782d7ca7594f0a747e770f040af590fb37ba529688d88a0f650e8e66c7910d8733f69","first_seen":"2023-03-13T01:01:23Z","last_seen":"2026-06-13T05:15:44.634238Z","times_seen":734,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/crypto-js.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/js/crypto-js.min.js HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e97963a33a0c5-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-b9d8\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qW3vt7U7PiDO8Q9zvOxdKTeCH38MW843WIedilDDdg6aM7o2D%2FoK6l79W9D202re8cJmP4fNw4NXsoHb6eARKg9N9hjAKXnmLrg7U%2BvBRNvqZiU%2FgL3LKOWwbvcGxcP53b0koik%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 2411d93c-342d-4899-9393-cb1ca2f95713\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47576), with no line terminators","md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-06-13T05:15:44.636041Z","times_seen":998,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/pz2.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/pz2.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2605\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 6780\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979d8e7a1fa6-HKG\r\ndate: Wed, 28 Jan 2026 06:56:50 GMT\r\netag: \"68033f36-a2d\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyECMFQVVVHeNotyTLIC2GTqB%2FR%2FxRidaCoIzCuJJ2mKiveBumKA4YfIanuJLgq06sIk6Okoe5jfiyjaU%2B08Rkc3tgYcfGco7VsCox%2BHwwjdWsoZEsCEked4oM6G4bRKWvZw5v8%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 0e8024ff-9563-44c9-baeb-adcf0bd0572d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 48, 8-bit/color RGBA, non-interlaced","md5":"8a5bc601f532c9747bbebcc63f96f705","sha1":"b50af210d6d63cda94f5c57f913f87165108bb31","sha256":"379f832f36508310c768174d0afa2143f2d2913477b0054570ca8ef0b6d9b917","sha512":"0af3a70ecc25d13bb36a621642f9fb3474280507bdfa280eadbe8d95d2f6a5e95bd93af0f6e0d9cc5cdf44eac92db9f91fcff807791800a1d503666096faebc2","ssdeep":"","tlshash":"6d516ce3412e025d08f46cd0a24a7741b542d51ae18d2f1d3c47d85d5df31b8b7052b6","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-06-13T05:15:44.63874Z","times_seen":424,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/pz5.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/pz5.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6951\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 6780\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979d99e7a0c5-HKG\r\ndate: Wed, 28 Jan 2026 06:56:50 GMT\r\netag: \"68033f36-1b27\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38VtPRK51BfyQJKrEXJ%2FOCXiICdrcz2706aK1484Wh%2FYOxUW%2BYMW0IgNAL1R2OCuvwe3Etlcp1MaOMjUwM9sxhn8Wq2yqvwCqkA9FOHC3Is%2BScgg39axmW6kkJaSsVegTkXWHlI%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: ab744e1a-498b-483b-a4a3-3d321956aa20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 61, 8-bit/color RGBA, non-interlaced","md5":"d894519d43b7a46a37ec0aa8eb7c928e","sha1":"66e6c1f4a9e37e5d909cb71a015deb2f24279a8d","sha256":"7ecec350edbd7b0f13acd8e4a0c1d0718cec996fd7bbb8bdd601dcadbd6594a6","sha512":"97f028fb16306388be0ba39d7faa1eeafc523db2b59b716e577f1b54c5a63730ad0bc1d0a26a9ba7bc79b2ce0f5cd7f8680f9a70e39e6f774bc6d19ceea6fdd9","ssdeep":"192:lwxkxPYhNrHTX7YCzupmBPmct9GjbKBTv0T+3:AkxwhpXULmBPmcujbUvT3","tlshash":"20e19e92a1b2c16f5416b5bcbf4467ea60a60e31ed6d3c0860da35889c321dbe3d09a2","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-06-13T05:15:44.641841Z","times_seen":423,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:45.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://us86d7awkd0f.