{"report_id":"45f226ab-de82-4681-a293-ee560bfa8aba","version":0,"status":"done","tags":[],"date":"2026-06-29T05:59:36Z","url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"title":"HUT 8","dom":{"size":22360,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8697)","md5":"31fc2c9918cecc417b2e8350bc8e3627","sha1":"70a30325bc289db4b6fd66ef3e767dd173c50e31","sha256":"8789e8acabdac8cecf88fd24caaee0dd11003b02f7815cfeefd6418ae018f7cc","sha512":"4dd17ae913192797cab5659887142199b20df90e64a54c54a7fe8f9685335acac1306ff3605321c7398c15381caf1cd816ef61d59a68fa6ea02c39c9428aeb6a","ssdeep":"384:WDHU9OWX1YKkBzsju8pk9X+OIjlYAuN4qLecuBBit0xykIJmS:RxmoXp4+OI+A1qLIBiGykfS","tlshash":"efa2442b1c490527222396d96cb7e74a30f7960fc94eaa003d9c43544fe7d78a9bcf99","dom_hash":"domhashf83c683b5cba81a7f47f977ce0f0b120","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T05:59:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-06-25T00:52:46.466897Z","alert_count":0,"request_count":1,"received_data":116672,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.hzut41.com","ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-19","domain_rank":0,"first_seen":"2026-06-29T05:56:18.487362Z","last_seen":"2026-06-29T05:56:18.487362Z","alert_count":14,"request_count":14,"received_data":355020,"sent_data":8104,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":4,"received_data":97606,"sent_data":2334,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qigdmy.hzut41.com","ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-19","domain_rank":0,"first_seen":"2026-06-29T05:56:18.489974Z","last_seen":"2026-06-29T05:56:18.489974Z","alert_count":22,"request_count":22,"received_data":2642893,"sent_data":10554,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6732f947b7de7b9677a57359ff46b715","sha1":"c15fd28218ea963c3f08510c15baa903ff852112","sha256":"07845f6c2ee645dbb2b2e21318e2a713af76bf176e759a6dc7ab448fb9fe080f","sha512":"1a3793b6c055065e6f4e68702d701fc4a4e43894cca4c425c23e4c12e3a8e96008cd71cd0babbec4e4f98b7c31ecdd0683df69c83d90a050bd2a51cfb9773acd","ssdeep":"","tlshash":"6ac08cc8b0c66d102606a51010af25e49038402770481b528ca8d8582e620b08233e99","size":143,"data":"","first_seen":"2024-08-22T17:23:09.652272Z","last_seen":"2026-06-29T05:59:40.711477Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-30T04:14:42.729619Z","times_seen":2239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/PhoneSelect-Cf1q6s6f.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e4d0b333b1ee28b5106a1133f284b43","sha1":"0c74f2718d8d91dee4cd0409ad0daee28407482d","sha256":"4366c8d5a786767ebc808b0e80f4c34cf96e5b01d3add460fe9122b599dd96c7","sha512":"0f51a492a72c3abcaeb940a009bf4cd6010b4a1554bd797a8a8e5559914e77ec764515f44c72ce79c9376c09b8857f666860c9d181ee535425bccd747d73cc8b","ssdeep":"192:hxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFhe0:hxj5a28wa8H5tnzxaF","tlshash":"6662bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf536259a00e7b5cb65c","size":15511,"data":"","first_seen":"2026-06-26T06:31:58.816407Z","last_seen":"2026-06-29T05:59:40.702425Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-30T00:32:51.105445Z","times_seen":6482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-30T05:45:05.479595Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/ContainerForm-DXW8lGX2.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35f4e403a406c390f5870fcb939955a3","sha1":"e07df0910aa0a6b5938b1c7d73ee5580f31cd1df","sha256":"04f60e4912460ef342e9caf997e2d349609baf3b96f401ba70ca1b97be56c020","sha512":"2529b5a61de57cdfb0e113b4d3b8da8f02d4b55fd06c642b3f94f348c74beff783c7a47067d77c50af38e7686cdd3256f62df32530abdbffe7106e92d11ddf32","ssdeep":"","tlshash":"63e0d84cac51e275d061469d22731452e51f3eaa72bc5947609a806a2f6546e621ff08","size":361,"data":"","first_seen":"2026-06-26T06:31:58.839418Z","last_seen":"2026-06-29T05:59:40.705818Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-06-30T05:45:05.454467Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-06-30T05:45:05.455029Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-06-30T05:45:05.455562Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-06-30T05:45:05.456613Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-06-30T05:45:05.456083Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-06-30T05:45:05.457185Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/useAirDropRank-SLjq3ZcP.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ab0cf21a35894dbddb821dde0761f60","sha1":"a433496105c7a6414695c922bb716754c608ff69","sha256":"be99558fbfc762230aedbf96b47012c5f3c0d19eedb04a9dcd751ebaf6f8fe39","sha512":"d047799190f8afb3561ee2050da2e868a9762971ab7941d6f6aabefaf3e26321b2f8fffc8aef3003a8fb54da869129a6bccdbdb77e37b3ad32f85538a15928f1","ssdeep":"","tlshash":"9a51872c709432b9837ee4b490da4b1681923f05391b9ec1680f6c4a777ccc6f775e85","size":3053,"data":"","first_seen":"2026-06-26T06:31:58.829084Z","last_seen":"2026-06-29T05:59:40.707086Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/LangLabel.vue_vue_type_script_setup_true_lang-CHDD9aG6.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e72a5c71790243df2ac22d59672e7fe","sha1":"f849d4f7d4140099c7ea182535fcecb077a83b23","sha256":"9e222055791e0a26ed846af0725d26e5ce9204f62cf423bc08b1426cbb0b7a9b","sha512":"90e8515a95fdc8a0ee2f529ec70149bafb8c64062c7ea16fe67fa081ae16e99654c9e11cfc2de3fa495d9f60183904d09bae6f4ea1b83b1d1891ed2b5286370c","ssdeep":"","tlshash":"29f0eb6f18218770c5b648587a97080010491f6f6324ea40e2da9e135fe386cb3feb24","size":555,"data":"","first_seen":"2026-06-26T06:31:58.823625Z","last_seen":"2026-06-29T05:59:40.701788Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseUserTab.vue_vue_type_style_index_0_lang-DWTRG20o.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de7e7810e7d86e242da1c767585be608","sha1":"6688f70c22da10024fa97604a0c72ed28295725e","sha256":"051c55f84dc0f390dc107464b63a21a0035cfdece2b804c6f7165fb0bdd120bf","sha512":"f7b64c8ae24bb24d7367ba4a543e17ed8cc7fc1fae309da76547580390106dd35a345ef66130737c2f9554044d68566a54aeaa85114be69708f72a45866e5e60","ssdeep":"","tlshash":"b911888d9cb9cfb604f204e82f975069e095bb4d97108916d09e5421335fcf8f59d328","size":948,"data":"","first_seen":"2026-06-26T06:31:58.817317Z","last_seen":"2026-06-29T05:59:40.703042Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a8c7018d6cc1b9d1e0caefece910ea9","sha1":"8f4f8373d418d4aaa81bcfd1b3ff173c5fbd4ebd","sha256":"f99a6251dbdab5ba56d0ccab17252cd35c459c046b10c320e837cd185caa0c40","sha512":"60ba1c0a8f113c8981e9daeb08b8c59b6d4be068a8a48266b16d983a94cdeb29aae594e52f95919775f43fce78523f4e4b236198fa3543d7470f74fd44990340","ssdeep":"","tlshash":"b3c08cc5a0d62d201a06e91012bf34e89028402670881b029d94e8683e230f48237edc","size":145,"data":"","first_seen":"2026-06-26T06:32:17.031061Z","last_seen":"2026-06-29T05:59:40.716834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"617d5b8a19009ac018d52e4da473494f","sha1":"0c43d2c3d1b3b8dfcf072591f205e4b2d2c605d9","sha256":"31301f431c4ac94b7e3a838177d9608f28f641c7472b85a36f51bad84dd1187d","sha512":"b8241183d03759e84b78846bd892fd89b28bf7eb7d72c1691a70d90cdd7ee65a37982e7c34b3b63d6f129f9b02a43da779815eb6dc29a00a148651083b80ddaa","ssdeep":"","tlshash":"46c08cc5a0d62d002606685015af24e8a024402a78881b02cc94d84c3e220b49237ea8","size":140,"data":"","first_seen":"2023-04-15T19:29:40Z","last_seen":"2026-06-30T04:57:32.037708Z","times_seen":1585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-Obb7cKpI.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1bd262ca3e52df5850f4e6e4f34825f","sha1":"a7547380c649fd66da1cd3fa5cb6636fdbabd35d","sha256":"a78814076b565f09e5d73fa52c6d7914ee4e128498306bc90bbb1f24288e52bb","sha512":"f0f75cc86f3e73d30a4dd217ec3d1c91b9640b8acf3407522a8ee81e11a0acc72e4f673ddf6cb0718f40e437174400f47f96f686e21c9fed16f6df8c844a2970","ssdeep":"12288:jQSujiViZv7wNjAR7yazJDGehVcTb4STlZVPpVo2Vyu:lujiV0Y8JbJKehS8SnVhyu","tlshash":"4455a1285a2bf344e419c0dbf9373c84c59de18aa00764d15fb54bb31ba2797eaacd13","size":1336850,"data":"","first_seen":"2026-06-26T06:31:58.853424Z","last_seen":"2026-06-29T05:59:40.719202Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-_RXQODyo.