{"report_id":"4a876bb4-c49b-4562-a772-9c255352a264","version":6,"status":"done","tags":[],"date":"2025-06-16T11:24:37Z","url":{"schema":"https","addr":"dmareqc.cc/aqe4wgoasqnl.html","fqdn":"dmareqc.cc","domain":"dmareqc.cc","tld":"cc"},"ip":{"addr":"77.246.105.208","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"dmareqc.cc/aqe4wgoasqnl.html","fqdn":"dmareqc.cc","domain":"dmareqc.cc","tld":"cc"},"title":"Sign In"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T11:24:37Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"dmareqc.cc","ip":{"addr":"77.246.105.208","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-06-16T11:24:37.543125Z","last_seen":"2025-06-16T11:24:37.543125Z","alert_count":3,"request_count":2,"received_data":1234678,"sent_data":899,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gimersilok.com","ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-26","domain_rank":0,"first_seen":"2025-06-16T11:24:37.544467Z","last_seen":"2025-06-16T11:24:37.544467Z","alert_count":0,"request_count":18,"received_data":6005,"sent_data":9282,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2025-06-15","alert":"Steam","trigger":"dmareqc.cc/aqe4wgoasqnl.html","verdict":"phishing","severity":"medium","comment":"Steam","link":"http://phishtank.com","meta":null}]},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-16","alert":"Sinkholed","trigger":"dmareqc.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-16","alert":"Sinkholed","trigger":"dmareqc.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dmareqc.cc/nwqrgqxtolgg.js","fqdn":"dmareqc.cc","domain":"dmareqc.cc","tld":"cc"},"ip":{"addr":"77.246.105.208","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6f85d50f0278096ee32c72a10a95452","sha1":"939eb7cff997d423e81c82f0b505f1f27b727a8a","sha256":"ff64685a4cb2c79b36de45816fabf1bddda2f59bfe5362814792f3ce8f614a36","sha512":"3f17d2e62bc3793d339440d916f379d6d76da7aabe5a77ce49551787a2dae8cc35c733303582d3a7a6d6b997687bb6eb493d661046f25faeeb6f5c521ad3bd96","ssdeep":"12288:1BLiznb8Gs8KJ/C7RvMBUhAH5srCIOhcPbmZJ9w91K4LBpiancuUCLCJ1fAcD:OoCAZs+iaUt1cuUIED","tlshash":"f2452c705a80e5ec079f8f26b71676d4fe16085be9184ccff990fc9468aad06e5f81b0","size":1182290,"data":"","first_seen":"2025-06-16T11:24:42.181704Z","last_seen":"2025-06-16T11:24:42.181704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dmareqc.cc/nwqrgqxtolgg.js","fqdn":"dmareqc.cc","domain":"dmareqc.cc","tld":"cc"},"ip":{"addr":"77.246.105.208","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:15.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmareqc.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Jun 2025 15:49:02 GMT","end":"Wed, 10 Sep 2025 15:49:01 GMT"},"fingerprint":{"sha1":"97:A3:55:8B:F4:F6:87:3C:D3:9B:0E:70:3D:36:2A:87:C6:CA:0C:28","sha256":"EB:84:22:9C:F3:48:05:62:2D:4E:A1:8E:C7:4D:50:64:42:D8:1C:BC:5A:FD:EB:EB:54:81:89:D3:8C:E5:E9:49"}}},"request":{"raw":"GET /nwqrgqxtolgg.js HTTP/1.1\r\nHost: dmareqc.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/aqe4wgoasqnl.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Mon, 16 Jun 2025 11:24:15 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sat, 14 Jun 2025 23:44:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"684e0949-120a52\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1182290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d6f85d50f0278096ee32c72a10a95452","sha1":"939eb7cff997d423e81c82f0b505f1f27b727a8a","sha256":"ff64685a4cb2c79b36de45816fabf1bddda2f59bfe5362814792f3ce8f614a36","sha512":"3f17d2e62bc3793d339440d916f379d6d76da7aabe5a77ce49551787a2dae8cc35c733303582d3a7a6d6b997687bb6eb493d661046f25faeeb6f5c521ad3bd96","ssdeep":"12288:1BLiznb8Gs8KJ/C7RvMBUhAH5srCIOhcPbmZJ9w91K4LBpiancuUCLCJ1fAcD:OoCAZs+iaUt1cuUIED","tlshash":"f2452c705a80e5ec079f8f26b71676d4fe16085be9184ccff990fc9468aad06e5f81b0","first_seen":"2025-06-16T11:24:42.181704Z","last_seen":"2025-06-16T11:24:42.181704Z","times_seen":1,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-16","alert":"Sinkholed","trigger":"dmareqc.