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 06:56:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c4e977e4a9356a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-13T16:08:09.123902Z","times_seen":337385,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vue-clipboard.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/js/vue-clipboard.min.js HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e9796482174f0-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-35b4\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2t3YEzdhiT1levEeL6z3Gbw37L%2B1p%2FPYq2ujaD9gPEUXhZfkwTFpL%2Bdtd6tcCPASS14OV3PuAu34fHBjJ8LCyd3JeL1d8RPE7UcTXp0zLFEO%2FqpVB4aFontqE3yag1ikso924T0%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: dc864e6b-d270-4f4e-9d1a-b3c57131a5fe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13748), with no line terminators","md5":"8856c5f65c23d45fe8f4eec0c6dc6a44","sha1":"015add8db60dfd6b903f201f84b4bcfa10cde132","sha256":"7122add2d588267de45bc07c225bc54761a51516ed7c704342b639e48f501759","sha512":"668c76b80708523b21ef9eed7a8bf41ddd6e18d09b9a82f94609d7d0df15baca7f7cb7b8493036bec59f9b6f2faef77cdedce59998497dae334cfaa5377b16ec","ssdeep":"192:27VIW9HL4f3wo+1k7BoWsjwuLJnHu4wamahW/C5nZd0fkA4pS/x0usECf8w:27iTf34Wsj9LJvwPwWaLGSpS50Q41","tlshash":"4a528498b2d171b1d6e770a9412f820bf332a575649e80c4e538dce1adbca8e5467f3c","first_seen":"2023-03-08T14:22:20Z","last_seen":"2026-06-13T05:15:44.643732Z","times_seen":520,"resource_available":true,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/pz3.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/pz3.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3731\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 6780\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979d9af103e7-HKG\r\ndate: Wed, 28 Jan 2026 06:56:50 GMT\r\netag: \"68033f36-e93\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfYU%2BhLNXjn7tD8sbGjSKyqOX4dPzJy%2BKsW17bK%2BysdrlWoMiCiPaQWzKOYAFWIydpsbuD3DazfrrgKbxlbRJs2o6Mf1g4zTDVC%2BFgagLUFad6b388n6DhbqCO5hcE%2FpZmLp%2Fb8%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 45532a8c-0a1c-4193-aeec-264777f6d8fd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 352 x 36, 8-bit/color RGBA, non-interlaced","md5":"682623e9d9fe5d8f304c7261f20e96cd","sha1":"fdddeaadc13dd187932bce5e5e04da5bc149a204","sha256":"90dcba37e59c9b18bf3b18423d9bbdad9ece87dc558db3a86882fca9c1fc1569","sha512":"b1c621399fafba5bf1971945555415f57b22a0c8a368f9d6a3940f49661b637f9d2b2d7ebba8c1d984e6dfa308ac6cd437b40c87dbee99304b754a892d05d748","ssdeep":"","tlshash":"a9715cf12760b894560fd1907f67a51829f603f118121f10942a91efdc3ea979e5bd8c","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-06-13T05:15:44.640969Z","times_seen":424,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/static/cdn/js/crypto-js.min.js","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:45.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us86d7awkd0f.xyz","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:64:9E:6A:98:BE:37:9D:C9:B8:E7:FD:EF:6B:0D:6B:44:B5:57:C4","sha256":"C4:95:2D:D5:E9:0C:65:44:65:6F:88:CC:9B:18:B8:E2:64:89:3F:2B:1A:F5:79:2B:1B:25:15:60:2C:46:5B:F0"}}},"request":{"raw":"GET /static/cdn/js/crypto-js.min.js HTTP/1.1\r\nHost: us86d7awkd0f.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nCookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nage: 4660\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e977ecfeb02d6-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:45 GMT\r\netag: W/\"68033f36-b9d8\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjSNDa98jXhG0brHNlYwoSSRvcD%2ByvIFSbWaR4L9QTuqVpXZipZKZHdnVU7RzEnbxPXm50GJCdYzyEUNE%2BkRmcJifb2jWOgPZMlIXsNCQK8QzpHqAaPA7DK7yaE%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: ec4140b1-b25d-4789-a4ac-dcc60d13d640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47576), with no line terminators","md5":"c8b215ef1c396901ab19c41a7ac42cd7","sha1":"00e971d00ca3e26ef1bc0f7586e16c5e30296ebe","sha256":"817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010","sha512":"7b673e3b43efcad7a491d24b73cd831df6ba2daf133caccedbf0c503ded87874db8830b028cce5a2ea4933a2e57ff5b82b5f7e376d60172a65564bf32f8a59c5","ssdeep":"768:JxMJNNuN2XlYGu0kG+QZfrORTIM9OT81KMpBs9oQvu:0Jw2hu0uifrIhdXs9oau","tlshash":"4b232ac1a19c605163a774d00d3f750bb553363a460a85ecfa68e9eeecbc6da903dd38","first_seen":"2023-03-10T18:36:37Z","last_seen":"2026-06-13T05:15:44.636041Z","times_seen":998,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx9x1m87xsj6wocb.xyz/","fqdn":"wx9x1m87xsj6wocb.xyz","domain":"wx9x1m87xsj6wocb.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:46.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wx9x1m87xsj6wocb.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 05:22:33 GMT","end":"Mon, 20 Apr 2026 05:22:32 GMT"},"fingerprint":{"sha1":"DE:B2:4C:75:D7:95:F7:EF:12:1E:97:DE:AB:56:CD:9D:FC:69:DB:4D","sha256":"B8:11:2B:D2:17:9F:C6:55:B4:8D:6D:47:F2:34:C7:0D:32:D9:B5:08:C8:03:11:08:87:D6:53:5B:62:BB:E2:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wx9x1m87xsj6wocb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://us86d7awkd0f.xyz/\r\nOrigin: https://us86d7awkd0f.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 192\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\ndate: Wed, 28 Jan 2026 02:47:20 GMT\r\netag: \"4dee82456c32778c0f4d829155f2e23b\"\r\nlast-modified: Wed, 28 Jan 2026 02:47:03 GMT\r\nx-amz-hash-crc64ecma: 13960548221583170865\r\nx-amz-request-id: Njk3OTc4YjhfYzVkNDIwMDlfODRjOV9mZWE0OWY=\r\nx-amz-trace-id: OGVmYzZiMmQzYjA2OWNhODk0NTRkMTBiOWVmMDAxODc0OWRkZjk0ZDM1NmI1M2E2MTRlY2MzZDhmNmI5MWI1OWE4OGMxZjNjY2JiNTBmMTVmMWY1MzAzYzkyZGQ2ZWM4MzZkMTZiZDQxYTg4MzRiMzIwYzRkYTRjMWFkNDM3YjQ=\r\nx-cache-lookup: Cache Hit\r\nx-nws-log-uuid: 10388220679305884999\r\nserver: WAF-1.0\r\nx-request-id: fce3ad67-51fb-406d-9831-d3b7783d8f82\r\naccess-control-allow-origin: https://us86d7awkd0f.xyz\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":192,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"4dee82456c32778c0f4d829155f2e23b","sha1":"8e1b20d4bf4815e70f1a55f1ae3cdf5879735369","sha256":"aa1358b41cbc29294c7a5da8418c16effd7565feb7c80f10f8554c619021c90f","sha512":"246bc72f24d997ca76d74ea4dcae1f9a10ca345c9ea6696b4069cd586acc91b49fb6a059acc6dda7b0123c583d589faf115240dab18c99fbbe92a6f8733c289e","ssdeep":"","tlshash":"b5c002eb04080742e7c298ccc00cf758e16bb2090e87a08dc08994a30c02cb038a47cc","first_seen":"2026-01-28T06:33:53.508964Z","last_seen":"2026-01-28T06:57:11.205166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":528,"dns":102,"connect":208,"send":0,"wait":217,"receive":1,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us86d7awkd0f.xyz/favicon.ico","fqdn":"us86d7awkd0f.xyz","domain":"us86d7awkd0f.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.235","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:46.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us86d7awkd0f.xyz","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 22 Jan 2026 00:00:00 GMT","end":"Wed, 22 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:64:9E:6A:98:BE:37:9D:C9:B8:E7:FD:EF:6B:0D:6B:44:B5:57:C4","sha256":"C4:95:2D:D5:E9:0C:65:44:65:6F:88:CC:9B:18:B8:E2:64:89:3F:2B:1A:F5:79:2B:1B:25:15:60:2C:46:5B:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us86d7awkd0f.