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f4bba3db68c1807d1ec7b6b2b568448","sha1":"5db2728f1e4bc04a08a4ddeccc475bd92022a2f7","sha256":"9bc4a70e21fe3c9a009f4c19c4b59b44d8f898eb8c8e2e00b48875fad6066418","sha512":"a0adb3e41bb62e2a9fd0460e7d20b0d7d754c4c7487d1bdad64d86b194706b5d15a620470df3b5bfe1f9c74609d85aacc7e0bdc58839e675eb6a6c9b7e4e99e9","ssdeep":"","tlshash":"f051966c7dd84534c7ff49d844570552b61f0b19822888f6e4af6d5c2a3e148e23fe38","size":2890,"data":"","first_seen":"2026-06-26T06:31:58.834106Z","last_seen":"2026-06-29T05:59:40.676027Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5205bf3fd514aa8a372a8e69ad31396f","sha1":"2d5b73dc13238ea304e11a9d4873b3127a9996ef","sha256":"05ab80002a65f02f765f8a39a93c80c83556f1ae861d561bd2c16cb0da802e96","sha512":"2c26e4f5249f8543bb5f953fe67bb7dfb4eb63f712b084a1441d43e7fd277cf8f4cfb8d823721a62d701f1ccedff505de956ae5a44ac2671b908bd3323fa6394","ssdeep":"","tlshash":"81c08cc6a0d63e221682a52112bf38e89029842674881b029c98e8683e630f08237edc","size":153,"data":"","first_seen":"2026-06-26T06:32:17.028423Z","last_seen":"2026-06-29T05:59:40.719813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea81359dde60c55be259ef3d50b15e5d","sha1":"1a9bd63b3722a6ce704443da06ceea34a23d8090","sha256":"2d9aaffecdf57b7055fd2e0bcb9ba1ab0f20bf2458abc7e4147473f2f5c90be6","sha512":"d5d2c99418da148b15f25c9d059f06e8ea9987a6a166c13e100f8aec6f7faf43c5234689478f89b0e0bd8228f4efb1cc3a8d19e240bf1d37a1a1a82c4c70a7c5","ssdeep":"","tlshash":"52c08cc4a0c26e015b26a81124bf36e89024442a70481b828cd8e8982e220f08233edc","size":149,"data":"","first_seen":"2024-08-28T06:19:14Z","last_seen":"2026-06-29T05:59:40.721696Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4caf8a841db7203b84e0edc20e58835a","sha1":"b5b3118afd2dd8ac51b553fe6da85b7ae01f3d28","sha256":"f93458a05da187cfec6494631299c560ea1e8a65fe2b109bffd7c66ed47241b0","sha512":"d85d0c12f2407a7193bda033e1900cfc2d5fbd6c6420f2820c137470da486a09c2e7cd9d58addf73207da45e96a187d4cd5dfeb0173b410dc376d73be316b1eb","ssdeep":"","tlshash":"14c08cc4a0c32d001606651018af24e4a0244026b0481b428ce4d8482e620b09233ea8","size":139,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-06-29T15:05:34.05712Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseLogo.vue_vue_type_script_setup_true_lang-By3up_s5.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cb8a7a1fe8fdbc00c64c21d0b0fac4a","sha1":"a30c698df906ae5782c28d80c61d1fcfb29c2702","sha256":"269f175053968ce36ef67f201d71dad468e9b0c3126120a6c9429aa86e29882a","sha512":"654b3730b79b21f8d12c59f8295a33dde0135b13a4d19eec9e8ca877c5c9dd174b2ef17385ded2f7bb5192110ecc41408ec63bb4d196ca70fb3552502f7c5960","ssdeep":"","tlshash":"87f0e14e9c6d41fe95a354982b4b908021094e6ed7306f80f2f827356742c59742df38","size":585,"data":"","first_seen":"2026-06-26T06:31:58.818452Z","last_seen":"2026-06-29T05:59:40.673927Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-30T04:57:32.032337Z","times_seen":2442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0405a84e6a4230a303bb14502e76e775","sha1":"d9ab61a955a7dc15ef1dc4d5dd7484fad9827efc","sha256":"65600aee7ec8c3dcc8e4be7b14e07e5d31a2bc7af95c8aa96dd52e846d5ef956","sha512":"391b4478e382f124faceb8bd83509fcc5ceaae1819c8d606cd8230f07fc3c9e428459f89706bcad3d16011dc580b5275a9015388542916b9f9323ec1df63d630","ssdeep":"","tlshash":"24c08cc4a0c22e001602645020bf28e49034402a74481b028c94d8682e620b08233e98","size":137,"data":"","first_seen":"2024-04-23T05:29:00Z","last_seen":"2026-06-29T05:59:40.724288Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ee66dff2202125d2803f0d360acbf28","sha1":"02b7f241dd7192466f3b3fef03978c0bcf505350","sha256":"e81395830bebd1285a1aec8144ee0ff0d9a102d9c3adf035cd2fa9331d8af9f8","sha512":"2f1b3f3ecd0f1ebfa1ed658521bbf70f239f0850e23c4bc766dfe4e3b2b9b802057190dbccd799a8dfa84c0b0c5df62ba4877ba9754a8208b4f4243f729ccc9d","ssdeep":"","tlshash":"23c08cc8a0c62e106a06a42119ef24e4a0244026744c6b229c94e8483f220b08233eac","size":148,"data":"","first_seen":"2024-08-20T18:47:51.501336Z","last_seen":"2026-06-29T05:59:40.725022Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/reg-gCuxE8ni.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c388401074421fc441d26f12767abaa9","sha1":"9e1f8d14db4e79edaa7f9ad7e9fe8db2fbcf9261","sha256":"f7b499990ec1afbbb11a507e5816725e27339ee8b2051cc468bff3783012a9ed","sha512":"d032d842627d799e4f714c89b6f886e452ee427e2a7ac1bffcd6ec72732439d10583e267a710d32c7b5ce37e0992423f4921a53a2ac03aeab62048e4b7a705f4","ssdeep":"1536:r6xGYq+8gHKHFn6kdq+kzhvZdfLjWBjU/hD/m6n/U:r6n/PqlpAh1xNLa9QFO+8","tlshash":"51b3630cd4f6cebb98b7664d790b8420a17d57ffc2038b66977c16022e92cd496336e9","size":116335,"data":"","first_seen":"2026-06-26T06:32:17.002423Z","last_seen":"2026-06-29T05:59:40.689225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-30T04:57:32.037044Z","times_seen":2287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d4da1e18d38ab4098444ea8ed17c6fd4","sha1":"035563fcd8ac82f955753595f71afb67919325e2","sha256":"619a8f94370482eabab2cbe91fff4d7438504baaf560f00c37dda4f876834ee0","sha512":"e7043c85462e5cda08cf6720ca2669ff6cd2d4213c880a3b7f868cee871e2645d69577d00843e23f3a4af26aa3c859d0c28b050cd5204684329bc8fad2fa9198","ssdeep":"","tlshash":"15c08cc4a0c23d001612645028af34e89038402ab0481b428d94d8482e230f0c233e9c","size":144,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-06-29T05:59:40.726377Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/default-Qzd99Kpz.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baffb30ce9714375d1bb00ac8b892e63","sha1":"20d27227cc64bea2262395f0fe4a21dbb36e27c0","sha256":"d52094a0f18cce4ccc670a826bcb3117c3a332f779cf5ab29e410bea34b65eb4","sha512":"c9284f4c165037ac6245b171066ffb4775452e8f628f21ab20e6d03dc32f60f27bccbf5b68a26bac3b29ded5b749eca180204eda206d4eeebbf4b7d048a78918","ssdeep":"768:yqFO4OCPO4awOafqOO1qkaapOlPOuzaByfqO9bOAFOFOrOSaiC0djxdtkjcev6Gc:jDtDTdijcm6MnltJWA8zGd8mmHlxhhO8","tlshash":"1e23a7855907933fc572da4a484b6881724c6fdbd00cab76f2f4911b86c7c787a3af29","size":47544,"data":"","first_seen":"2026-06-26T06:31:58.833196Z","last_seen":"2026-06-29T05:59:40.679899Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseInput.vue_vue_type_style_index_0_lang-DU-OqYbh.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f230a39f28fa18e9152909957a3efda","sha1":"e76d34ddc8352d0449405f5d4d92e32ddebc0f85","sha256":"81ae677833fced877da95eea187ffccbb8a9fbc55d3d96e1005bd994a138999b","sha512":"9faca10bd8c6d01a4227ef61edc9d9b92d427af2a64f9b8e3d276af799698140f15801dbd6e25099f93bf842902045d8ca65bc6b783ab90a278f54568ab8297d","ssdeep":"","tlshash":"59515104ec559fb3dab3964da5eb58a0a05c1b9f85054f5110fa661c3f5ecf8233af28","size":2490,"data":"","first_seen":"2026-06-26T06:31:58.830526Z","last_seen":"2026-06-29T05:59:40.683343Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbdb85a14b4867948da0eb33261859ef","sha1":"03782f8357f95f9b4e1b669ce3ac9e8b24c5bfb8","sha256":"93688ffd3bdd4665c61b9d4a16d57766a1786fffbab8b4c3afa718903d4e3bc1","sha512":"956a633905a8c4298b6787ac37615369eb7ea66c2e536b000f8322b27941123995f492433643cf37ac26714e7d80635cd6fdb0a4d688462e374c76cb0c824113","ssdeep":"","tlshash":"2ac08cc4a0c26d001602645114af24e490348026744c1b028d94d8483e220b48233ed8","size":138,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-06-29T10:25:45.647639Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bbdcff399fdea9a5e6ba7b76e99cd25c","sha1":"9598c321977767c3375f0c256e29a2aa8ad93f75","sha256":"7759b1a1f9531da032ecee7bc448de9f497aa3d73fb2f5b7adda8e085f395752","sha512":"56d90dee46144b3a2b2b9b2bb807a812210213514507ecaf1d000a57164c9a2f9bde6dc066a144da213d921984629679a174a5cc0ad15217286e9cc295d03cfe","ssdeep":"","tlshash":"8cc08cc8a0c22d101602a45020af26e4a034882b70481b128c94d8482e220b08233e98","size":139,"data":"","first_seen":"2023-04-15T19:29:39Z","last_seen":"2026-06-30T01:23:07.420138Z","times_seen":1666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6014726f2f4217231511bbacbc170b52","sha1":"ff164258797a74e40cdea86d7e980fa066d875dc","sha256":"81b25fd779581aa4a83ade36ca347996774b5c60332942befcf14c9f27aff8e2","sha512":"96a745371a794047624741d3a336a318181e494f46e929dd3189426b2458860307b435fba129ddf2507a85d787ee9207154901e30dc28e6035891b04c1bd1d98","ssdeep":"","tlshash":"26c08cc8b0c2ad001a06681060afa4e4a0348076708d1b429ca4d8483e220b48237e98","size":143,"data":"","first_seen":"2024-11-05T15:58:23.769183Z","last_seen":"2026-06-29T17:55:28.550212Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-30T05:45:05.479148Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BGDeE3Ib.