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cuqxhfyhehjscdlnk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:20.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /cuqxhfyhehjscdlnk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:20 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/clmphpllejapcpbmk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:22.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /clmphpllejapcpbmk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:22 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/clmphpllejapcpbmk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:22.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /clmphpllejapcpbmk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:22 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cmrihutlecficbzyk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:28.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /cmrihutlecficbzyk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cayphqelefpsckdik","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:30.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /cayphqelefpsckdik HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:31 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmareqc.cc/aqe4wgoasqnl.html","fqdn":"dmareqc.cc","domain":"dmareqc.cc","tld":"cc"},"ip":{"addr":"77.246.105.208","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-16T11:24:15.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dmareqc.cc","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Jun 2025 15:49:02 GMT","end":"Wed, 10 Sep 2025 15:49:01 GMT"},"fingerprint":{"sha1":"97:A3:55:8B:F4:F6:87:3C:D3:9B:0E:70:3D:36:2A:87:C6:CA:0C:28","sha256":"EB:84:22:9C:F3:48:05:62:2D:4E:A1:8E:C7:4D:50:64:42:D8:1C:BC:5A:FD:EB:EB:54:81:89:D3:8C:E5:E9:49"}}},"request":{"raw":"GET /aqe4wgoasqnl.html HTTP/1.1\r\nHost: dmareqc.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":654,"data":"{\"epssw\":\"8*yTasDC13q5sajV5uA6DtOCDtu769826sOifO-X9Ts6iQ-8dQ0qWX_KTDHNsdE84M1vi5WdAxmF9UnGFOzfGCUHL_8pvGne7PoLKinFH6_yVnHrGzzfpDRgdlovvxgg2jz3pUiQL_raEVNSHu79FTz3yoo9w57SsyFACEGSUaGXNNArBedjcNCjU_zqAvcA_XCG1lIFjApHEKfap3-O9EB-QtHFpdsxjAssso4ArC1GFlxlgM_s6hONCcivaJtkEbBEC7QOy3FJFHug1yA0kRssDbO-rbc6B-VCieXKndb4c_DBsshRjE-zSEHFFU-z0V7sFU3G0tWyd63G0tpknFOW1nVF4MYFZyJnxYjBeDJWDPOndeJOEssRf9YeTz2jiqx6xxb-i_bRSF2fZeLwPC6KkVSWEklQ7y1LnUZ5fZpDbqcIZBtRXtzOftOW5JvFrqBdxPOHiRunB_RzftuDBzDsaz9OysssDtJOyss_-Q_Y-Vx7Qv3ahVMr17w3hHh7J4xneCKeCCm6JSUNC6j3tTIsJ17ZZw27_0t9YkzBA3sns3hx0vwBhT-kX08aDRs4IgWyp3bR923Z02HCwDqEQ2HCqwk6IO-m1h3SwcoLzn7gZR9COTO5WOcFFfOObKuWb.\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Mon, 16 Jun 2025 11:24:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 30315\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Jun 2025 23:44:09 GMT\r\nETag: \"ca53-63790bd346330-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51795,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (51411), with CRLF line