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nCookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 775\r\nage: 4659\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e9782f932ddbc-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:46 GMT\r\netag: W/\"68033f36-310\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Mj4PDVy4pUZ0Dpui%2BrA1jJwXZMUPKhXEkM4whyR29yzAF7iIqhiPpa%2FUa8ELWH9SPDXybP5GRDOSt1zkA5%2BnNGLuvt3DoTlLm60C3EH4A0lO0Sl1HczWqgOdok%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: b347f727-4783-44eb-b5b6-39fbe4885c43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"f01fe0b27ab5620848295331cd6e8eb0","sha1":"dd9018d2711a9740e1395011e8623a04da3c0ff5","sha256":"d1a6467455a3522674023766194f6629c36ca79020d9b8ee0c2ae93de5c0bee7","sha512":"7a2ad3968e73478a36ad2ed39534ec7835589b45526f910055b988131c1354f080a837fb2e8cace03f30fd11939312fe934a89172122151b910d21e5298ee7bc","ssdeep":"","tlshash":"f00120e292fbd4afdb96023217a607d46cbdc2d92e5ad30e95336122deb23435427711","first_seen":"2023-10-28T00:26:15Z","last_seen":"2026-06-11T22:30:57.621928Z","times_seen":676,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/cdn/js/vue.min.js","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/cdn/js/vue.min.js HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e97962fdb74f0-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-16fc7\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ao8mfLNo1pN76KVX%2FfcyY%2FV9k6pMB1CDmutUcESfYQui1FkcLR6DIdq6e1FYHovEtRZTj8ICcW5rioPS3%2BLrO7JAkB%2BP5J3wRv37I0tl2EZ6rKqk%2BPMb6f6v3R0n00SZG8bB8Qk%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: 91cd7796-5b22-4968-8687-246c9f654721\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"b21b8531847604ab5f2f5caaef51ba31","sha1":"da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1","sha256":"9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17","sha512":"5dd519e67acd915c924019e7339bf30ea1da8bcdb74a9a2ad56de9268430a264236bea38370d04c35a69c68e5b845daf32e83ab1f89b84a59c349b06f158fdb6","ssdeep":"1536:3UsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:VYegDM62uqiq2wkxL+2w","tlshash":"bb9309dd3289b07157eb31f1107f140bf2366a19ac0ec194b122e4d67db984d92abe7e","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-06-13T12:33:44.071845Z","times_seen":4612,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:48.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us86d7awkd0f.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1400\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nalt-svc: h2=\":443\"; ma=60\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4e97923d241fa6-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xshcm0rlBfF0AiNSsDApmm0xc7DpqBVooJUxBiXSR0eJt9JJ1F7CXH0vEfb12XdiMYjQJUV%2FSbrOFUsLqXYpy5uufV8tNMrQvdMOAWxhvuJZhSQ1qEnNvZSJoHJCRfdBGJ3daEw%3D\"}]}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=326\r\nvary: Accept-Encoding\r\nserver: WAF-1.0\r\nx-request-id: c836c8ff-ea16-496c-92ca-7d0c100f046a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":5178,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (503), with CRLF, LF line terminators","md5":"3e4bdc76d1e34a55c78146d9686aca38","sha1":"ff255b537abf5b175b09ddc1833b15013e9a4ec8","sha256":"13a7552cdec40c437e0ee7191211eb986c415aacf1b97e418b67e644b4c800c9","sha512":"923941a102d76f1ae01bc5c127af95afb68529236313fb2e26ca8e054a390a07c0d136f70f0ed0c0282735848d694fe5fd3c2e59dab8074d24c46ed99dab1931","ssdeep":"96:1TD5yQpi5OFVrnzma+AdSs3YeML6RUhqw0v:dxuerzfJdSs3YeQ0zw0v","tlshash":"b3b10216dc91a4069473d2511fb2634ffb36d023d3428518bbfc6ad20fb494888abfd9","first_seen":"2025-10-31T17:56:52.720326Z","last_seen":"2026-02-20T08:47:33.384065Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1635,"timings":{"blocked":543,"dns":123,"connect":204,"send":0,"wait":549,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/js/index.js?t=202502181737","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/js/index.js?t=202502181737 HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e97964c1803e7-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-2015\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFplA4ktTQb6iOFQGFgGvSdzb2uew2jk4tCPbZy0Gco9G0DGgEzzuligS1Iavqf6Hh9fFd3GdjYu47vlsTRscsNQE6krMb8O7GhK8dc7kpWbC9vyVhLBvG5ChGp4%2FPfmOxybisA%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: c92f6671-b37c-4a08-87ca-c764b0ed7896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8186)","md5":"303e500d69fed15786aafe6df51d184f","sha1":"8f23dd063cf41e92500597f9ab06fe1c8a9ca4d5","sha256":"4ff2707a9403f59bc5316effb1f3762f2552546cece7bc883c921f78ecebd769","sha512":"db4b0e2b95581eabcd172789c24f62d9275527c36ca40ed85e28fe67e26e60ed2f0c2702ead3b710213106d845aedc762c48ddff7659f5070c5c971977a53262","ssdeep":"192:9TOkm9rXWnVq7KXx0mp34jDmCqy4NJOER8CqpZKxWh0r/onp2GNlw5idjGDK2Czq:B69rXWnVq7KXx0mp34jyCqy4NJOER8CH","tlshash":"3e0251917fc06d9923c6457b25277488cc16176a3cc844b8d0a4f86c3f6da17e7a8bf4","first_seen":"2025-05-15T02:18:09.480112Z","last_seen":"2026-06-09T10:20:57.511628Z","times_seen":173,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.55ulyhqkfn5.xyz/fast-endecode/main/request","fqdn":"api.55ulyhqkfn5.xyz","domain":"55ulyhqkfn5.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:51.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.55ulyhqkfn5.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:47:05 GMT","end":"Tue, 28 Apr 2026 01:47:04 GMT"},"fingerprint":{"sha1":"02:4A:86:BD:CF:08:37:8E:59:44:E3:C0:1E:CB:3E:86:F1:C1:21:75","sha256":"18:4C:E7:05:65:B4:83:B0:9E:C5:25:56:97:15:FA:76:B4:46:33:04:1F:78:37:D6:52:DF:AA:45:3C:BE:B5:B0"}}},"request":{"raw":"POST /fast-endecode/main/request HTTP/1.1\r\nHost: api.55ulyhqkfn5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://zu44ajgue8.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"data\":\"bff0ow5ViEFyYFJ6imtqhYGR6VkMnu8XqH3LNsUolh/bYMVG6QRFbhSTiJi+wTdw\",\"time\":1769583410951}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ndate: Wed, 28 Jan 2026 06:56:51 GMT\r\nvary: Accept-Encoding, Origin\r\nserver: WAF-1.0\r\nx-request-id: 22e45642-224a-4889-944a-8331fbac44a9\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2296,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d4a8350fa6e455783338a7c13b729df3","sha1":"e861533aeb0f00c85974554ca07a628448d60dbc","sha256":"c2ee3cec397ae0270792ac223581fc8cd354c8eaef17e996f89064db7ca31354","sha512":"54bd8c6949de15b80302818dbf888ab4927db28df7abe2a130dd57f42040ab56b66b69263bb439c4a91a744503bc4521c172eb1531e4b716557bf62f6d34b852","ssdeep":"","tlshash":"5c4118e0611544f992aa33e8f48b404d8e788b06c34e63b0f0252d7b5d75f0c6e7ba2e","first_seen":"2026-01-28T06:57:11.20813Z","last_seen":"2026-01-28T06:57:11.20813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"api.55ulyhqkfn5.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.55ulyhqkfn5.xyz/fast-endecode/main/request","fqdn":"api.55ulyhqkfn5.xyz","domain":"55ulyhqkfn5.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://us86d7awkd0f.xyz/","date":"2026-01-28T06:56:47.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.55ulyhqkfn5.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:47:05 GMT","end":"Tue, 28 Apr 2026 01:47:04 GMT"},"fingerprint":{"sha1":"02:4A:86:BD:CF:08:37:8E:59:44:E3:C0:1E:CB:3E:86:F1:C1:21:75","sha256":"18:4C:E7:05:65:B4:83:B0:9E:C5:25:56:97:15:FA:76:B4:46:33:04:1F:78:37:D6:52:DF:AA:45:3C:BE:B5:B0"}}},"request":{"raw":"OPTIONS /fast-endecode/main/request HTTP/1.1\r\nHost: api.55ulyhqkfn5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://us86d7awkd0f.xyz/\r\nOrigin: https://us86d7awkd0f.