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67d71546d76e6e4d78c8662f5cffeca","sha1":"0c2c693cc954e4972c5bc2e5fe61aa243d20e011","sha256":"345ae31e2d5fe4b4cb1701362049bb1d29d900c13f8fd8e80e8db4af173a1713","sha512":"01cbf911a49ab91f2ba2bc1e4ac53a1904e9afd3aee61651c72666cf0650cc073f8f69d8c2f6a52a37f97e81ac103fb06a830aa1768fc9ebffc0763668f4370e","ssdeep":"","tlshash":"20f0c01c5c11cbf9873744857a57609104590f7e664c7a81e9d608119fe30bc772bb2c","size":526,"data":"","first_seen":"2026-06-26T06:31:58.82083Z","last_seen":"2026-06-29T05:59:40.681548Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6396fe8e98398ebe58597483276ede0c","sha1":"f57d9ab205290025eedda477f39abc79d8c71aac","sha256":"a38ef57b9f087aea153f0b384b2e1cf5465239a1ac84ca1bf008b71725952546","sha512":"895ee045ad1b3b1b1e260f9d2956d3f9e46dc872a21b28b0df2775204ae1cff1f35095c051cfc8b399eadcc649b36385db93c2e38dbb7b3fe36be36be0697051","ssdeep":"","tlshash":"07c08cc9b0c22e112602a61010bf38e4a034802774485b028da8dd483e670f08233e9c","size":149,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-06-29T05:59:40.732702Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"isTgfalse","filename":"https://qigdmy.hzut41.com/assets/index-Obb7cKpI.js","line_number":69,"column_number":866572},{"level":"log","text":"inviteCode838454","filename":"https://qigdmy.hzut41.com/assets/index-Obb7cKpI.js","line_number":69,"column_number":853347}]},"http":[{"url":{"schema":"https","addr":"api.hzut41.com/api/public/visit","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.596Z","timestamp":1782712755596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1782712755591\r\nst-ttgn: 9b886790a3585b2f40d61ce60bc02200\r\nContent-Length: 55\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtsOoqt%2FLhkwpLFrul8zksaYRR2IfCfS8RDr0uHx%2FeszLEiQdQ1QdKSvL0XiS6TEWXRUQnB9Q1ygmQCdVYBmfcsIK9icgz9Fpiw6GyvTC%2BUqArCNzzsfhQrXHxpuubxIEg%3D%3D\"}]}\r\ncontent-length: 40\r\ncf-ray: a132b4437bd956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":827,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-06-29T05:59:40.657324Z","times_seen":212,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.624Z","timestamp":1782712755624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:11:46 GMT\r\nexpires: Mon, 28 Jun 2027 10:11:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 71249\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24452,"size_decoded":25264,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-06-30T00:09:01.178677Z","times_seen":5220,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/upload/img/6a3614eca6c6.webp","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.994Z","timestamp":1782712754994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /upload/img/6a3614eca6c6.webp HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Jun 2026 04:19:56 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3614ec-4428\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDapbkmNTjuKajz74k9e5mg4Q3sMQy%2BPchUe3uLo2Q25GPkc08w2wpP%2B9XKzdWl5pG1P8yXbKZZklQO1bPqZ48eb8hF%2BdDW41F18f0CyboovIG0wMlgh6RNQlIh509XgVg%3D%3D\"}]}\r\ncontent-length: 17448\r\ncf-ray: a132b43ebba256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17448,"size_decoded":18197,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 669x661, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c29f4a8c345fbfd832eb5a2e55dfb2a3","sha1":"d8d6c44fffde7b0547b348c4dfea262d70e13502","sha256":"dcc8edd89f933a983e3330cbabaca1cc4845a4ac6712585d23c8a711971a0841","sha512":"0526d73d990e516102f2ef2ecd9e991f76d83c0e4780732974a79f2069011ee1c630be9d556e21a37ca24d625080b4e7a6ffaf8f13fa4f7a530549ae38476374","ssdeep":"384:bn1DWl0U1DuMrf3xvYlrgx6dwckNGkAxQr1FXN1SHE0DNc:bntWVP/5YlrNdCN51F91tS","tlshash":"d572d09724cf97bfcb856eb716b2370c41b0b87c44ec96d21c9b34a411baad23ed1164","first_seen":"2026-06-26T06:31:58.81446Z","last_seen":"2026-06-29T05:59:40.667878Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/upload/img/6a361e1c9041.webp","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.576Z","timestamp":1782712754576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /upload/img/6a361e1c9041.webp HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Jun 2026 04:59:08 GMT\r\npriority: u=5,i\r\netag: \"6a361e1c-3a910\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PywsY0k19aeCu41qn3i75DCqDj5eJ%2FMEAhBNYEEOwjKPMKmhDxyQWW%2F1SEqXJhIBU5Dy1hyoyYTULb3hdXY7wDxVI8PQWVEkHpqOQqProRi3JQzNCknLQVItn5WbmH%2F5oA%3D%3D\"}]}\r\ncontent-length: 239888\r\ncf-ray: a132b43c1b9056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239888,"size_decoded":240636,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 971x899, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"883bfacbe2274b06887ab19c8f5b400c","sha1":"9e9ad50e90051bdd0647ce08719501d33f0b2c81","sha256":"25832d4e85f2965d75f68612c5955dd76055abc950400c7b425383bebf2b7028","sha512":"09229419c427f977c661b79e7001178f3d63215629b621a36947dd908cb2b54531f873954ccb24c0887bca29f26b149694a4ae3bb5fc8029e240da16baa85d02","ssdeep":"6144:aVW/bEk2yl5fixgVYtO1Z8WJXM6v4LheriVW8m:X/bmylgxHOD8W/4Lhern","tlshash":"6a3423d7237525189b4e4389a3e2715f1edb62d5c9539e58c7a431d8cac43ab3ce01f8","first_seen":"2026-06-26T06:31:58.831352Z","last_seen":"2026-06-29T05:59:40.671292Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseLogo.vue_vue_type_script_setup_true_lang-By3up_s5.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.199Z","timestamp":1782712755199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-By3up_s5.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354259-249\"\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5AAJa1AqlEDEo8TKt5DXZ88EpnmERBNpzGdok0aVpbsK3TDBtjo2C1JF1XHmcSRQ4MTXMFQ0waDo0AQBndp4tpj0W9Qesw4ZdQGFbOFkvPK%2FQkm%2BlG%2BAJv5poUezPjiRd%2FawQ%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b43ffbb456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":1141,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"0cb8a7a1fe8fdbc00c64c21d0b0fac4a","sha1":"a30c698df906ae5782c28d80c61d1fcfb29c2702","sha256":"269f175053968ce36ef67f201d71dad468e9b0c3126120a6c9429aa86e29882a","sha512":"654b3730b79b21f8d12c59f8295a33dde0135b13a4d19eec9e8ca877c5c9dd174b2ef17385ded2f7bb5192110ecc41408ec63bb4d196ca70fb3552502f7c5960","ssdeep":"","tlshash":"87f0e14e9c6d41fe95a354982b4b908021094e6ed7306f80f2f827356742c59742df38","first_seen":"2026-06-26T06:31:58.818452Z","last_seen":"2026-06-29T05:59:40.673927Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-_RXQODyo.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.211Z","timestamp":1782712755211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/index-_RXQODyo.