terminators","md5":"c2c54358bd4a9b4a2b4a6f471d79115e","sha1":"3171fa0975b0255b15dbbda1fe6a05ba2399429a","sha256":"69c0bdb36ca0e2619747346d1ef3f1f3084408711681990e1ebc5ffd757ef73e","sha512":"2d7d2f75d8347418398439341c2b6a1ea5766b9c9daabe956917fbb30efec37e35ca709b4e5e65f59cfda1f5f15f2c6bbb6615161ac23d55f8147b6fb1ede0bd","ssdeep":"1536:4G9/ngwT22Cjfr6h1ZDHa5KQyRPBXy1UzS:t1gwaf6dEURocS","tlshash":"1e33c17076a0591cdfdf8f7a89915e501e379cdbf847a854e32e348a5a40ee2e9dc380","first_seen":"2025-06-16T11:24:42.184618Z","last_seen":"2025-06-16T11:24:42.184618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":86,"dns":18,"connect":29,"send":0,"wait":58,"receive":5,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2025-06-15","alert":"Steam","trigger":"dmareqc.cc/aqe4wgoasqnl.html","verdict":"phishing","severity":"medium","comment":"Steam","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-16","alert":"Sinkholed","trigger":"dmareqc.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cuqxhfyhehjscdlnk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:20.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /cuqxhfyhehjscdlnk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:20 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cayphqelefpsckdik","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:30.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /cayphqelefpsckdik HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":703,"data":"{\"hit_type_name\":\"index_index\",\"hit_type_label\":\"\",\"hit_type\":\"page_view\",\"pv_id\":\"CCF68EDD-F3F1-F5B4-A2B7-05510132D421\",\"oemsaas_global_visit_id\":\"DDB73880-07A7-E539-CE20-F90D2750A04B\",\"landing_page\":\"aHR0cHM6Ly9kb3Z6aWdndGF4anJpeS5zaG9wLw==\",\"oemsaas_global_visit_session\":\"3864C043-E4C5-6946-957C-30465A7329AE\",\"store_id\":148017,\"document_location_url\":\"https%3A%2F%2Fdovziggtaxjriy.shop%2F\",\"document_location_title\":\"11111111\",\"meta_keywords\":\"11111111\",\"prev_url\":\"\",\"data_from\":\"\",\"vid\":\"43d9b9a5c9f58db4d0a11dd17ddff80b\",\"rnd\":0.3407960919786004,\"shop_client_timezone\":\"Etc/UTC\",\"shop_client_broswer_language\":\"en-US\",\"shop_client_screen_size\":\"1280X1024\",\"shop_client_viewport_size\":\"1152X921\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:30 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cntfhkrbencwcebgk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:16.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /cntfhkrbencwcebgk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 202\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":202,"data":"{\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 70\r\nETag: W/\"46-akuGEspDVsgEVbxTLA0dDbyn2BU\"\r\nDate: Mon, 16 Jun 2025 11:24:17 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27225b02f17e156e7e81c8a4a87ee579","sha1":"6a4b8612ca4356c80455bc532c0d1d0dbca7d815","sha256":"8176094b14c7a81cdcadd5a893ef91c211b3502712ee08550367b5ee321636cd","sha512":"8ae0286e632d6b34d4037f61004396b6a970f80889ea9e312e107186102307ebc1a6a155cfbffaa10941d86da763e4dc4ad8612e1cc9d0135c319c7f9509d704","ssdeep":"","tlshash":"f6a011b30a830a28028203000b02302aaaa08c82880c3220ca88882020320a8c202a2a","first_seen":"2025-06-16T11:24:42.185729Z","last_seen":"2025-06-16T11:24:42.185729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cntfhkrbencwcebgk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:16.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /cntfhkrbencwcebgk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:16 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cltkhbvoetnecbpok","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:24.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /cltkhbvoetnecbpok HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:24 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/ckqmhqlveleycknwk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:26.