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccess-control-allow-headers: content-type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-allow-methods: POST, GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ndate: Wed, 28 Jan 2026 06:56:48 GMT\r\nvary: Origin\r\nserver: WAF-1.0\r\nx-request-id: 9eb7cb10-2f06-4d6e-8ca3-d5960ab9d5c5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":1986,"timings":{"blocked":887,"dns":460,"connect":208,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"api.55ulyhqkfn5.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/js/common.js?t=202502181737","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/js/common.js?t=202502181737 HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e97962bbf03e7-HKG\r\ncontent-encoding: br\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: W/\"68033f36-1f6a\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvkKJGA15XbO4CV6%2Fvl7yM%2BF27fgx7GRt4FKSfr18TGUhzJc2%2FHoJz7NG5Di7y3SxariNxkC0Mi4h6UXojP1FHUXKxAx25idw%2BlGByGBTMAd3QNsSAKk%2BjIC896SDcGPOJ3Nyv8%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: c1253d68-e807-4c45-adaa-0b891813f64c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8042,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8041)","md5":"c458e0b5eae118f14150f61b8b3b14c3","sha1":"44ec77999d1501943458d5bc6389d55faa291da7","sha256":"d23b3110201e1912d58ede8ebef913098fc51120f0f876ab4dc8c1783e9c177f","sha512":"2c1c9657b6e85e84afbfda6d9b33d60847837c08915a2ed766e12cde69f7df9cf067ebe74fc5bb3b5eefcbef712df35336d8e636336244cbb898e97d49e7e4f4","ssdeep":"192:jkMcAsj2VYO+qYmDA54qFicwAnESm9APt5vzKyo643LoYSjd6xZrzzYQWtZGhw4O:AwqXFqpA4qFJJnESEK+yo6uoYSjc/rzM","tlshash":"a5f1204f7a98ac8d539f0f775adf70c4f07a003b3884695dc08c98914aea90bdf516b9","first_seen":"2025-05-15T02:17:19.077102Z","last_seen":"2026-06-11T03:30:15.005183Z","times_seen":176,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/kefu.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:49.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/kefu.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 13900\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 5504\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979618491fa6-HKG\r\ndate: Wed, 28 Jan 2026 06:56:49 GMT\r\netag: \"68033f36-364c\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pUxYEmvMTNJlUmysnbJT9oIPmGGIaNUWkcI8mEGnpksO9xV6S%2FQdUdu7IhQ5iCt6PbAN9W8FNDC80D5qrhc0YFn%2BsAb51ZcKgu92x8q6IdbQDRVNy7wyMJ7eBR3FafHVkGrudI%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: f396968e-488e-405f-80d8-72deb769d33e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 132, 8-bit/color RGBA, non-interlaced","md5":"a66654f787c6b7fb5d8451e64531cc27","sha1":"242ddada957574e0869908cdab4d76aeabcb3ba1","sha256":"b0f2cd02de4d2a5eccd30f40abacb5224478e521e357994d685cfc8af7301372","sha512":"cc7c2399d223cc4dad8999d93697ec61433d3009ae1096b53ebbd1d1d5cc4f4a95222b308e63cfca81f4732f92d212a353216ca674c5d5639900ecf9b98b4d42","ssdeep":"192:rPyGM5J0FE6XQXLNnxNYTNiRmldj28f0pxUO3XtPayB/aCfF97au1sA2bPG6IAAH:rP1ML0FEpxNsioj27pHNCq/1vWPA2bs","tlshash":"7452e0918a9904d27df7da77914300e563af709bcd9c7bc5a6fd9cbf0b80018da0a40b","first_seen":"2023-12-31T04:47:31Z","last_seen":"2026-06-09T10:20:57.512118Z","times_seen":246,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wx9x1m87xsj6wocb.xyz/","fqdn":"wx9x1m87xsj6wocb.xyz","domain":"wx9x1m87xsj6wocb.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wx9x1m87xsj6wocb.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 05:22:33 GMT","end":"Mon, 20 Apr 2026 05:22:32 GMT"},"fingerprint":{"sha1":"DE:B2:4C:75:D7:95:F7:EF:12:1E:97:DE:AB:56:CD:9D:FC:69:DB:4D","sha256":"B8:11:2B:D2:17:9F:C6:55:B4:8D:6D:47:F2:34:C7:0D:32:D9:B5:08:C8:03:11:08:87:D6:53:5B:62:BB:E2:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wx9x1m87xsj6wocb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zu44ajgue8.xyz/\r\nOrigin: https://zu44ajgue8.