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-b4a\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUnHDBUttjBrTPDdBFSUWn4ctkBEsEDL6Sh32e5BnjfpfkDTI9fJZsGmlvdTMjZBT1Y6gloyNw5FNzvvkx2lbFZmWrQ0CqpRHbaJJuGNqbuGGgQ0y%2BZUgutwYbVR7LSzhQZg7g%3D%3D\"}]}\r\ncf-ray: a132b4401bb956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2890,"size_decoded":2069,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2889)","md5":"6f4bba3db68c1807d1ec7b6b2b568448","sha1":"5db2728f1e4bc04a08a4ddeccc475bd92022a2f7","sha256":"9bc4a70e21fe3c9a009f4c19c4b59b44d8f898eb8c8e2e00b48875fad6066418","sha512":"a0adb3e41bb62e2a9fd0460e7d20b0d7d754c4c7487d1bdad64d86b194706b5d15a620470df3b5bfe1f9c74609d85aacc7e0bdc58839e675eb6a6c9b7e4e99e9","ssdeep":"","tlshash":"f051966c7dd84534c7ff49d844570552b61f0b19822888f6e4af6d5c2a3e148e23fe38","first_seen":"2026-06-26T06:31:58.834106Z","last_seen":"2026-06-29T05:59:40.676027Z","times_seen":4,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.597Z","timestamp":1782712754597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:06:45 GMT\r\nexpires: Mon, 28 Jun 2027 10:06:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 71549\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21884,"size_decoded":22696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-06-30T04:44:40.630102Z","times_seen":22248,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/default-Qzd99Kpz.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.188Z","timestamp":1782712755188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/default-Qzd99Kpz.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-b9b8\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RycXBKjfVPUwZIkMzTVHd4jDNkApVLRh0tNF3FyhLYuE9NQZX9bUDN8u%2Bn8zymgJdEYKW%2Ba0fQUGRrx4RihAtUiInTbItnRpJI%2FC5zun%2Fcs7fWUoV9h03VlezemIy11I2%2BPVzA%3D%3D\"}]}\r\ncf-ray: a132b43febaf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47544,"size_decoded":8007,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (47543)","md5":"baffb30ce9714375d1bb00ac8b892e63","sha1":"20d27227cc64bea2262395f0fe4a21dbb36e27c0","sha256":"d52094a0f18cce4ccc670a826bcb3117c3a332f779cf5ab29e410bea34b65eb4","sha512":"c9284f4c165037ac6245b171066ffb4775452e8f628f21ab20e6d03dc32f60f27bccbf5b68a26bac3b29ded5b749eca180204eda206d4eeebbf4b7d048a78918","ssdeep":"768:yqFO4OCPO4awOafqOO1qkaapOlPOuzaByfqO9bOAFOFOrOSaiC0djxdtkjcev6Gc:jDtDTdijcm6MnltJWA8zGd8mmHlxhhO8","tlshash":"1e23a7855907933fc572da4a484b6881724c6fdbd00cab76f2f4911b86c7c787a3af29","first_seen":"2026-06-26T06:31:58.833196Z","last_seen":"2026-06-29T05:59:40.679899Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BGDeE3Ib.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.193Z","timestamp":1782712755193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BGDeE3Ib.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354259-20e\"\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtgmGyYA%2FSZYzgSgYBTnt4LTYJtNjEmYBmKvMy7sA1YS%2F%2Bbl%2BEQvFjGEAv8PXkB65g1ANMulroSRnRphS9dVp2dqCh7AUba1%2FlW%2FXqnpVIxR8Mdh3Y4dlXvF4WcoMGx%2Fi0fGrg%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b43ffbb156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":1115,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (525)","md5":"b67d71546d76e6e4d78c8662f5cffeca","sha1":"0c2c693cc954e4972c5bc2e5fe61aa243d20e011","sha256":"345ae31e2d5fe4b4cb1701362049bb1d29d900c13f8fd8e80e8db4af173a1713","sha512":"01cbf911a49ab91f2ba2bc1e4ac53a1904e9afd3aee61651c72666cf0650cc073f8f69d8c2f6a52a37f97e81ac103fb06a830aa1768fc9ebffc0763668f4370e","ssdeep":"","tlshash":"20f0c01c5c11cbf9873744857a57609104590f7e664c7a81e9d608119fe30bc772bb2c","first_seen":"2026-06-26T06:31:58.82083Z","last_seen":"2026-06-29T05:59:40.681548Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseInput.vue_vue_type_style_index_0_lang-DU-OqYbh.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.220Z","timestamp":1782712755220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-DU-OqYbh.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-9ba\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulOqui3AvF5pmQpBKXS5RdoUFT7rwhJNi8p%2F1URNl0fmxdsgaMsbY%2Bxd7dy9kM%2FWV1aFC%2FATo%2FhJCmabq9DvRtyK7UGXpAjx2d37ubByEsuoK4df8%2BRDixImKGVseo1t43AyGg%3D%3D\"}]}\r\ncf-ray: a132b4402bbe56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":1757,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"4f230a39f28fa18e9152909957a3efda","sha1":"e76d34ddc8352d0449405f5d4d92e32ddebc0f85","sha256":"81ae677833fced877da95eea187ffccbb8a9fbc55d3d96e1005bd994a138999b","sha512":"9faca10bd8c6d01a4227ef61edc9d9b92d427af2a64f9b8e3d276af799698140f15801dbd6e25099f93bf842902045d8ca65bc6b783ab90a278f54568ab8297d","ssdeep":"","tlshash":"59515104ec559fb3dab3964da5eb58a0a05c1b9f85054f5110fa661c3f5ecf8233af28","first_seen":"2026-06-26T06:31:58.830526Z","last_seen":"2026-06-29T05:59:40.683343Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseInput-Bza8nYTg.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.223Z","timestamp":1782712755223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseInput-Bza8nYTg.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Nov 2025 08:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69295ce5-6b4\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxcXnFvqFSet6LqjXxpXzOETDIFUUKDDv0ORBokuCdkfbbJ3fA7VWmJgsQJWCaEE%2FmDz03V9iAZXdPVq2%2BGn2jVg9E8hzITChFK0k%2F8AZG1F8RElQ99Jep7BhKaLJ4mis1YV9A%3D%3D\"}]}\r\ncf-ray: a132b4402bbf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":1323,"mime_type":"text/css","magic":"ASCII text, with very long lines (1715)","md5":"2dec063ddcc835dcb02abeee35f28a19","sha1":"4de369e362b979bb2da80eae83575519cbdcff57","sha256":"13805720d9b1ee8f859d1d9c0bb28fbe2b00b92720e8faa8f364f4c0eb7c7df4","sha512":"835a0a498bc59d2be5947eac8765d6364036648e5b821a0f71cf7b9670c60c47bb0267f22da5e902608a2528e9e4147306dd09748d1e798a68f02ec17565b7ca","ssdeep":"","tlshash":"8431af0c1e50df1a18ba5ef3e1c4ea97380954b38fa38d05c040541a87969b52f7fe68","first_seen":"2025-06-18T05:12:49.455997Z","last_seen":"2026-06-29T05:59:40.684862Z","times_seen":50,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/user/login_verify?d=1782712755591\u0026hideloading=true","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.597Z","timestamp":1782712755597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /api/user/login_verify?d=1782712755591\u0026hideloading=true HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nst-ctime: 1782712755591\r\nst-ttgn: 9b886790a3585b2f40d61ce60bc02200\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzj56EA2qGCbAfCdcvuYmeQ9gJVzS9lRkBFODanX%2BrqIlLkOnPQd88fV00u0ftaVhCDEz7Mp8Lsycqs3hlSGQ%2F6%2FlitkZI8%2FVp0rfteXOrrvLkvaH0snWiU9V%2FuhYEPbJA%3D%3D\"}]}\r\ncontent-length: 3216\r\ncf-ray: a132b4436bd856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3216,"size_decoded":4003,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 150x40, components 3","md5":"1e66408c467087f33223c4db87bfe7aa","sha1":"3c339fdcdd5443f280700f3707f16c7464354b95","sha256":"6d9235e84926b7a8eccbb1fcb87993223063bf88d83dd5cb86156b2867954159","sha512":"6fb01c7b506e5a06dcc19c405eebf38e92792024e4229545445c1521f4ca8664f274a6eab6e72f0932ab9180f9923735d60ca58129b19d57f9b634f90bb6bb91","ssdeep":"","tlshash":"9a615b2adf960ed17842e2f5c819bcb6c4cc8e0567a2b3d469fc42c2485b6d86ec4e1c","first_seen":"2026-06-29T05:59:40.686311Z","last_seen":"2026-06-29T05:59:40.686311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/user/login_verify?d=1782712755591\u0026hideloading=true","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.600Z","timestamp":1782712755600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"OPTIONS /api/user/login_verify?d=1782712755591\u0026hideloading=true HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qigdmy.hzut41.com/\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLtysJryzRGkVnKPQH1AlAlDV821nCi3jytJ3tAAml%2BunfGD%2FF6AX0TDLV%2FLMEUBawqib%2Fskc0rBBkniGP0%2F%2BJyeGBX2oSBnRxsSwSJKgbWakm7t9jRoTo3KHg4uefoF%2Bg%3D%3D\"}]}\r\ncf-ray: a132b4427bd256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":807,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T05:32:23.484642Z","times_seen":16847014,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/reg-gCuxE8ni.