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /ckqmhqlveleycknwk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:26 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/clyxhmweektvcfyik","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:33.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /clyxhmweektvcfyik HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:33 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/dpctjhpmookkbnwwckmivyppdvfakxxzdfxxikcvbhexen","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:16.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /dpctjhpmookkbnwwckmivyppdvfakxxzdfxxikcvbhexen HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 52\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"{\"d\":\"dmareqc.cc\",\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 48\r\nETag: W/\"30-X2DtVDYcIhBKMLenE2fAyhd9NXo\"\r\nDate: Mon, 16 Jun 2025 11:24:16 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30f39e5b41c57930bb3c3f4dc13aea3b","sha1":"5f60ed54361c22104a30b7a71367c0ca177d357a","sha256":"b90180d55b34f4ac62d0584964ac6d8fb92605829acad8ca4e235c2133550276","sha512":"591fe437d6cf83125fd617163c0a48b5f99ab09ca6e6b5a736183a4fa53c5009f510b6a980a0543cea36c96b9cc1960b8ca88708c387f7fb3c1773d3d2a0cffd","ssdeep":"","tlshash":"fd900252951051f4c5034c48015d2f04193d402259c4504af00c0dc8417001f4009137","first_seen":"2025-06-16T11:24:42.186809Z","last_seen":"2025-06-16T11:24:42.186809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":117,"connect":32,"send":0,"wait":150,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cltkhbvoetnecbpok","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:24.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /cltkhbvoetnecbpok HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:24 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/ckqmhqlveleycknwk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:26.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /ckqmhqlveleycknwk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":702,"data":"{\"epssw\":\"8*dH1sDv57Yay4H95uA6sdsxVAOvVIO1LAOiftOWtxs6iQ-m6xRspqPO_KsSrcGP1ToaFIsyAxzGcSzm42qNlnx4L_8pTMoZdlGmy8HuYGrDJnHyUVxl8KuJ_XovCb_o1EBmuAuJ_XovcVN06-nXRGnezGGxpehVapFACEGLcNrFtNAyjypXH7srkXUNwBuQL_CG4swrBs3o27NR9Q-O9EBBBuOWftOijAsssmpMrf4WMPo-FwK-rbBkpcX8ouspMj6kSN-phVyMFHHiGUxVocssuEgB6hc6B-VoycMSDdbZotlz6h7xrh6Z33hdFUQiqEHifh3G638RL2QxGtpsUs6dAjmy4Mv2EjQrTt0adzByuD_npez-ft6sDPtvSGLjZjEe5uf1W9rGhP9k4rcCrQD0Lu_UfQfHIG4VO5890NkjWYZtHuhVWUPC8iiVibGm6jNp_14j6qNWTPNA1UqVOepSk9yulYoOqGyBurJOyssR9IfFs6B-ftEYOirs9zunPmrc-_unPiOnpJO6PtO6ss_npJe5YZ8N48GBoPTreCh0y633CHRRZN-Etw2VUYt0TGWKC1DNeOq9vCUExfo95IjsNG97HiScgY-fL7fcAk-Yb3yitOGNcXOW4WqXLE0CkwdCbIA0o-GBCDtfUK_69_slFjKub1StCKHmQsEw-OOOQfOa..\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:26 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/cmrihutlecficbzyk","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:28.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"POST /cmrihutlecficbzyk HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 260\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dmareqc.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":260,"data":"{\"QRChallengeURL\":\"https://s.team/q/1/8388739804166194994\",\"domain\":\"dmareqc.cc\",\"referralLink\":\"/aqe4wgoasqnl.html\",\"secret\":710995,\"secret2\":693711,\"u\":\"s-mbz0b8ep-zet3gxm4\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"ip\":\"\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 31\r\nETag: W/\"1f-I3s4PCuowbfaTCcsbQ336f5XDZ0\"\r\nDate: Mon, 16 Jun 2025 11:24:28 