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 192\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\ndate: Wed, 28 Jan 2026 02:47:42 GMT\r\netag: \"4dee82456c32778c0f4d829155f2e23b\"\r\nlast-modified: Wed, 28 Jan 2026 02:47:03 GMT\r\nx-amz-hash-crc64ecma: 13960548221583170865\r\nx-amz-request-id: Njk3OTc4Y2VfZjY3MTUzMGJfMTA4MjJfMTkyYTRiMQ==\r\nx-amz-trace-id: OGVmYzZiMmQzYjA2OWNhODk0NTRkMTBiOWVmMDAxODc0OWRkZjk0ZDM1NmI1M2E2MTRlY2MzZDhmNmI5MWI1OWE4OGMxZjNjY2JiNTBmMTVmMWY1MzAzYzkyZGQ2ZWM4MzZkMTZiZDQxYTg4MzRiMzIwYzRkYTRjMWFkNDM3YjQ=\r\nx-cache-lookup: Cache Hit\r\nx-nws-log-uuid: 7832156535449897459\r\nserver: WAF-1.0\r\nx-request-id: 890c3bf9-8880-47cc-a608-1e5bba90a927\r\naccess-control-allow-origin: https://zu44ajgue8.xyz\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":192,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"4dee82456c32778c0f4d829155f2e23b","sha1":"8e1b20d4bf4815e70f1a55f1ae3cdf5879735369","sha256":"aa1358b41cbc29294c7a5da8418c16effd7565feb7c80f10f8554c619021c90f","sha512":"246bc72f24d997ca76d74ea4dcae1f9a10ca345c9ea6696b4069cd586acc91b49fb6a059acc6dda7b0123c583d589faf115240dab18c99fbbe92a6f8733c289e","ssdeep":"","tlshash":"b5c002eb04080742e7c298ccc00cf758e16bb2090e87a08dc08994a30c02cb038a47cc","first_seen":"2026-01-28T06:33:53.508964Z","last_seen":"2026-01-28T06:57:11.205166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zu44ajgue8.xyz/static/img/pz4.png","fqdn":"zu44ajgue8.xyz","domain":"zu44ajgue8.xyz","tld":"xyz"},"ip":{"addr":"154.38.73.237","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zu44ajgue8.xyz/","date":"2026-01-28T06:56:50.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zu44ajgue8.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 04:51:35 GMT","end":"Sun, 26 Apr 2026 04:51:34 GMT"},"fingerprint":{"sha1":"F3:67:8D:CA:1F:EE:B5:3D:09:3C:E1:77:23:DC:E3:4D:5D:7A:EF:AC","sha256":"C4:53:6D:5E:C1:C0:1D:63:38:B2:2C:D1:25:DC:B6:EE:2E:B4:7B:19:E2:FA:D8:82:CD:3B:4D:6B:84:FB:C4:59"}}},"request":{"raw":"GET /static/img/pz4.png HTTP/1.1\r\nHost: zu44ajgue8.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zu44ajgue8.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3920\r\nset-cookie: __fw_session=726fc6fc466e33652eb3393bb7aa5c8d; Path=/; HttpOnly\r\naccept-ranges: bytes\r\nage: 6780\r\nalt-svc: h2=\":443\"; ma=60\r\ncache-control: private,max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9c4e979d9cc674f0-HKG\r\ndate: Wed, 28 Jan 2026 06:56:50 GMT\r\netag: \"68033f36-f50\"\r\nlast-modified: Sat, 19 Apr 2025 06:14:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgrmFW4ikeSE%2FEgAbOVSzO9KPccSOhb%2Fy6pwnfitJsylaGcr1cIkwaSrRZTRXCdGxGuoadnMLtqrPb5evob2qhv73Swca3LPsxxTgiUOhkGFyftaWqVG%2BzdvZqv1J0g5z8GLEUg%3D\"}]}\r\nvary: accept-encoding\r\nserver: WAF-1.0\r\nx-request-id: a5dde5db-187d-4702-868f-a1cf7af8a4a5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 362 x 59, 8-bit/color RGBA, non-interlaced","md5":"ec7d5ce45f04077f610d351f6fead7b4","sha1":"f23728808d14a0d78f283a913c74ca42054eae50","sha256":"9ad5196e9c615c673214814cf83d9ac81678f9ef38b1cd3ce92b17cd92bd57a4","sha512":"a35a9c2f5de9bc4bf96397f11deb5332d020ad48dcd1c699f709ae3f97ddee47e91f962a7c283f3699192d470ededc1679ab2f5ecd6d49f6d9eccc43b7ee095d","ssdeep":"","tlshash":"24816c01e15249cbbfae135ae236d6a17c9a217e17c851145872ca4f30eddfcd0810bb","first_seen":"2024-05-16T09:07:26Z","last_seen":"2026-06-13T05:15:44.653497Z","times_seen":423,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}