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.203Z","timestamp":1782712755203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/reg-gCuxE8ni.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-1c66f\"\r\nexpires: Mon, 29 Jun 2026 17:59:15 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbE82Me0vgEpIhBo94xRrLQuKbjhbLJqdVrziwCZW0cst0tG8WQgK8BIsmFBHz7%2BCkEvhMh92yAgoXOaqzUuiQxuDbx628mkeIVy3maCmiI8izHeFBs8UhKcN1BGEzbRZXSBGw%3D%3D\"}]}\r\ncf-ray: a132b4400bb656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116335,"size_decoded":10582,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c388401074421fc441d26f12767abaa9","sha1":"9e1f8d14db4e79edaa7f9ad7e9fe8db2fbcf9261","sha256":"f7b499990ec1afbbb11a507e5816725e27339ee8b2051cc468bff3783012a9ed","sha512":"d032d842627d799e4f714c89b6f886e452ee427e2a7ac1bffcd6ec72732439d10583e267a710d32c7b5ce37e0992423f4921a53a2ac03aeab62048e4b7a705f4","ssdeep":"1536:r6xGYq+8gHKHFn6kdq+kzhvZdfLjWBjU/hD/m6n/U:r6n/PqlpAh1xNLa9QFO+8","tlshash":"51b3630cd4f6cebb98b7664d790b8420a17d57ffc2038b66977c16022e92cd496336e9","first_seen":"2026-06-26T06:32:17.002423Z","last_seen":"2026-06-29T05:59:40.689225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:13.659Z","timestamp":1782712753659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 29 Jun 2026 05:59:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Fri, 03 Jul 2026 05:59:13 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":24021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-30T04:14:42.729619Z","times_seen":2239,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":22,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-DkfmkrW7.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:13.664Z","timestamp":1782712753664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/index-DkfmkrW7.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Apr 2026 06:15:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69f2f392-f8b12\"\r\nexpires: Mon, 29 Jun 2026 17:55:52 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsHKTApDB0%2By4O2IcXIQs1pz07XU1P2FkRbkDmRfXgAKwhqzusLIhwuPPjuLF%2FjMErJo%2FcycFt0t1CJehpXJln5jfJq6JnLY6kjcEBZ%2BCzYEzEX3ctdieIMKXvykArgbQL9Xtw%3D%3D\"}]}\r\ncf-ray: a132b4366b5e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018642,"size_decoded":278439,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"e374f5b77c2bf8f9f1e0644e8d3ce80c","sha1":"76eb540178994b9e97ae90082b8fe3d15ddd5140","sha256":"79aeb08460a7993b198817346a4279b6e5baf91f17dd8d9874d914aecae77852","sha512":"dc5e627d71c0b8eb60cc00bf0944d41e9b43484952b3871c8eea542d0bf877c1cea78e1846e8c4400b91b0a97f9cf3bb3c85748f1af94643244641815b7ea007","ssdeep":"3072:UnNIClDsIxuVS9W8khUcd6fwefeRAkNGaKF2X7HE4hB+XIusF3QoU8XTWRwrzWK7:Unxsa9W8mdkfMNA2NB+qqGv/ZgfucC","tlshash":"982509723701482ce9fb8e3302db6d0c7019e11abf33456de11a5e7447aa29b976636f","first_seen":"2026-06-01T18:58:41.824493Z","last_seen":"2026-06-29T05:59:40.695703Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/init?d=1782712753919","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:13.923Z","timestamp":1782712753923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /api/public/init?d=1782712753919 HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-ctime: 1782712753919\r\nst-ttgn: 2dfbe9eccaeef710464533b2ce79e2c3\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ndLelelPK9Qx6zGi2q9ncRnXL85uUpfjRQoTWhbrDpkNt0BUC0l6PfU0xtpWSBphOnXsNpOaVZwR8V1Hx9CM7XhsYVhhCdLFBsxe7vRY%2BBYK3A3e0yAN38G%2Bev1MQDtqA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a132b43a0b7556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10549,"size_decoded":3060,"mime_type":"application/json","magic":"JSON text data","md5":"1b314dc6b864e83cdaeaf74e9b98c94e","sha1":"df8390c412a9ac03dfb5984a56b09fa5f4e77344","sha256":"83ad0b54b6ad900b4aeca9f8d86bdf4d2e74aba46dbcf0fe679a3e3482377b65","sha512":"b403a2afb283961b24214a6f50c5630d8846ed1286c6f405fe55893b0616dbed3830679773bf53078009c52f9e1ed2bbefd6eafd53aca56881666790f9293e30","ssdeep":"192:IlS2kBga3ycyhywbysYeCCDzUlPtyJs7N/kIOzrBGZLE+TrjfWg:Rg2/kTH0v6g","tlshash":"64220e6520aacc7ad9e37d883ac731158a6d3c9aedcccb875f2ddce641dd4a2101e512","first_seen":"2026-06-29T05:56:23.395629Z","last_seen":"2026-06-29T05:59:40.696571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/init?d=1782712753919","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:13.925Z","timestamp":1782712753925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"OPTIONS /api/public/init?d=1782712753919 HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://qigdmy.hzut41.com/\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FpVqN83vXieKHDcBpcsFKStjU0LAoIOfkLnInfZPnhe03rGS1taK2aKQVsRPrLV8B6ZvuJWmXziXwIoBSCrWh7ycaRnQxgl%2BZ9YaspmsuiXTOYG2pBrk4Izybx01sQInQ%3D%3D\"}]}\r\ncf-ray: a132b4381c6c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":764,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T05:32:23.484642Z","times_seen":16847014,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":300,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/home?d=1782712754583\u0026language_type=en","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.587Z","timestamp":1782712754587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"OPTIONS /api/public/home?d=1782712754583\u0026language_type=en HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qigdmy.hzut41.com/\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4iQOBEGNJL98vGF5IDnPkGKx8Bncmb7xwS%2Fqy4ZZ9X9tWqSue0sOhZutms7LYC93miuFh%2FU1DWoRq1d7DWsWSAIsKiZusd%2BIUDIswZVqSrO%2BMIELEJ6M6ypCV1fKrU%2FhA%3D%3D\"}]}\r\ncf-ray: a132b43c2b9256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":803,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T05:32:23.484642Z","times_seen":16847014,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseAlarmLogoBtn-B1F5Xzzt.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.195Z","timestamp":1782712755195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn-B1F5Xzzt.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\netag: W/\"69295ce5-176\"\r\nlast-modified: Fri, 28 Nov 2025 08:27:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDfHqP3iFHBN9x6B%2FpHxFuZkopOgDf%2BiMXauJPvQ4EdbggR4oN%2Fo60ij7E5Vk4TMpwanrNwuoGIkL60NptARRrzScNqv3o25pyAuIn7wYol6BuhwNsVhOfG3ERotePSNUBV%2BGg%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b43ffbb256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":942,"mime_type":"text/css","magic":"ASCII text, with very long lines (373)","md5":"a0b95e2ac4d02f765d36b86d50825b05","sha1":"a6c56b78ff5416000ca81c9c385f14c4ad745e90","sha256":"018fe58c9101deb6798cb3463760d1abaf1be712f511ec85e3be65cd5de35d13","sha512":"3a38ceda1e85ec5eab12bfda941daef96627543de051677653a7d45d707214789d8cff522362480ff722358f3b78f51f5bdd95642d1442c22f8f30c2cd116ed2","ssdeep":"","tlshash":"fae0924c0d94111b7aef4e2754da4a7500288f537e330d5ea742325622c6ae4317634a","first_seen":"2025-06-18T05:12:49.455026Z","last_seen":"2026-06-29T05:59:40.698989Z","times_seen":98,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-Obb7cKpI.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:13.662Z","timestamp":1782712753662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/index-Obb7cKpI.