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"12d25da04bc9d64db88f62168615cc12","sha1":"237b383c2ba8c1b7da4c272c6d0df7e9fe570d9d","sha256":"ea32a282a644c05ed9c1d8ce0798b080baea1d0b8c590ff07f63880b66fe65a8","sha512":"55d26a88b8a152b35012c8eef5496ee52d2f42cd8c66f343a0dc4feed0d73219ec5db010be585b6d4661f9c5eb22d3f22b60aafeb0762550fa700501732e9cbc","ssdeep":"","tlshash":"1280000200830c08288a2a800a2082232a202e38288e22e8a20e8020a0f38c0c08e200","first_seen":"2025-01-06T15:48:39.059463Z","last_seen":"2026-03-21T08:27:23.845312Z","times_seen":117,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/clyxhmweektvcfyik","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:33.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /clyxhmweektvcfyik HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":698,"data":"{\"epssw\":\"8*IrdsD46uHhCT_j5ujdpdssssu70IOvVAOiftO6rXseMyGV_5DNdjgMKplJzX1dVMoam3kpAxzGHUnN42xlFwV_L_CGFTzu7PrJY8HdH6rDJnHbbrxl19807Pra-xgwuVBmDzRG7PraE9dppdRnUTzuzGGxpehDsyFALdsyGJ_nsyzYQkhnKNCNJldlkBue7P8pwjopjAYgkPQsp3-O9EBPjdHFPO-XjAtXbS2orf4LRL_jpqNs6hONCPH5mkZKTbBOJRwpFVyMFHug8HfGkRssuEgB6hsezJJUieXKBRr4c_S6Sb-hh66ZuV7hh6-zZ3hxfhsZDyAWL2-163u61h6d7yJM1HJhsnVSCZ0BdzByuDssDnOBssJ-yJzL7pLj0nRu5ueOx9r-D59k8GB4Us5jNKOFpEfHIG4VO57JmHbLDSZtcK2fmcPC1YN_ojXh8wO5ZiMrwwP-TBPHejzA4IXMZ9oKkYyHdJtRftJOysRxAyYi-POn1VunB_RzftnsaA_YftDsDtO4Y7_nPPOBssJabvV3ev3aIbTM9utu6Hhs6TS-n5dGCCm8ZNQ-T-FMh2AWZN-Etw27_0tekc2LA5Fcgg7CyNixO-sPJV8as2-QVOIXtglW92mWH2HCj23ZZR3eUjPyMWGR8Em6ev3LROZcG2wXLi3iqOtZeb36hKuWb.\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:33 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gimersilok.com/dpctjhpmookkbnwwckmivyppdvfakxxzdfxxikcvbhexen","fqdn":"gimersilok.com","domain":"gimersilok.com","tld":"com"},"ip":{"addr":"62.84.102.35","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://dmareqc.cc/aqe4wgoasqnl.html","date":"2025-06-16T11:24:16.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gimersilok.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Apr 2025 21:10:21 GMT","end":"Fri, 25 Jul 2025 21:10:20 GMT"},"fingerprint":{"sha1":"BD:98:C6:A8:B8:99:68:17:39:3B:08:02:E1:21:3B:62:97:50:29:27","sha256":"28:92:85:AF:3D:ED:8C:D9:57:14:FC:FA:7E:05:36:0C:E7:90:3B:81:7A:6D:84:B7:31:CC:30:7C:ED:69:0C:C5"}}},"request":{"raw":"OPTIONS /dpctjhpmookkbnwwckmivyppdvfakxxzdfxxikcvbhexen HTTP/1.1\r\nHost: gimersilok.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://dmareqc.cc/\r\nOrigin: https://dmareqc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":834,"data":"{\"gmkey\":\"OTHER\",\"gokey\":\"delay=0\u0026hash=\u0026last_pos=0%252C0\u0026msg=block_h5%2520%25E8%25AE%25BF%25E9%2597%25AE\u0026page=https%253A%252F%252Fg.alicdn.com%252Fsd%252Fpunish%252Fblock_h5.html\u0026patch_ver=-\u0026pid=Sufei\u0026query=origin%253Dhttps%25253A%25252F%25252Fmy.lazada.co.id%25253A443%25252Fapi%25252FrecentOrders%2526qrcode%253D7zMJQfpn-9yiPL8PxImzeA%25257CaE_-vw%25257CwlUzrg_0%25257CAAANRw%2526uuid%253Def330941fa67fbdca23cbf0fc489b378%2526wh_ttid%253Dpc\u0026raw_ua=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0\u0026referrer=https%253A%252F%252Feagleconsultancy.pages.dev%252F\u0026rel=\u0026scr=1280x1024\u0026spm_a=\u0026spm_b=\u0026title=\u0026tracker_ver=4.0.0\u0026type=16\u0026ua=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0\u0026uid=\",\"logtype\":\"2\"}"}},"response":{"raw":"HTTP/1.1 204 No Content\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nETag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nDate: Mon, 16 Jun 2025 11:24:16 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T13:12:12.581168Z","times_seen":13705127,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":370,"dns":159,"connect":29,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}