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-146612\"\r\nexpires: Mon, 29 Jun 2026 17:55:52 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbgfK5OcIPAyWr8iNo2%2Fu7JQaRGfpmhUTUtCLQFfPVbEPXpG93wihhoR8WvMIICrq7T2kcQpxQkzT9g8kPR9wCnbYoxLMmGC2SUzN4G9TeMJO%2FBfpWGcI4O4PPvnB74i1g%2BBtw%3D%3D\"}]}\r\ncf-ray: a132b4366b5d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336850,"size_decoded":254705,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16724)","md5":"d0e61e7c4a11cd10e1714c39555541e7","sha1":"cec82d135eab6dd58ed3141abb462d06082d0812","sha256":"59b6990704cf4913d55dde390aed0beafbc2982c73d113b12491fa21e3802e00","sha512":"62dd12ce205804fd4a8501a6d30c29e9b1e6b9d523a661550d252305b31065b89111773831f1aeab7ebb312466fc0688777781cfe9ac393db68607e153179b9d","ssdeep":"12288:jQSujiViZv7wNjAR7yazJDGehVcTb4STlZVPpVo2A:lujiV0Y8JbJKehS8SnVs","tlshash":"ea2539282a5bf344e419c0dbfa373c84c59de18aa00b64d15f7547b31ba2797eaacd13","first_seen":"2026-06-26T06:31:58.840204Z","last_seen":"2026-06-29T05:59:40.699776Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/favicon.ico","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.046Z","timestamp":1782712754046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRrYu7ZXWL77P8N3xwKYdU4gYA%2FYBYx%2F7eIFi8q0tg44sPhx4j6VXLiMsFvlo9IJbtUvSxmv83PmOc57avSusRz1p6sFAwXOMnSRr8jYQqifI5Zm13SIBow0rnviUCCG18yYCg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a132b438cb6d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":708,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-30T05:37:37.181685Z","times_seen":292624,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.574Z","timestamp":1782712754574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 02:33:33 GMT\r\nexpires: Fri, 25 Jun 2027 02:33:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 357941\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23664,"size_decoded":24477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-06-30T05:04:37.624989Z","times_seen":14836,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":2,"connect":32,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/LangLabel.vue_vue_type_script_setup_true_lang-CHDD9aG6.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.197Z","timestamp":1782712755197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-CHDD9aG6.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354259-22b\"\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eh58hG%2FROmV86Wth5QZdsl9YbXwIIQtSHj4s5QhIDhiQA%2BEDddkAiQtf%2FClVTrtrNreE1SWxLxPst43K%2FrVYvR13crpw1aZ2ugJilH41Ht5vC6oEa6Y748XrMbRu7rUDIFikdg%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b43ffbb356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":1133,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"0e72a5c71790243df2ac22d59672e7fe","sha1":"f849d4f7d4140099c7ea182535fcecb077a83b23","sha256":"9e222055791e0a26ed846af0725d26e5ce9204f62cf423bc08b1426cbb0b7a9b","sha512":"90e8515a95fdc8a0ee2f529ec70149bafb8c64062c7ea16fe67fa081ae16e99654c9e11cfc2de3fa495d9f60183904d09bae6f4ea1b83b1d1891ed2b5286370c","ssdeep":"","tlshash":"29f0eb6f18218770c5b648587a97080010491f6f6324ea40e2da9e135fe386cb3feb24","first_seen":"2026-06-26T06:31:58.823625Z","last_seen":"2026-06-29T05:59:40.701788Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/PhoneSelect-Cf1q6s6f.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.217Z","timestamp":1782712755217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/PhoneSelect-Cf1q6s6f.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-3cd3\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ar881B7z2XovU3xFl8ebSoEyiwQQmsjiilWId6FcSM7bOSNniWgoTvE29fymbj9ZUGKlAto%2BZWtyz%2FOevActO%2BB8eZMXB72bVcV3M6j71yvTIvFtOqbUeDl648yfl%2FoUc7MB%2Bg%3D%3D\"}]}\r\ncf-ray: a132b4401bbb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":5411,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"6e4d0b333b1ee28b5106a1133f284b43","sha1":"0c74f2718d8d91dee4cd0409ad0daee28407482d","sha256":"4366c8d5a786767ebc808b0e80f4c34cf96e5b01d3add460fe9122b599dd96c7","sha512":"0f51a492a72c3abcaeb940a009bf4cd6010b4a1554bd797a8a8e5559914e77ec764515f44c72ce79c9376c09b8857f666860c9d181ee535425bccd747d73cc8b","ssdeep":"192:hxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFhe0:hxj5a28wa8H5tnzxaF","tlshash":"6662bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf536259a00e7b5cb65c","first_seen":"2026-06-26T06:31:58.816407Z","last_seen":"2026-06-29T05:59:40.702425Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseUserTab.vue_vue_type_style_index_0_lang-DWTRG20o.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.225Z","timestamp":1782712755225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-DWTRG20o.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354259-3b4\"\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84lyO8Qwh9ouaAE%2BSI7%2FvYALfaU0tzZyko1QLgjp0S7FKkufBZZrdXWUknsxixJvIa8CkELOZja2bfUnFqDKIkL6mNbaVbueVoffrleGTIlXYPDpO%2BOdawzOLvZdEvDBO629TA%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b4402bc056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":1364,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"de7e7810e7d86e242da1c767585be608","sha1":"6688f70c22da10024fa97604a0c72ed28295725e","sha256":"051c55f84dc0f390dc107464b63a21a0035cfdece2b804c6f7165fb0bdd120bf","sha512":"f7b64c8ae24bb24d7367ba4a543e17ed8cc7fc1fae309da76547580390106dd35a345ef66130737c2f9554044d68566a54aeaa85114be69708f72a45866e5e60","ssdeep":"","tlshash":"b911888d9cb9cfb604f204e82f975069e095bb4d97108916d09e5421335fcf8f59d328","first_seen":"2026-06-26T06:31:58.817317Z","last_seen":"2026-06-29T05:59:40.703042Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/BaseUserTab-DVdcH4fp.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.226Z","timestamp":1782712755226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/BaseUserTab-DVdcH4fp.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\netag: W/\"69295ce5-dc\"\r\nlast-modified: Fri, 28 Nov 2025 08:27:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaW6N4%2FzqPE9uTxTAgyL0zcJo%2FxS346%2BRcf3tb6j%2BwhJuJnoXBYFQJnJQc1UZ5fd0mhwq1Z03eO%2B9lwq6TZtDtpYva8c7IPhOZIy6sU8Sq%2F2jIqqgJOt4SdYA57TktgMpGf73Q%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b4402bc156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":881,"mime_type":"text/css","magic":"ASCII text","md5":"2571e9c1678f7890b2944076ddacb4af","sha1":"d36697fae0e1aecd7f151e50ea3808c9f155e5f0","sha256":"d27ee7a4a4e398c3fd2bb36d227fa8d1a2c0d648ababbf68b900c279709230b2","sha512":"6c1a50c9b8cc632500a99e5ed2e7b6b4f1ef621db803b52a9c4a59fbcf03bd6fce5ae57bda4b07f1b4bef632dde82ace2b87e26ebbf6a3aeaa64b620a5147500","ssdeep":"","tlshash":"37d0a91c0894f0be28c9b2a81fa852dc08aa2205fe035fa83024bd2101d6af5213bc6f","first_seen":"2025-09-11T15:59:47.603631Z","last_seen":"2026-06-29T05:59:40.703608Z","times_seen":104,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/home?d=1782712754583\u0026language_type=en","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.585Z","timestamp":1782712754585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /api/public/home?d=1782712754583\u0026language_type=en HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nst-ctime: 1782712754583\r\nst-ttgn: 60f9d8384dcaa6e1c38fa0533566274d\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iu64Jb3A4cCJkyjcU4gHFM3sy5RxZD2P2T9EHjjSQaKjgHP1dFbNxUVYfVlvv9hPwPIze7AubDprdw2yKlEVuVTArDsy7mH1pGZqBia4te%2BTJoTS8MpfrbpRKLJqI9FSGQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a132b43dfb9c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14203,"size_decoded":3963,"mime_type":"application/json","magic":"JSON text data","md5":"c99906ab9f7a1862ba6612c4722d2f27","sha1":"fc527d6770d9bf20c69455691e6e83d6a811e7b9","sha256":"0d4dc4978d226434ed4be08d0b0a5a053acc5b67607ff5d44382e3d506ef5f33","sha512":"9b9d28337455409c0397d572e33178c0c74c6b97160a5214bb0ae7156c12bc3b8d3bdf2eaa293321e7cd9989a10f55c8285f11dfc23e984533c4bef3d60c678b","ssdeep":"384:v3LzE7no4ORbPbBbimb6NWcwFC2ruhRYcr:v3LzKzORbPbBRb6NWFFC2ruhRYcr","tlshash":"61524553156b4820caf326c93fceb186227db16e1cc86dde9f798f6901c4856237f582","first_seen":"2026-06-29T05:59:40.704257Z","last_seen":"2026-06-29T05:59:40.704257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/ContainerForm-DXW8lGX2.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.206Z","timestamp":1782712755206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/ContainerForm-DXW8lGX2.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a354259-169\"\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAQ7RDyy6Hh0M%2B8aAWl39FoI%2FLHaZITSZFHPGZgyIvjuFvwM7337%2B1TKCGPbUg%2BNUxx8FbqmOKM%2FqD1IwMae%2Bv9CHaT3J9Dn%2FCya6McibosGVpqblfzPPj6JIPkC7VMOpF8wfA%3D%3D\"}]}\r\nage: 200\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a132b4400bb756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":960,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (360)","md5":"35f4e403a406c390f5870fcb939955a3","sha1":"e07df0910aa0a6b5938b1c7d73ee5580f31cd1df","sha256":"04f60e4912460ef342e9caf997e2d349609baf3b96f401ba70ca1b97be56c020","sha512":"2529b5a61de57cdfb0e113b4d3b8da8f02d4b55fd06c642b3f94f348c74beff783c7a47067d77c50af38e7686cdd3256f62df32530abdbffe7106e92d11ddf32","ssdeep":"","tlshash":"63e0d84cac51e275d061469d22731452e51f3eaa72bc5947609a806a2f6546e621ff08","first_seen":"2026-06-26T06:31:58.839418Z","last_seen":"2026-06-29T05:59:40.705818Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/upload/img/6a3614eca6c6.webp","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.593Z","timestamp":1782712755593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /upload/img/6a3614eca6c6.webp HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Jun 2026 04:19:56 GMT\r\npriority: u=5,i\r\netag: \"6a3614ec-4428\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 201\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLApl6Y86ZVTfgwSVtSW7H%2F7yZfzX8bQArNZkH2VVuTnfxDS5xa7c7dd%2FOQahedgcdmWGLM%2FBAbCrNW%2BVbc9kR3%2BDC9p6DzGBLBaORuOkX%2FNG2we%2FfUE4PwGlzoV%2B4VWJw%3D%3D\"}]}\r\ncontent-length: 17448\r\ncf-ray: a132b4427bcf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17448,"size_decoded":18204,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 669x661, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c29f4a8c345fbfd832eb5a2e55dfb2a3","sha1":"d8d6c44fffde7b0547b348c4dfea262d70e13502","sha256":"dcc8edd89f933a983e3330cbabaca1cc4845a4ac6712585d23c8a711971a0841","sha512":"0526d73d990e516102f2ef2ecd9e991f76d83c0e4780732974a79f2069011ee1c630be9d556e21a37ca24d625080b4e7a6ffaf8f13fa4f7a530549ae38476374","ssdeep":"384:bn1DWl0U1DuMrf3xvYlrgx6dwckNGkAxQr1FXN1SHE0DNc:bntWVP/5YlrNdCN51F91tS","tlshash":"d572d09724cf97bfcb856eb716b2370c41b0b87c44ec96d21c9b34a411baad23ed1164","first_seen":"2026-06-26T06:31:58.81446Z","last_seen":"2026-06-29T05:59:40.667878Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/#/reg?invite_code=838454","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T05:59:12.833Z","timestamp":1782712752833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfAT1JK1sAezgHxT1gkpp7Ju76Rw34b88%2BkHBGO50oGxgoOs%2FcjmtGXirKG8CZVmHtYkyc208zWdmaH72k%2F6pBLEeBQfmYcEHvWND34C9PqLVqattrYueL1qKYO5NfalfJDrUQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a132b4316b4556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":3659,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8467e43d54f91733ab85fd582036a393","sha1":"dd977ef4f54794b6966bcd23673053cdfc5af8ca","sha256":"1543e7a684b02d9bbc8750d0ec009670da1ebe4f5f059b3b7bd56d221d0afb37","sha512":"fdbc253a2d26bfc3da2af6e31a18fb96c3c3703f10c287c178a1585d12b9e86d2eedd9453cdc918fb1994e2c30898efc7589e18a67c3fd515e36c0dfbc570c3a","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6c9:xYKkBzsju8pk9X+OIjlYAuN4qLlz","tlshash":"f8221f5b2ce66028631370ba8d7ff50a7621001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2026-06-26T06:31:58.824584Z","last_seen":"2026-06-29T05:59:40.706447Z","times_seen":4,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/upload/img/6a3614eca6c6.webp","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.993Z","timestamp":1782712754993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /upload/img/6a3614eca6c6.webp HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Jun 2026 04:19:56 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3614ec-4428\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuJFYBQjGWHyEIr%2BQLZE%2BLI3DQ5x6LfcrvhOkq0IWGZQeTgJAQ5eKnVzZDtwRooDTHLoVUwXCD3GWr09s5WwFV87k%2BErXmqLoywkVZ4JAXgHVgKTL0Hqp43QdxMCmud0Zg%3D%3D\"}]}\r\ncontent-length: 17448\r\ncf-ray: a132b43ebba156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17448,"size_decoded":18197,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 669x661, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c29f4a8c345fbfd832eb5a2e55dfb2a3","sha1":"d8d6c44fffde7b0547b348c4dfea262d70e13502","sha256":"dcc8edd89f933a983e3330cbabaca1cc4845a4ac6712585d23c8a711971a0841","sha512":"0526d73d990e516102f2ef2ecd9e991f76d83c0e4780732974a79f2069011ee1c630be9d556e21a37ca24d625080b4e7a6ffaf8f13fa4f7a530549ae38476374","ssdeep":"384:bn1DWl0U1DuMrf3xvYlrgx6dwckNGkAxQr1FXN1SHE0DNc:bntWVP/5YlrNdCN51F91tS","tlshash":"d572d09724cf97bfcb856eb716b2370c41b0b87c44ec96d21c9b34a411baad23ed1164","first_seen":"2026-06-26T06:31:58.81446Z","last_seen":"2026-06-29T05:59:40.667878Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/useAirDropRank-SLjq3ZcP.js","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.191Z","timestamp":1782712755191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/useAirDropRank-SLjq3ZcP.js HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-bed\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp4%2FSJVeJTWGe6Ce3ObT2NnZnLUnWAawT37dVP5P2a4D8dY15m2GaWEZzvpu3bF9y252tspy1SvRnA4PbHWIiKKRIEjwCICBa%2BBWxjEqPOu4ZKbLeISWwmAnUoYVrKuNQz8UsA%3D%3D\"}]}\r\ncf-ray: a132b43ffbb056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3053,"size_decoded":2053,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"9ab0cf21a35894dbddb821dde0761f60","sha1":"a433496105c7a6414695c922bb716754c608ff69","sha256":"be99558fbfc762230aedbf96b47012c5f3c0d19eedb04a9dcd751ebaf6f8fe39","sha512":"d047799190f8afb3561ee2050da2e868a9762971ab7941d6f6aabefaf3e26321b2f8fffc8aef3003a8fb54da869129a6bccdbdb77e37b3ad32f85538a15928f1","ssdeep":"","tlshash":"9a51872c709432b9837ee4b490da4b1681923f05391b9ec1680f6c4a777ccc6f775e85","first_seen":"2026-06-26T06:31:58.829084Z","last_seen":"2026-06-29T05:59:40.707086Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/ContainerForm-9KkiXSOC.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.209Z","timestamp":1782712755209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/ContainerForm-9KkiXSOC.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 22 Mar 2026 13:38:05 GMT\r\npriority: u=2,i=?0\r\netag: \"69bff0bd-2b\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMKCpb6ioA6ATxvtPqpnTHYbivWxYO8EXTYwnI2Gb9ipOq31gvMSE99BPs%2BTm4yJx7hLvqh4RGPOhY3jZRlpavOLRKjgILVoZQcrnJL%2BVhm5zp0DYJv5Epmm2Mmy3eej7vkDgQ%3D%3D\"}]}\r\ncontent-length: 43\r\ncf-ray: a132b4400bb856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":782,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-06-29T05:59:40.707674Z","times_seen":197,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/index-BS17_dpn.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.215Z","timestamp":1782712755215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/index-BS17_dpn.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Mar 2026 13:38:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bff0bd-8ed\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dxcHKW9WeZGXF0GsAaVc2EenpjKHrle2mDeOvScCfToQjJrCVu2qnEClavjAy0uvt8lqciK%2F6MvdJroPJrrwvgD4%2Fanl5cWa%2BHOfq9cuqoPoz47HEYe37RG9dzKwEKwufYpqw%3D%3D\"}]}\r\ncf-ray: a132b4401bba56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":1419,"mime_type":"text/css","magic":"ASCII text, with very long lines (2284)","md5":"1d05703cce897c29046715d007d74f1e","sha1":"53d486c3551997abe790771033ef1eb46057fa39","sha256":"e65540440b381d92458aff168ed8c0983537fca5b685f13755aa4aeb5f2b3902","sha512":"7548561c6089f474e0451bd1227ec62095e17b54287c4b544df0bc1e460744eab1615d25abfd76b778dd202e627f4bcc722e5467e858d4ee0dbcc305cd1dda54","ssdeep":"","tlshash":"7a41d467daa045faae33a5950f5585cab13ce9208e00df72b580d11c8dcf6f626136ec","first_seen":"2025-04-22T04:55:21.194396Z","last_seen":"2026-06-29T05:59:40.708262Z","times_seen":73,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/visit","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.598Z","timestamp":1782712755598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://qigdmy.hzut41.com/\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AqKjN5osZrE3pr4D5bI%2BB%2F70L3WvDKS6rmnJyWcnvHW6kj98pTaa2Yrsc4CthXfDYGYHAN3FGMQx9hKAOwfY9pSc0fY%2Fmpm%2BH6Ojy7JXNxdVqkDKukw8O6%2Bl0HNffpyUg%3D%3D\"}]}\r\ncf-ray: a132b4427bd156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T05:32:23.484642Z","times_seen":16847014,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/star-sky-BSNOjsrG.png","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.602Z","timestamp":1782712755602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/star-sky-BSNOjsrG.png HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/assets/index-DkfmkrW7.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Nov 2025 08:27:17 GMT\r\npriority: u=4,i\r\netag: \"69295ce5-e147\"\r\nexpires: Wed, 29 Jul 2026 05:55:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kVZXezoa8duAtBmudK4epEyG%2Bo%2BeVW0B0hRH%2Foj4OzM9dx4PR38p1C6RErO0JqxMj1Azi8ZMdJVpHbj4ASaFPkD03lQgqI6wXh6GwxVTbUGwhvfoEYXkaxKa9SzIZE1nV64%2Fg%3D%3D\"}]}\r\ncontent-length: 57671\r\ncf-ray: a132b4428bd356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57671,"size_decoded":58419,"mime_type":"image/png","magic":"PNG image data, 1024 x 634, 8-bit colormap, non-interlaced","md5":"814308437a9d767385f6997c89c5e18e","sha1":"4ce561c86e1797aad37b38460d4a6c2f056a8cc6","sha256":"70243c216383accd1b9398d395385088e92d434e2ba07304abda32a4f535efbf","sha512":"970f4b59a8d385b36ed8ecd441acbf881ad94eafb9c10f6524f05dc7f249bc6764764b6d7a76df673264fb9507c973d4e9bbfd5528f68ae5ee983eca871311dc","ssdeep":"1536:3LswFSEt1UM9U0pJxCPqidHDptT+zCzvd570X:bs7EYAU0pOC+H6z+d570X","tlshash":"7a4302b45aa812cbe67e6483d46fe4d40101bdfdd38dc658f5e310cc2350ba689f66ba","first_seen":"2024-10-12T13:51:31.530327Z","last_seen":"2026-06-29T05:59:40.70891Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.623Z","timestamp":1782712755623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 02:35:31 GMT\r\nexpires: Fri, 25 Jun 2027 02:35:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 357824\r\nlast-modified: Tue, 09 Sep 2025 18:36:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24356,"size_decoded":25169,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"8ca0a51552960933d0fd52c19175cbe9","sha1":"5197a7aeb22454110aa1f3ef3ed4c98ca7ef1ba1","sha256":"6f56409fd3d64bb85f7d070bce20749db2d66b6d63cec586cc22d1c761be2491","sha512":"90ab60c6717c27109e8b818e17a696f8665b2fa6247dfcd13a8eb22027aad26ab7becf08e3260bffa8ab3e97d7b1e09830f7d59652c28ec6af13cf925a176393","ssdeep":"384:18j7oxsH+H811z2d2GksjGcVQbNTw4W0LclnfWf7xN5mmOFbxOBAeVLLRIDqGrdt:Y7B1h20GkXRTw70L/pmmybCAaBZGBprf","tlshash":"d9b2e07b99dfeba1dde7def5252e0480ca6c80d06380a6fa135c51b7f50b80710af989","first_seen":"2025-09-20T14:27:23.117722Z","last_seen":"2026-06-30T04:15:16.000415Z","times_seen":3981,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/get_lang_json?d=1782712754573\u0026lang=en","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.578Z","timestamp":1782712754578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1782712754573\u0026lang=en HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nst-lang: en\r\nst-ctime: 1782712754573\r\nst-ttgn: 492f8ce5f771ac77ace9579a9931621a\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p6os3bKmVzDsrhSVyQ79Q8d25IXS9PJTCiqDzoTpD035j0KZ5zcwlLGGew%2Buf2Oxd37ptz97aSDcog0oMuvwwUG8zxJ7C%2FVUH61jPXPS4glzhsT6goIfz3b6vTlRc2%2BaEw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a132b43d1b9656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23853,"size_decoded":9700,"mime_type":"application/json","magic":"JSON text data","md5":"835fcef6ace9195121fabdfb91b5b128","sha1":"b96f93f915f16a711b3be6ac5359aff21de67c61","sha256":"402e965df2bdb390495dfdbf7a54d10512f42ee484196c513db9a9bfa44964ee","sha512":"143a0b2538e51961f782ccc77e301bfe537606c3746569f217be106ff6ac42e99ac4c443e79ae28d3cdb6245d642c25b8e087f711796b70eff1daf0642a01ded","ssdeep":"384:zod/dCd/Eo6mmLA+FZonH3SbOXDl+7TvAZ6SWiqcq5Wubs6McuW5zJXUb4UVcuWP:kVMmLANSl7TvAZ6Zc4W8sHlTb4UVcuWP","tlshash":"81b2d58925631eb7dfe617c174bb2e1626fc52e342c9484a8ced8d2811d9f48f23f51a","first_seen":"2026-06-09T09:38:27.838421Z","last_seen":"2026-06-29T05:59:40.710155Z","times_seen":4,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.hzut41.com/api/public/get_lang_json?d=1782712754573\u0026lang=en","fqdn":"api.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:14.580Z","timestamp":1782712754580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1782712754573\u0026lang=en HTTP/1.1\r\nHost: api.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://qigdmy.hzut41.com/\r\nOrigin: https://qigdmy.hzut41.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:14 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://qigdmy.hzut41.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1ltOqBzYGbACp1AQInNEMFb1qWgdrDlJAJtwsmfxxIyZMct8OX9B94ZGW8uXfOeVXdBFaPMonhLP2iCwJzD9rFTtQf5nvSqPCn5a1tPjvsJfvxYTkIkCAgvdKwxGijsCQ%3D%3D\"}]}\r\ncf-ray: a132b43c2b9156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":793,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T05:32:23.484642Z","times_seen":16847014,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"api.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qigdmy.hzut41.com/assets/default-BFB_8mtt.css","fqdn":"qigdmy.hzut41.com","domain":"hzut41.com","tld":"com"},"ip":{"addr":"104.21.20.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qigdmy.hzut41.com/#/reg?invite_code=838454","date":"2026-06-29T05:59:15.201Z","timestamp":1782712755201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hzut41.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 12:59:20 GMT","end":"Thu, 17 Sep 2026 13:58:03 GMT"},"fingerprint":{"sha1":"2F:6A:38:39:3A:4A:DC:11:CE:27:E7:D9:10:CC:9A:4C:B8:86:3B:E4","sha256":"95:39:F3:55:5E:E8:D2:E4:66:DA:29:8F:AC:66:DF:EA:24:38:4C:A0:FA:2F:43:69:2C:02:E5:05:32:B7:46:44"}}},"request":{"raw":"GET /assets/default-BFB_8mtt.css HTTP/1.1\r\nHost: qigdmy.hzut41.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://qigdmy.hzut41.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 05:59:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jun 2026 13:21:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a354259-1cdf\"\r\nexpires: Mon, 29 Jun 2026 17:55:54 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KA9bCcNMu7Igbm864hRlcHN8kqLxUU0A3Wg0igQKORAQr%2Fy7rLKiG9hAZrvLuFY7l7Efb0%2B3tik8cTPgvyNDHc%2Be4430mCeQ3bsyyLoxl1lwmagy7h3uhinVcV2omz13feYyZA%3D%3D\"}]}\r\ncf-ray: a132b4400bb556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7391,"size_decoded":2245,"mime_type":"text/css","magic":"ASCII text, with very long lines (7390)","md5":"729251e83733a4a9376f82e27d65b715","sha1":"05bcaddcdb9a5665b970167216525462a2a8452b","sha256":"1a75f87a0486a2c18b81ca972055a0f4d10d5742e703aa1a9d85130f76fb41a5","sha512":"427654a40d46de431b6c40caf40eba179c1558e11909b43da238f4521be986ea96be99dfa33a5a3336049a7459ed5b34fcb90c06b6a51dc876e33a2b0a259caf","ssdeep":"96:dbUkat9lAqhvtjr33m8O+RrVG1mhg2/z5ZJwyksVuVw:dbUkatjtTf33m8O+hVGg6C1wyksVuVw","tlshash":"69e1af142438732e9a77f1a765ff518c4824e652da636b8eb313b50059e7b933132bcb","first_seen":"2026-06-26T06:31:58.815462Z","last_seen":"2026-06-29T05:59:40.710791Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"qigdmy.hzut41.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}